Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43F5B1C0770811F18E35BAEDCE1D38B0.roa
File: 43F5B1C0770811F18E35BAEDCE1D38B0.roa (raw, json)
Hash identifier: ijfy9LaCd15Lv+DPLJVeStjtMu7ovGtI/gbQcRJaVYI=
Subject key identifier: 74:3B:57:70:5F:81:69:2A:2A:A2:4C:66:30:52:64:5D:68:4E:59:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43F5B1C0770811F18E35BAEDCE1D38B0.roa
Signing time: Fri 03 Jul 2026 17:54:41 +0000
ROA not before: Fri 03 Jul 2026 17:54:37 +0000
ROA not after: Fri 14 Aug 2026 17:54:37 +0000
asID: 212238
IP address blocks: 45.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115382 (0x1c2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 17:54:37 2026 GMT
Not After : Aug 14 17:54:37 2026 GMT
Subject: CN=6a47f761-f503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:ef:ac:00:90:7d:50:45:7a:7b:57:fb:ad:
8c:91:60:85:20:e0:85:fa:5a:ba:e8:d5:3a:64:6b:
3d:3d:94:08:ec:89:cc:74:41:05:e1:57:b5:40:83:
65:cb:9e:a4:57:18:fc:e6:6b:e9:69:d2:b9:94:64:
65:a4:ac:df:aa:ce:6d:93:31:65:f2:ab:33:32:9e:
e2:47:8e:94:da:a2:ff:9d:2b:00:ec:46:5d:d0:fc:
eb:fa:97:bc:dc:a6:27:5c:b7:6e:75:fb:ab:c1:e6:
f6:3f:1f:17:b1:bd:b7:84:cb:7f:df:72:40:83:23:
21:90:0e:c7:6e:76:a4:02:53:27:14:61:64:ce:85:
d2:76:07:fa:96:3f:b3:ff:0f:9f:32:84:82:a5:98:
40:b4:77:4e:57:d8:83:f5:42:57:f9:28:39:9e:ff:
22:3d:d8:d4:01:5a:37:74:98:61:03:df:c7:1a:58:
3b:fb:b8:e1:14:c7:06:6d:82:a4:4f:b8:21:cd:2f:
0f:ea:f4:02:69:6a:05:bd:6c:6a:db:bc:37:44:ca:
22:7a:a0:4e:95:26:e0:86:20:c1:04:ee:2a:50:0e:
13:6f:37:7f:b3:8f:86:27:7c:b4:19:f3:0b:33:42:
ca:0e:00:23:6a:0c:50:0d:e8:a1:a5:b0:a5:d6:95:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:57:70:5F:81:69:2A:2A:A2:4C:66:30:52:64:5D:68:4E:59:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43F5B1C0770811F18E35BAEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7e:b8:6d:ea:b4:7f:66:d2:e6:1c:0c:2b:ab:46:5d:0c:92:
b4:64:fa:7f:a7:db:f3:31:c7:54:d0:0c:84:52:cf:b7:d6:e2:
b1:00:3b:d7:76:af:48:4a:be:f0:d8:52:c8:2a:d3:9a:79:a0:
6d:2a:bb:70:86:24:c4:44:d2:df:50:52:ce:31:ba:e3:38:6e:
d7:26:4f:3d:32:a8:4e:e2:29:bf:72:c3:f0:da:5a:e5:66:f1:
c4:7f:95:cd:9f:6b:f9:d1:6d:d7:19:fd:7f:7e:46:95:7b:3a:
b4:39:ab:1d:3c:ec:77:6a:da:b5:ff:12:fb:fc:8b:b8:56:be:
3e:01:e6:30:cb:90:90:db:59:69:9a:d2:28:e7:11:c5:50:c2:
05:da:ad:3b:73:83:e0:b9:72:a6:b0:ce:bd:9b:5e:1f:a8:88:
e6:a4:c4:2d:f3:fc:6a:19:dc:5b:ed:4e:45:0e:07:3c:b9:1d:
61:da:00:24:f7:9e:f7:87:ac:9c:fe:8b:f0:e5:35:20:b0:9a:
90:ad:7f:65:6f:8f:85:5d:c0:be:36:42:e2:51:1f:a0:ca:a3:
fb:d9:7f:04:68:46:5a:a2:86:bb:9c:8d:22:bb:15:4c:3b:48:
72:19:8d:f2:b3:81:f7:a6:94:b1:15:7a:56:f7:0c:42:8d:b1:
3b:88:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:31 2026 by rpki-client