Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AB8BDF875E211F188AD55FECE1D38B0.roa
File: 4AB8BDF875E211F188AD55FECE1D38B0.roa (raw, json)
Hash identifier: sTF7izg3hjpTkMMuwvagpyRL6Z8Sx+nPTpswCibSMm8=
Subject key identifier: C8:96:6B:30:05:BF:34:08:E6:39:1C:F7:F9:AC:FF:51:4E:64:B0:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C240
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AB8BDF875E211F188AD55FECE1D38B0.roa
Signing time: Thu 02 Jul 2026 06:50:21 +0000
ROA not before: Thu 02 Jul 2026 06:50:16 +0000
ROA not after: Fri 09 Oct 2026 06:50:16 +0000
asID: 142002
IP address blocks: 45.195.8.0/24 maxlen: 24
45.195.9.0/24 maxlen: 24
45.195.10.0/24 maxlen: 24
45.195.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115264 (0x1c240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 06:50:16 2026 GMT
Not After : Oct 9 06:50:16 2026 GMT
Subject: CN=6a460a2c-5c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:4d:df:3e:6e:05:bd:79:df:b6:3c:6a:e4:
f3:37:fa:3b:39:be:85:a4:b0:fb:9a:6c:10:2a:bc:
db:f5:87:f1:2e:33:a7:c7:16:fa:07:a4:85:be:19:
b6:ef:40:19:5f:7c:72:77:cf:23:da:bc:d5:f7:4b:
96:9a:5e:ec:56:73:7e:b4:a1:10:5b:41:9f:f3:c9:
db:12:ed:49:f8:60:26:8b:11:91:d5:40:c6:c8:6c:
f1:d1:ef:03:b2:62:5a:66:9e:69:50:ae:70:5b:04:
36:06:53:f2:89:29:cf:c1:d0:f1:b2:f4:92:36:f2:
ea:b9:9a:1d:3e:0e:6e:62:c0:f7:fb:37:e8:70:35:
8c:7d:65:2f:1d:8b:0e:71:ce:b7:d8:fe:8d:9a:7b:
8b:76:c6:27:bb:ae:4f:da:c4:e7:c7:69:5a:34:a4:
d0:b9:86:e4:e1:56:d9:55:cc:2f:0e:88:ee:a4:44:
d6:f4:48:be:02:fa:25:79:99:13:87:d8:d8:77:e1:
31:a3:31:9f:7f:f2:35:56:02:b9:8b:ba:33:33:be:
3b:66:78:9a:a3:76:3a:c1:89:7c:75:3a:50:bf:82:
4e:46:c6:d3:a9:81:3e:bf:a3:c5:83:61:bd:e1:a6:
60:65:89:20:3c:86:8d:d8:48:4d:fb:1a:63:cf:06:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:6B:30:05:BF:34:08:E6:39:1C:F7:F9:AC:FF:51:4E:64:B0:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AB8BDF875E211F188AD55FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
96:0e:c7:37:fd:5c:20:5a:f4:e6:b3:6e:db:3e:24:98:53:57:
e5:aa:06:8b:6b:69:e8:b9:d4:58:a6:f9:7a:5c:aa:9c:77:35:
f8:f9:ed:67:2d:7b:17:a4:e7:76:47:4f:c6:38:e2:e5:37:24:
f7:9a:f8:33:eb:34:3e:7d:86:d2:e6:07:b1:f5:8b:10:d2:47:
25:83:27:4f:84:9d:13:47:f8:5b:8b:b4:9e:19:fb:f6:ae:0c:
ee:83:a3:68:57:8f:0c:69:f9:71:4e:a2:31:be:8f:82:27:42:
de:e5:ed:34:d1:64:01:8e:7b:41:e3:07:87:35:92:25:c2:af:
09:5d:41:f3:37:b3:ff:6b:05:04:c7:e2:66:7c:b2:c0:03:22:
18:94:97:e4:91:a9:e4:67:6e:ae:3e:b9:67:3c:fe:04:68:82:
ef:f6:b8:67:45:4e:20:b0:9c:04:5b:67:85:6c:ef:ed:b6:5a:
a1:e5:05:12:a3:40:f2:0a:42:bf:f3:4e:98:b7:82:ad:00:6d:
bd:96:cb:94:86:4a:20:81:7b:0e:38:23:d3:29:6a:93:b5:8e:
3b:c1:c9:5f:8b:40:ba:4a:58:ec:e5:48:5e:83:80:90:65:e0:
c1:4b:13:9a:af:20:a1:3c:50:e1:84:dd:40:89:74:c9:62:1e:
a2:15:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 00:56:37 2026 by rpki-client