Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FB8DB7E7FC211F18715BEB2CE1D38B0.roa
File: 3FB8DB7E7FC211F18715BEB2CE1D38B0.roa (raw, json)
Hash identifier: Q6MBOZsM94GYPDXUrhL9gM+ioBOAPZZJq0ZRRQawYYY=
Subject key identifier: 30:94:BE:A6:1E:0C:FF:64:6A:FC:9D:49:2D:99:8A:58:AA:BF:D8:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C52B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FB8DB7E7FC211F18715BEB2CE1D38B0.roa
Signing time: Tue 14 Jul 2026 20:26:10 +0000
ROA not before: Tue 14 Jul 2026 20:26:04 +0000
ROA not after: Sun 23 Aug 2026 20:26:04 +0000
asID: 212238
IP address blocks: 45.194.71.0/24 maxlen: 24
45.198.80.0/24 maxlen: 24
45.198.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116011 (0x1c52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 20:26:04 2026 GMT
Not After : Aug 23 20:26:04 2026 GMT
Subject: CN=6a569b62-bd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:88:ed:ae:f5:7b:1c:d5:d2:3a:fc:49:0d:
fe:d9:95:6a:6d:d5:3e:94:08:5f:1d:2d:90:8c:b4:
26:cc:54:05:e8:40:cd:6f:1a:ed:92:47:18:0f:6c:
df:f6:50:b9:b6:6b:69:bb:3a:b1:16:52:6f:f1:4c:
cf:af:d9:02:e4:9e:64:8b:97:f2:62:d7:c6:4d:54:
92:13:d3:3f:44:78:f0:b1:a2:9d:6d:29:5a:c1:f7:
94:f2:13:f5:ab:f2:c8:c9:68:c7:57:c1:cf:6c:d5:
55:60:60:60:dc:46:05:ea:9f:8c:bd:49:6c:1a:04:
bc:c9:40:d2:b1:3e:db:d8:b8:ad:f6:ce:b4:46:f4:
9d:43:85:ac:40:85:b0:98:48:62:f6:7c:52:82:b8:
28:d6:12:66:6a:ba:86:d4:8f:b2:64:3a:9c:26:49:
ed:db:ff:26:9a:e9:43:6c:32:10:99:f4:d2:73:85:
cc:86:b6:7b:9c:be:3e:4d:f4:85:63:d8:ed:f9:42:
88:7f:3b:a3:96:e4:b3:3f:cf:b2:c4:ab:e1:e4:46:
40:62:c7:7c:ec:44:0d:7e:74:06:42:dd:25:0d:0c:
b8:6f:a2:22:3f:6e:85:db:c4:ec:3f:fe:9a:60:c0:
7e:8a:c9:91:86:69:7a:a1:5c:0e:84:e0:05:bf:81:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:BE:A6:1E:0C:FF:64:6A:FC:9D:49:2D:99:8A:58:AA:BF:D8:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FB8DB7E7FC211F18715BEB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.71.0/24
45.198.80.0/24
45.198.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b6:20:05:4c:32:d4:44:d5:15:d0:19:e4:c4:7b:f0:9a:3d:
ae:4f:5c:27:d3:51:7a:3c:66:bd:e9:4a:f5:25:0f:1b:f2:28:
7e:86:10:5e:1a:de:4d:97:30:8a:ec:78:bb:dc:60:66:4b:ab:
47:47:2e:27:0e:78:8c:52:4a:38:dc:42:78:a5:78:51:d1:f7:
c1:d2:8b:e3:47:ca:52:8a:88:92:4d:bb:df:19:47:c9:9a:08:
ea:f7:cf:6c:49:5a:28:28:a5:9a:c4:2a:ec:1f:df:77:88:ea:
5d:c5:10:80:a7:2a:73:ca:32:ef:8d:77:5e:2f:ac:b9:f7:79:
43:d7:c4:57:f6:7a:3a:6b:11:6c:35:36:cb:b9:a9:6b:34:bc:
a6:07:1c:bf:e5:9c:ab:73:ce:ff:70:cf:a7:dc:50:3d:2a:ee:
06:24:2d:20:99:40:3f:ef:c9:ab:4c:d9:51:78:cf:b1:a5:71:
96:f6:34:0e:cb:d1:10:ba:6c:61:41:92:45:73:69:0d:93:5e:
0f:fb:3e:f4:ad:4a:5e:4e:14:79:57:ef:fe:12:6d:29:df:cc:
27:23:22:ec:9d:54:9c:64:11:44:48:2f:cc:dd:47:86:78:3e:
5b:36:fd:63:b4:51:ad:55:b6:92:3f:22:82:01:d4:9d:e8:2f:
3b:c5:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:43 2026 by rpki-client