Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29698AA86FFA11F1AE5C8203CF1D38B0.roa
File: 29698AA86FFA11F1AE5C8203CF1D38B0.roa (raw, json)
Hash identifier: C6uVKMBhTOS1oX53T0sBitRHrs5R0PDG59zieuX4XTs=
Subject key identifier: 8E:EE:B0:2C:3F:4B:09:A2:41:C8:4E:AF:F0:7D:51:5A:EC:C8:DE:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C048
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29698AA86FFA11F1AE5C8203CF1D38B0.roa
Signing time: Wed 24 Jun 2026 18:26:05 +0000
ROA not before: Wed 24 Jun 2026 18:26:01 +0000
ROA not after: Wed 03 Feb 2027 18:26:01 +0000
asID: 9584
IP address blocks: 45.197.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114760 (0x1c048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 18:26:01 2026 GMT
Not After : Feb 3 18:26:01 2027 GMT
Subject: CN=6a3c213d-d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:ed:8f:ea:ea:f6:eb:f3:ca:c5:ec:a6:a8:
49:46:0f:c8:2c:69:e6:66:de:43:46:8a:a4:1c:98:
21:dd:c6:9f:77:0c:f8:f2:8b:5d:1b:e8:68:0a:b4:
0e:6d:66:ce:52:03:fb:17:42:da:1f:e5:73:90:c5:
7c:48:41:8f:ca:27:52:dc:15:81:b5:b4:ca:d2:26:
b5:7c:64:4d:65:05:5e:de:f8:25:43:bf:df:85:32:
4a:6f:89:9d:63:3b:61:ed:93:da:f4:a0:76:73:5e:
c5:ed:e9:e9:ff:e4:0e:69:d6:af:5d:1a:51:95:85:
bf:93:f0:5e:d7:91:4d:b8:39:d0:12:c3:90:62:01:
b1:90:50:9b:88:11:31:29:0a:16:4c:4a:e3:d0:eb:
6d:bf:b2:9b:70:d7:5c:4d:52:b1:2a:11:53:af:e0:
e6:3f:82:ca:89:de:3a:70:fd:d7:2f:f6:4d:91:d1:
71:50:6b:d9:68:d0:b6:db:2a:8a:16:8d:c1:43:52:
d1:9c:93:80:1a:f7:98:74:4a:12:2e:e7:dd:c7:65:
d8:44:71:c8:c0:76:ca:31:01:87:2a:34:cf:92:9d:
a2:93:8c:64:0e:0b:16:b7:a8:97:33:0c:c0:ec:c2:
27:1e:fb:b0:2b:b8:ea:4d:54:a6:57:1f:91:17:fe:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:B0:2C:3F:4B:09:A2:41:C8:4E:AF:F0:7D:51:5A:EC:C8:DE:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29698AA86FFA11F1AE5C8203CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:31:9c:77:3d:ef:55:cb:df:ab:4e:cc:68:f7:e5:23:84:96:
48:6a:07:4f:88:8e:76:ae:3a:01:05:a6:a4:05:5d:bf:da:61:
65:fc:44:61:29:7c:5b:e3:62:6b:ab:5a:b2:a9:5e:c1:e6:e8:
d8:21:b2:fa:f9:ca:15:5b:39:b7:3c:6c:7d:9a:47:e8:ce:03:
b0:9b:9e:5f:18:42:6b:b6:34:56:7d:62:14:7c:11:73:af:92:
48:6e:07:18:55:40:de:9a:38:43:11:6b:f1:8d:4e:dd:f8:2f:
5c:7d:89:32:88:32:8c:62:25:d5:92:d3:d3:dc:8b:cd:27:2a:
70:b5:bd:d0:07:e4:67:d2:a8:be:b0:94:78:67:88:b9:12:e9:
12:bd:e7:38:cc:d8:ba:39:77:4d:66:d2:b9:a8:dc:a2:e6:22:
08:e0:dc:1b:66:6f:c6:fa:e3:2f:96:83:94:a6:8b:a5:85:2f:
e3:ab:b4:70:71:c5:b2:bb:9e:45:ab:f2:04:93:c8:9e:20:31:
f6:c2:9e:ce:78:e6:46:3a:44:97:18:36:a8:d1:10:73:c2:21:
dd:86:2e:bd:21:68:44:96:76:52:a8:a9:38:d8:f0:2d:12:09:
cf:51:1a:f3:d9:93:ed:30:9b:ea:1d:ab:1f:d3:15:06:f3:95:
58:1a:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:38 2026 by rpki-client