Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2191626879D411F1A4B5D7F2CE1D38B0.roa
File: 2191626879D411F1A4B5D7F2CE1D38B0.roa (raw, json)
Hash identifier: Gu074dMFsU9/tLUIU/k3svWfxf9bQyIgDQwGmrnZVl0=
Subject key identifier: 0A:5B:42:AD:ED:F0:AA:7D:E3:51:A4:E3:AD:47:C0:51:2B:B0:24:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C357
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2191626879D411F1A4B5D7F2CE1D38B0.roa
Signing time: Tue 07 Jul 2026 07:19:03 +0000
ROA not before: Tue 07 Jul 2026 07:18:59 +0000
ROA not after: Sat 15 Aug 2026 07:18:59 +0000
asID: 63023
IP address blocks: 45.195.2.0/24 maxlen: 24
45.197.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115543 (0x1c357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 07:18:59 2026 GMT
Not After : Aug 15 07:18:59 2026 GMT
Subject: CN=6a4ca867-5ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:a3:6d:21:c6:3f:8e:5a:75:2b:fb:db:82:
19:9f:62:80:08:2b:eb:10:45:97:08:73:a2:4f:26:
10:96:c3:c0:58:36:2e:a4:6a:23:e0:b9:cb:de:69:
cd:41:29:b5:e1:02:aa:ed:a3:17:f1:cc:4d:20:45:
c5:23:ce:76:7e:64:fc:8a:c6:28:47:df:f3:73:28:
fc:7d:02:a0:c9:4c:45:68:e2:d1:a6:4c:41:a8:cc:
95:77:e5:0e:01:47:87:15:88:21:4e:06:6b:af:56:
53:f8:df:f1:6b:a3:21:54:d1:82:61:a3:f1:73:1d:
06:d5:5a:03:37:64:2a:c8:6a:05:61:22:ea:8a:74:
87:fe:3f:30:0a:f5:e5:e7:d4:16:d9:20:a7:84:8a:
59:c8:38:7c:1b:55:ff:79:c6:58:b5:8b:eb:d1:ef:
44:5d:58:c8:d6:74:e0:ff:82:89:a2:4f:5d:45:b7:
e9:45:aa:ff:72:ea:fd:b8:ed:13:48:2e:d9:2f:75:
9a:ae:85:08:94:20:b4:39:c0:c4:31:82:27:26:06:
c3:09:4c:d3:ff:8d:41:24:f7:83:70:b0:43:38:6b:
90:91:ab:70:dd:dd:94:e0:c2:92:5b:d4:88:1c:fa:
fe:16:cb:61:2e:7e:e2:9b:70:8d:1c:09:43:5f:a1:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:42:AD:ED:F0:AA:7D:E3:51:A4:E3:AD:47:C0:51:2B:B0:24:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2191626879D411F1A4B5D7F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.2.0/24
45.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fb:bd:88:8f:90:19:ae:c8:f0:dc:21:3f:65:05:68:a3:81:
bb:03:75:c3:23:ad:44:fb:73:2b:e3:0c:bf:88:54:66:1b:c4:
d0:f7:f5:91:7c:57:8b:b6:2d:d7:77:1c:2a:08:b1:14:5c:7b:
a0:76:36:c6:e1:88:8a:4d:a3:82:9a:de:47:cf:8b:46:5b:f3:
34:dd:8d:9d:d7:80:25:12:45:40:b4:bf:e2:5b:15:34:8f:92:
36:98:d8:9e:53:2c:b8:47:5c:a6:78:98:da:24:19:2f:31:3e:
c7:2e:dc:52:47:3c:d7:a8:50:4a:a9:65:2d:01:42:c7:d9:c0:
e0:16:ed:52:90:72:d4:5e:14:d7:db:02:f0:40:51:06:0c:e4:
eb:49:06:c1:4d:8c:85:6e:e0:f5:67:8b:2a:45:ef:ae:f0:2c:
26:0d:d0:fd:2a:50:1d:6b:87:f1:be:69:30:50:df:b0:d5:4a:
8d:16:f5:e9:72:9d:8d:23:18:e7:c9:94:1b:76:8a:23:ce:ff:
3c:fe:7b:12:d2:86:ce:d0:22:c9:03:bf:f1:2d:b1:90:2a:ce:
51:0e:ac:ce:02:5d:97:63:43:db:80:4f:fe:64:09:9a:a9:e9:
5f:d2:38:ed:7e:7e:f1:5f:cd:ec:30:f1:bf:58:0c:6e:6e:97:
10:c1:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:59 2026 by rpki-client