Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/361A7AD072B311F1B4EC59A1CE1D38B0.roa
File: 361A7AD072B311F1B4EC59A1CE1D38B0.roa (raw, json)
Hash identifier: HuBaZMLBQ8IhwIXd69A6KmqzP1sm/XSAEUZBOBdjjps=
Subject key identifier: F7:1B:1E:44:69:AF:FD:1B:A3:C5:A8:46:00:D7:1C:50:1C:F4:11:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/361A7AD072B311F1B4EC59A1CE1D38B0.roa
Signing time: Sun 28 Jun 2026 05:35:46 +0000
ROA not before: Sun 28 Jun 2026 05:35:41 +0000
ROA not after: Thu 30 Jul 2026 05:35:41 +0000
asID: 9304
IP address blocks: 45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114939 (0x1c0fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 05:35:41 2026 GMT
Not After : Jul 30 05:35:41 2026 GMT
Subject: CN=6a40b2b2-ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:cf:83:4d:93:c3:19:a6:c0:99:f4:25:0e:
ab:29:52:3f:61:80:36:3d:1a:a4:06:4e:fb:fc:42:
34:90:a1:06:f2:be:28:98:31:7e:5e:8c:f8:1f:c4:
6f:d2:3a:92:63:ff:bf:3a:b4:52:5a:9c:95:da:20:
3e:50:f7:21:39:68:8b:e7:d2:4b:3c:19:c7:18:58:
95:f5:af:59:34:bf:ee:60:f5:74:bc:99:aa:e9:55:
d9:6b:b4:c8:98:dc:d4:22:41:c1:30:4d:2d:88:93:
37:48:68:9e:64:5f:b3:01:a3:84:a9:15:3c:1f:65:
70:4a:47:29:42:46:ca:f6:d0:fc:ed:6d:e0:ca:61:
eb:59:c3:3e:87:db:5a:53:82:04:71:62:cd:8f:07:
91:b9:4f:25:6c:7c:b5:aa:45:1a:90:f1:45:f0:3f:
98:49:7f:88:0c:69:9c:64:91:01:d8:21:d8:ad:d9:
6b:03:e8:a1:46:00:9f:4b:f1:2c:d5:4c:76:7b:c8:
47:84:10:ad:ee:9d:19:40:ee:6d:7b:9b:38:44:62:
e9:db:24:6f:6c:08:1e:ad:01:21:87:69:03:e1:55:
e4:93:93:0b:fe:0c:b9:4f:01:e1:a3:a3:a8:71:0d:
9c:0f:30:53:84:56:2f:91:2f:be:bd:bc:28:a2:95:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:1E:44:69:AF:FD:1B:A3:C5:A8:46:00:D7:1C:50:1C:F4:11:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/361A7AD072B311F1B4EC59A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.48.0-45.204.53.255
Signature Algorithm: sha256WithRSAEncryption
3a:10:02:24:2f:08:f8:89:6d:da:c9:d8:33:5b:84:52:b1:b9:
42:57:b2:40:d2:6d:c5:4c:6d:9e:08:bd:c2:4a:1e:9c:af:aa:
4b:b9:e4:0e:8f:cb:1b:c5:9a:ba:fd:ec:5d:cf:4b:19:c6:cb:
0d:0d:c7:ed:d4:33:c1:19:64:2a:30:81:f7:80:ed:15:a9:6d:
36:a0:4a:ce:02:66:2e:d0:dd:93:52:dc:14:e0:dc:15:96:38:
a4:78:37:ca:b3:0a:03:c9:0f:00:7c:17:e6:05:87:39:8a:c6:
fa:aa:f6:5c:5d:e7:f9:0a:8d:db:b3:d6:64:54:a1:fe:65:68:
ad:02:e0:46:f3:cf:c3:ed:80:9f:40:ae:dc:c2:51:8c:76:2f:
2f:b8:2c:a4:55:75:f0:ad:cf:13:f5:fa:72:3c:6c:27:d1:12:
d5:f4:6f:37:67:2c:ee:e9:fd:b5:e5:9e:f2:a1:50:48:14:5f:
8d:b6:50:59:0a:04:c2:a1:b4:51:a4:7d:53:47:1a:93:0a:55:
52:a7:da:01:2a:e4:af:e3:69:2f:51:36:f1:08:e6:7a:42:ea:
38:d6:0b:4d:58:ea:e7:4a:82:0b:b4:66:92:ce:0b:35:a2:e5:
e7:76:16:d7:04:de:27:84:ac:bc:4f:86:c5:e8:64:c4:68:6a:
99:da:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:37 2026 by rpki-client