Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F15DE6E7D4411F195C63B0CCF1D38B0.roa
File: 2F15DE6E7D4411F195C63B0CCF1D38B0.roa (raw, json)
Hash identifier: RAJ7RmsaBoM/YaRiaCI+wASUis+frtmLfIai0bud+js=
Subject key identifier: 1E:70:AB:7B:79:AC:CF:FB:82:D1:49:65:14:3F:C6:7F:46:37:B0:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C47F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F15DE6E7D4411F195C63B0CCF1D38B0.roa
Signing time: Sat 11 Jul 2026 16:18:43 +0000
ROA not before: Sat 11 Jul 2026 16:18:37 +0000
ROA not after: Tue 06 Oct 2026 16:18:37 +0000
asID: 153347
IP address blocks: 45.192.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115839 (0x1c47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 16:18:37 2026 GMT
Not After : Oct 6 16:18:37 2026 GMT
Subject: CN=6a526ce3-e36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:0b:f1:0a:98:1f:ad:12:e8:8a:e6:0b:6a:
07:ed:35:c6:0b:e5:56:14:3a:a4:05:4a:a2:46:0c:
3a:6c:34:90:5e:ad:d4:b0:f4:22:07:f9:98:9d:c5:
8f:f4:60:be:8f:e6:a4:d5:97:a6:49:30:84:6a:2e:
4f:0b:60:5e:9b:61:6a:15:9a:05:c9:b9:e0:8f:e6:
19:50:0f:38:2b:a5:3a:cd:03:41:e4:dd:44:3e:55:
53:f0:cc:29:22:b4:d0:ab:92:74:1c:b5:38:4b:64:
5d:20:92:f1:54:92:85:eb:c8:3d:d4:b1:45:e9:a4:
b3:c6:af:a1:62:ba:3f:ca:45:8a:c7:25:11:0f:6d:
81:f0:4d:7e:b0:3b:43:52:e6:78:c2:b7:30:01:bd:
1d:1b:f9:0a:74:62:c0:12:0e:61:2f:89:fd:7f:cc:
8f:3a:1d:2d:c3:6e:dd:20:d4:dc:3c:23:33:9b:d7:
fb:a3:4f:94:38:0d:1a:06:e4:38:07:15:44:c1:0d:
17:d7:e0:17:42:f5:12:ec:c1:35:4c:50:d5:e5:7d:
8d:8c:3d:38:ec:ce:ec:e3:bc:48:e6:7d:24:8f:d4:
53:42:c9:2d:c7:7a:e7:f6:22:ae:5c:e5:11:04:28:
df:ab:ec:0f:9a:98:ba:d3:3d:71:43:4f:12:45:cf:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:AB:7B:79:AC:CF:FB:82:D1:49:65:14:3F:C6:7F:46:37:B0:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F15DE6E7D4411F195C63B0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:16:7e:30:1f:ee:b7:c4:6b:6b:fb:71:8b:a1:66:71:d2:bf:
b8:f9:17:1b:97:e0:bd:71:7e:bb:ba:93:e9:a0:17:b7:ea:dc:
81:9e:d1:a2:14:03:3f:df:ce:75:84:f0:89:52:45:8b:9e:e8:
26:5a:b0:2f:0c:92:d0:7d:e0:4e:c8:6f:b0:d7:4d:44:37:99:
8f:33:b0:df:23:9a:61:0b:8e:a5:8f:c0:49:c7:d8:c6:b1:e4:
0d:cd:fd:13:94:2a:01:6f:2d:3a:3c:90:a2:6b:82:0d:eb:05:
1c:a1:87:6c:d9:3b:34:c7:81:f6:ad:6f:85:7a:ff:28:f2:93:
de:7a:7a:80:86:8f:6d:19:55:27:d0:aa:03:72:79:0b:1a:cc:
86:6c:6d:98:48:71:e3:14:ac:02:34:96:1f:fc:db:81:41:ad:
a0:60:56:14:f7:2e:12:6c:58:39:09:02:13:a3:0f:f8:76:61:
53:fc:e4:19:55:c1:30:58:6c:48:31:be:3a:57:87:fd:04:4f:
ee:11:7d:f1:d9:34:ed:72:36:cd:67:04:1b:b1:02:63:eb:eb:
ae:82:22:1d:c7:12:bb:32:aa:80:ff:d1:6a:1d:c5:18:81:84:
37:f7:12:46:42:02:6f:37:ec:29:24:bb:fe:8e:f2:f5:92:aa:
31:53:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:10 2026 by rpki-client