Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC2E8046FF511F1BA31FDE4CE1D38B0.roa
File: 1BC2E8046FF511F1BA31FDE4CE1D38B0.roa (raw, json)
Hash identifier: j2oZIee8wvG1e2z6+c4PspwY2fRQXT4zhbPrDxTjw8w=
Subject key identifier: 79:ED:9E:58:8B:D3:18:98:33:E6:D2:AD:4F:F9:3A:5F:91:AB:6D:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C040
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC2E8046FF511F1BA31FDE4CE1D38B0.roa
Signing time: Wed 24 Jun 2026 17:49:55 +0000
ROA not before: Wed 24 Jun 2026 17:49:50 +0000
ROA not after: Thu 04 Mar 2027 17:49:50 +0000
asID: 154701
IP address blocks: 45.196.76.0/24 maxlen: 24
45.196.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114752 (0x1c040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 17:49:50 2026 GMT
Not After : Mar 4 17:49:50 2027 GMT
Subject: CN=6a3c18c3-d0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:f1:85:47:72:d5:72:be:e7:36:ec:84:70:
16:ab:76:10:f9:96:40:68:77:5a:4f:3b:e6:f4:21:
89:a7:f1:a6:52:be:aa:f9:e9:1a:53:b5:27:ef:1a:
17:31:12:75:e8:77:c7:55:1e:ff:cb:af:9f:7b:f5:
da:d3:59:83:f3:3e:96:80:c0:91:52:6f:a4:27:aa:
7b:f9:44:5f:bf:f4:b2:40:36:ea:06:cd:6d:21:91:
73:e4:ac:a5:83:4f:14:da:07:17:dc:79:79:0f:04:
40:a1:94:25:dc:b8:4f:1b:36:45:36:4f:ef:cd:12:
77:16:aa:f7:d0:a8:88:4d:fe:39:1b:e3:f3:e1:fe:
46:1c:e7:d2:ba:6b:70:b0:62:f9:8b:5b:4d:72:8c:
aa:cb:bb:c1:ba:6a:0c:38:f0:be:9d:f0:26:56:40:
1e:83:bb:4b:09:64:a0:ad:99:cd:43:c0:24:b4:30:
b0:4a:f2:62:c3:11:24:a8:78:8c:c9:69:30:71:a0:
df:26:8d:7f:9f:b1:b1:5d:2e:33:f1:94:2a:19:4e:
25:38:99:43:4b:1c:19:0d:74:91:be:14:de:55:6f:
46:98:10:40:d1:1c:90:1f:87:ad:bc:45:cc:15:ac:
b4:61:4b:ec:c2:25:94:f1:38:cc:34:34:c8:d1:21:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:9E:58:8B:D3:18:98:33:E6:D2:AD:4F:F9:3A:5F:91:AB:6D:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC2E8046FF511F1BA31FDE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.76.0/24
45.196.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:90:73:79:af:d8:fd:f5:b6:0d:68:1c:c1:fe:e5:90:f2:a2:
25:f5:f1:ca:cb:c8:e3:e6:b5:04:9f:d4:e3:95:6c:b1:82:c8:
12:ee:cc:67:ff:8c:28:16:3e:9c:e9:ac:7b:72:b6:c1:05:e4:
14:15:28:3e:10:eb:e4:01:e6:14:0f:7f:34:de:d6:a9:db:4a:
f9:88:9b:fc:dd:c1:4a:f0:78:77:b9:55:18:4c:f6:7c:ff:d5:
43:d9:eb:d1:06:62:c8:7a:0a:e6:d7:20:3d:ff:30:47:d8:44:
30:46:09:b1:e2:7c:76:0d:17:27:13:f4:da:b1:0b:d1:0c:cc:
7a:ac:23:af:53:9f:4c:68:2f:92:8a:27:72:9f:c1:d6:7f:84:
16:33:a7:38:32:96:e8:cd:8e:2b:b8:35:06:13:f3:79:5d:8d:
3b:3c:13:56:77:c6:8b:f2:b9:71:ae:0d:58:d4:87:30:f0:cb:
52:cd:6c:80:24:62:2d:62:b5:6f:e3:45:9b:a1:93:2a:ef:e4:
72:6f:95:7c:fe:5c:e6:0b:d6:92:0b:2f:9c:d9:0a:cd:80:4d:
16:47:0a:b7:28:46:c9:d5:55:f6:22:9c:0c:6b:25:4a:8a:6e:
f7:10:be:20:9e:40:00:da:dc:c2:1e:2a:6e:3d:ac:21:01:d9:
7d:ef:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:41 2026 by rpki-client