Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49EF25747B6411F1AF9335AFCE1D38B0.roa
File: 49EF25747B6411F1AF9335AFCE1D38B0.roa (raw, json)
Hash identifier: KdhINM6TkytiqV7zddUYEI5qyNRUoY2FLA2lT3n3f60=
Subject key identifier: 84:88:0F:AD:EA:E0:6A:E9:FB:A4:EE:B2:4D:10:06:54:3E:E0:62:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49EF25747B6411F1AF9335AFCE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:03:29 +0000
ROA not before: Thu 09 Jul 2026 07:03:25 +0000
ROA not after: Mon 09 Jul 2029 07:03:25 +0000
asID: 17561
IP address blocks: 45.194.168.0/24 maxlen: 24
45.194.169.0/24 maxlen: 24
45.194.170.0/24 maxlen: 24
45.194.171.0/24 maxlen: 24
45.194.172.0/24 maxlen: 24
45.194.173.0/24 maxlen: 24
45.194.174.0/24 maxlen: 24
45.194.175.0/24 maxlen: 24
45.194.176.0/24 maxlen: 24
45.194.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115663 (0x1c3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:03:25 2026 GMT
Not After : Jul 9 07:03:25 2029 GMT
Subject: CN=6a4f47c1-90cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:67:dc:48:94:0a:40:e9:4b:89:46:c2:cb:
2f:19:a8:d0:a6:5f:19:f8:b7:c2:d4:00:03:a4:54:
e7:b0:d0:05:43:c9:c8:32:b0:b3:62:2b:62:bd:77:
b4:18:cc:1c:41:20:b3:b7:54:69:d3:85:50:ae:87:
cf:54:8d:13:80:27:69:0e:28:f5:3f:96:86:b6:2a:
f6:b8:aa:1f:67:12:f1:37:ca:a5:51:68:ac:3a:a2:
0e:e8:2d:83:ee:c1:0f:b0:a3:60:df:6c:16:46:27:
a2:b1:23:fe:be:49:35:21:7f:11:6f:08:11:bf:88:
d5:78:e8:a1:ba:8b:78:d8:e4:1e:9f:2e:39:39:9c:
42:73:a6:59:2d:22:d0:fd:53:ea:12:4d:4c:f9:bb:
96:30:1d:f6:bc:a1:cd:7b:98:cc:7f:66:d2:11:00:
b0:2e:0c:d1:28:9c:7d:b4:a1:60:87:46:e9:3f:a6:
12:55:1f:5c:e9:bc:bf:e3:3a:8a:10:95:e6:fa:4d:
6b:de:f9:c9:63:3c:37:6d:0b:16:18:9d:f4:fb:10:
85:ea:29:68:72:f9:2f:88:ea:98:dd:82:e5:c4:7e:
b4:2c:5b:fa:49:e7:e1:6a:e2:b1:f2:af:95:6e:6c:
fb:09:61:b7:82:7a:4e:62:19:fe:15:43:2f:f9:fd:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:0F:AD:EA:E0:6A:E9:FB:A4:EE:B2:4D:10:06:54:3E:E0:62:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49EF25747B6411F1AF9335AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.168.0-45.194.177.255
Signature Algorithm: sha256WithRSAEncryption
0b:31:5c:13:35:32:70:1d:58:9f:67:1a:0d:d6:e7:0c:3a:3c:
a5:80:f9:60:8a:23:27:0c:13:2e:d6:d4:a3:3f:a6:85:18:30:
77:2d:2d:49:a8:01:9a:c5:f9:43:8d:da:4f:ce:d6:e4:cb:0a:
55:f5:50:11:2c:55:78:74:8b:f6:2d:97:71:14:4a:02:e6:46:
32:05:a1:6d:1d:01:59:73:c9:9a:4c:76:b1:8d:35:06:01:20:
78:18:12:cc:2c:aa:be:4a:c0:03:fd:fe:8a:2e:db:09:bc:c0:
47:87:07:71:58:94:0e:94:d8:37:6f:d4:08:ea:5d:78:db:34:
aa:bb:0e:c5:65:9a:75:e7:f8:fe:5b:b7:47:37:2e:cf:b3:92:
b9:56:d2:23:16:6d:d2:6a:b3:72:1b:42:5f:19:ce:52:d4:d9:
c1:76:90:29:82:e0:1a:e9:97:a0:f2:c2:fc:9d:76:f7:4f:22:
73:67:8d:35:20:45:c8:1b:8e:82:27:50:8c:60:ad:e8:4a:ae:
c2:62:38:78:5c:29:55:f9:46:ab:72:27:19:4c:f4:77:ba:84:
d4:f2:88:53:fa:93:a7:60:ff:34:01:dc:c5:4f:d4:33:81:8e:
8c:e0:01:df:4f:50:03:96:84:54:52:f8:29:d4:c3:30:b2:59:
55:83:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:10 2026 by rpki-client