Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/134E8868740011F18060D1F8CE1D38B0.roa
File: 134E8868740011F18060D1F8CE1D38B0.roa (raw, json)
Hash identifier: BAg/dwkWeuL2BSL2SVYdJ92WYM8tBDjFTv+EAN0rBwc=
Subject key identifier: 3B:88:0E:D3:EB:5F:16:76:90:82:D7:2F:C6:35:6A:9D:01:FC:AD:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/134E8868740011F18060D1F8CE1D38B0.roa
Signing time: Mon 29 Jun 2026 21:18:30 +0000
ROA not before: Mon 29 Jun 2026 21:18:25 +0000
ROA not after: Tue 04 Aug 2026 21:18:25 +0000
asID: 44509
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115148 (0x1c1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 21:18:25 2026 GMT
Not After : Aug 4 21:18:25 2026 GMT
Subject: CN=6a42e126-c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:8a:9b:52:f9:2c:f1:b4:50:5e:44:e7:43:
25:37:9a:73:16:68:fa:a6:e0:20:f1:c1:61:84:c9:
9c:d2:a6:fd:9d:73:d5:3b:18:c2:bb:f6:64:19:bc:
5c:20:40:95:44:09:cd:a9:d4:d1:f6:e5:b8:ba:9d:
e6:29:65:53:cf:9f:ff:25:a6:25:76:a2:59:cb:98:
ba:65:45:59:7f:aa:b7:65:53:fc:b0:bd:e8:ed:c9:
6e:58:5f:d4:82:5b:82:aa:c0:9d:ae:fc:8d:84:3b:
d7:80:9f:59:17:d7:38:59:26:8e:9a:a1:12:49:b8:
e6:86:cd:0c:2b:d8:c1:df:85:ae:a2:6d:8f:01:1e:
01:cd:b0:13:83:db:d5:8b:74:8f:8c:2f:82:d5:4a:
1a:37:97:22:85:31:74:7d:89:ee:ab:04:fa:c5:55:
79:5e:01:9c:fe:58:ad:5b:fd:bf:a5:ba:b0:1f:ec:
df:2c:ae:b8:91:89:1e:a0:d7:ad:84:46:4b:63:3a:
e1:f3:db:d1:49:f5:b1:af:5d:0a:3d:7a:ef:5d:94:
fb:e9:47:e7:9f:77:08:27:b2:51:e3:86:7c:1f:fc:
64:8e:52:c2:e5:b2:74:d8:a3:92:32:cd:3d:1e:d0:
c2:f4:7c:ca:10:9e:1a:d1:c5:4c:75:69:e4:48:b8:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:0E:D3:EB:5F:16:76:90:82:D7:2F:C6:35:6A:9D:01:FC:AD:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/134E8868740011F18060D1F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:80:9f:5d:4e:21:91:7f:85:ca:46:3e:ff:64:7c:64:b2:c1:
89:72:ba:69:ee:2f:84:0f:e8:19:48:cc:a9:97:61:95:de:c7:
53:2a:3d:1b:81:4f:74:1e:56:b1:02:84:37:d4:ad:b0:26:d2:
04:f4:99:e4:5f:39:13:6c:9e:10:83:59:59:f1:03:b3:ed:92:
c7:03:37:6d:91:e0:61:0c:74:e2:e1:b2:24:64:d3:fa:f9:eb:
72:ec:d1:b6:57:b3:e3:59:53:5b:ba:53:8e:a9:26:fe:de:b5:
92:f5:81:10:54:49:a0:51:0d:d1:cf:80:dc:6d:ff:92:4d:03:
f6:31:64:b7:fe:4c:1c:17:96:cd:59:b5:83:b4:23:93:b5:99:
d6:e1:67:08:dc:39:af:ba:d7:36:90:1d:e7:b1:1e:42:0f:9c:
74:1a:1d:dd:79:a6:e2:1b:b9:16:e7:f7:da:ca:7a:18:73:56:
b9:7f:ea:01:7b:dd:5a:ed:4f:fa:fd:34:26:88:cd:6e:55:41:
e5:31:de:c8:48:4a:6a:66:7d:04:84:aa:2e:02:c1:c4:5b:e6:
37:ec:01:c3:c8:69:df:02:d9:a8:f9:60:49:6b:d6:e8:3c:58:
7e:3f:d1:89:ea:ff:65:71:4f:7a:9c:89:5b:c5:8e:9a:34:73:
f3:e1:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:55 2026 by rpki-client