Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BD9404720811F1AFCCF30DCF1D38B0.roa
File: 28BD9404720811F1AFCCF30DCF1D38B0.roa (raw, json)
Hash identifier: V8PTyqFwA/x5mJ34dXA8EIfzOUKu+kTim9EDwMHy7Ls=
Subject key identifier: 73:CD:DE:40:F4:97:38:01:C3:46:40:C9:31:EF:0D:7E:A7:92:7C:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BD9404720811F1AFCCF30DCF1D38B0.roa
Signing time: Sat 27 Jun 2026 09:11:20 +0000
ROA not before: Sat 27 Jun 2026 09:11:15 +0000
ROA not after: Sun 02 Aug 2026 09:11:15 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114910 (0x1c0de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 09:11:15 2026 GMT
Not After : Aug 2 09:11:15 2026 GMT
Subject: CN=6a3f93b8-d97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:b4:e3:2c:62:24:d7:26:5f:76:ed:79:fb:
21:73:c9:f4:5f:a8:1a:35:65:05:ff:25:d8:e9:22:
05:39:db:c5:cd:96:0a:40:40:d8:81:5d:f8:fe:cd:
67:f8:24:59:1e:e4:8c:6e:4d:f4:5e:ae:02:77:9b:
a4:35:ff:f0:bf:70:d7:2d:d2:b9:78:f3:50:1d:b9:
4f:5c:1d:89:59:32:0b:58:a6:11:8f:16:e7:27:ec:
ef:c6:18:8a:70:a0:81:5e:9e:38:b2:30:27:d2:eb:
a0:0c:aa:9d:7d:ab:b5:2b:b7:fc:01:3a:f9:13:95:
d5:53:4c:a4:74:9a:38:59:25:8c:c1:62:ba:88:60:
59:31:60:73:20:ba:82:a5:c9:be:2c:39:af:d9:19:
39:02:af:32:dd:91:61:ed:68:2e:a8:cf:d3:33:b2:
b8:1c:fb:fe:82:25:7c:d6:0f:77:af:37:74:00:63:
56:7c:45:59:ff:cf:72:dd:1f:52:c4:72:06:fe:72:
f2:71:39:66:1c:e0:71:91:a1:e0:d8:75:b1:55:08:
b5:28:60:ec:90:de:cd:e8:de:c2:65:7a:f6:23:43:
94:c2:94:e1:7b:0d:71:1f:dc:24:39:ad:61:6c:9e:
5c:56:71:0f:dc:df:8e:26:c6:6a:fe:37:8f:01:7a:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:DE:40:F4:97:38:01:C3:46:40:C9:31:EF:0D:7E:A7:92:7C:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BD9404720811F1AFCCF30DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1d:64:89:28:cd:48:2e:7e:33:63:ee:7c:e3:67:0c:e2:b0:
87:88:52:fa:b8:e0:aa:da:0c:c8:c8:a5:0b:b2:b3:0a:4c:e6:
7b:88:c2:98:be:34:46:4d:b4:b3:34:00:78:fa:46:b9:05:0b:
6e:4b:65:a0:c4:5d:7e:5a:95:86:46:43:a8:37:82:59:64:f0:
e8:b5:8c:42:fa:5a:46:92:0e:56:15:f2:1f:b7:c8:f8:8d:60:
03:05:d2:60:5b:c5:fd:79:96:78:2e:51:97:eb:b0:89:03:b0:
81:cc:a9:a6:2e:37:7e:17:ad:3d:c7:3f:2d:76:c1:22:9e:3a:
fb:f7:f7:1b:7f:15:d3:39:85:e7:46:86:9d:71:c5:b1:8c:ac:
7f:bb:89:e7:0f:35:49:bf:cc:aa:83:e7:d2:5a:86:e6:fa:62:
ba:f5:0b:ac:eb:97:12:0c:76:f3:46:95:89:e1:d1:1b:db:89:
c4:fa:19:23:74:67:d6:73:34:e7:96:85:4a:0e:46:37:1e:e1:
de:95:85:d1:f1:20:13:d0:a6:7d:14:9e:a7:e2:62:3c:e2:81:
c4:d1:da:08:59:42:15:de:8e:1a:fa:5a:8f:7a:b5:df:86:59:
16:29:60:4c:01:f4:54:a3:1e:ef:42:23:7b:d9:10:00:15:2a:
7a:cc:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:41 2026 by rpki-client