Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48911FA0811011F1BFEF98F4CE1D38B0.roa
File: 48911FA0811011F1BFEF98F4CE1D38B0.roa (raw, json)
Hash identifier: /hmymzNabj04f9Nhzvrh2HYS2hSOCYhaBuDbN74MluA=
Subject key identifier: 4D:B7:4C:62:2A:5D:E1:8E:1A:F9:C5:8D:9A:AD:CF:E4:BB:AF:7F:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C57A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48911FA0811011F1BFEF98F4CE1D38B0.roa
Signing time: Thu 16 Jul 2026 12:17:16 +0000
ROA not before: Thu 16 Jul 2026 12:17:13 +0000
ROA not after: Sun 23 Aug 2026 12:17:13 +0000
asID: 212238
IP address blocks: 45.196.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116090 (0x1c57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 12:17:13 2026 GMT
Not After : Aug 23 12:17:13 2026 GMT
Subject: CN=6a58cbcc-0965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:cb:30:c6:e6:57:44:29:80:04:4a:08:5e:
60:1d:bc:36:ee:37:88:aa:ba:bb:2c:34:e5:1c:f2:
b9:7d:76:b8:75:5d:de:e7:8f:57:1b:56:4f:b2:04:
ec:89:e8:49:92:c1:e7:2d:2f:f9:52:2f:88:19:9a:
3a:b5:90:d4:f9:58:43:43:82:fa:22:e8:a5:34:83:
4d:5a:de:9f:31:c9:62:19:42:81:ad:53:a5:0c:3c:
e9:03:37:d9:73:d9:d3:80:fe:fe:b5:ea:a8:80:27:
fa:be:60:40:f8:5b:cf:6c:1b:2b:76:e5:42:1b:a7:
e0:92:52:e0:c4:ce:71:09:c3:13:9f:31:2d:14:10:
b4:98:45:3e:93:92:aa:f7:63:b7:d0:10:5f:5a:47:
0b:03:10:4f:5b:88:83:73:47:ae:c1:60:64:54:ae:
ab:9f:e2:63:e5:d5:80:bc:82:ea:c5:27:ea:ed:78:
94:c6:01:2c:29:ad:18:b6:af:c4:ea:05:26:ef:de:
60:15:ca:33:c2:b1:ca:c2:24:1d:d7:b6:54:4e:a9:
08:ce:57:e9:5e:af:fd:16:2c:2c:6d:8a:c3:bc:b6:
8c:d2:e6:92:72:aa:d4:2a:e4:b9:a3:0c:ac:ab:79:
32:b5:e3:16:02:0a:4c:36:7c:26:d9:f1:19:22:23:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:4C:62:2A:5D:E1:8E:1A:F9:C5:8D:9A:AD:CF:E4:BB:AF:7F:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48911FA0811011F1BFEF98F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.161.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3d:f3:82:2c:49:43:a8:c1:34:d5:d9:dd:7a:3b:9e:32:dc:
0a:7f:e3:f0:88:fb:5c:19:c1:7a:01:21:85:c4:03:ad:9c:20:
84:63:39:ba:73:e3:7d:45:d8:b8:3a:59:a4:e8:c5:4e:b1:67:
eb:2c:a5:3b:23:29:18:ba:48:16:23:98:4d:96:82:d6:68:df:
81:47:a7:07:04:1f:e2:08:53:30:72:c6:79:e0:4d:88:7d:d3:
3e:3c:f7:e5:fa:54:a8:51:31:9c:41:16:dc:40:64:ab:d4:a7:
52:23:29:4b:b4:26:19:f6:c2:70:46:7a:e5:f7:e1:84:b4:bd:
d6:8f:49:b7:75:0d:8c:71:2d:66:24:5b:eb:52:23:05:19:37:
e8:68:a6:38:b8:d6:55:4d:fe:67:2e:71:53:2c:0c:75:51:3e:
33:25:ab:bf:ab:db:da:ea:78:20:96:10:89:a3:d4:49:e2:7e:
fa:fc:c4:db:72:ae:78:e0:1e:29:22:26:f1:35:97:33:c2:5e:
a6:b1:88:3b:d1:3c:3f:c5:2f:da:39:73:c3:36:32:eb:2a:a3:
08:62:79:84:75:7c:9b:95:76:7f:5f:91:85:ad:28:9a:0e:3a:
85:94:b2:89:da:61:5d:1d:35:86:d1:6d:55:09:91:5b:d3:e3:
05:e5:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:11 2026 by rpki-client