Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8CB36C7D5611F1ACFB86F8CE1D38B0.roa
File: 4B8CB36C7D5611F1ACFB86F8CE1D38B0.roa (raw, json)
Hash identifier: MYboje1op8lcC8C2DqvDTaznU2SC4EwfxbZ26w2gfg0=
Subject key identifier: 54:65:FD:24:90:26:C6:D2:B0:DA:3A:7B:96:45:F8:A6:03:C9:DF:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C48B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8CB36C7D5611F1ACFB86F8CE1D38B0.roa
Signing time: Sat 11 Jul 2026 18:28:22 +0000
ROA not before: Sat 11 Jul 2026 18:28:17 +0000
ROA not after: Tue 18 Aug 2026 18:28:17 +0000
asID: 18013
IP address blocks: 45.204.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115851 (0x1c48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 18:28:17 2026 GMT
Not After : Aug 18 18:28:17 2026 GMT
Subject: CN=6a528b45-f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:95:bf:c8:e6:b1:a0:3f:ef:ee:39:69:c8:
d5:12:e8:ca:d0:7e:45:75:f6:75:66:90:76:54:46:
37:4d:bf:6e:4b:01:9f:63:f3:9e:2d:aa:4c:e0:47:
39:e1:05:d1:68:b8:d4:16:27:98:d2:b6:7e:0c:00:
40:3d:16:2d:dd:4a:a5:66:2c:57:f0:8f:cb:58:e2:
b9:0e:65:84:4f:fe:73:74:87:53:fa:ab:0b:c3:27:
e6:c0:51:f5:39:f8:e8:bd:6f:2c:49:8c:a3:ae:14:
41:39:79:8e:70:4e:a7:8e:74:bd:be:fe:a8:b6:37:
f1:b2:54:19:1d:d0:35:01:7c:5a:1b:31:93:af:d5:
a8:1b:78:d5:57:58:f8:49:bc:be:13:6b:ff:9c:ef:
79:e4:a0:5e:ca:d9:99:20:b3:ba:fd:26:3f:1c:f6:
9c:85:46:e3:4a:08:42:11:49:1a:4d:a0:c1:d9:9b:
b7:34:31:ad:41:a1:03:7e:2e:04:65:83:1e:7a:72:
06:f7:ef:e0:ef:7e:25:07:07:68:76:e7:df:d8:8b:
e7:c2:b6:23:9c:b8:0d:22:9b:a3:77:50:09:10:34:
4b:72:53:ee:e2:a3:bd:a8:c1:ce:5f:2c:07:90:ca:
8c:f2:37:a9:2b:d9:6c:8c:e6:95:9f:aa:d3:c3:46:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:FD:24:90:26:C6:D2:B0:DA:3A:7B:96:45:F8:A6:03:C9:DF:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8CB36C7D5611F1ACFB86F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:c2:d3:8f:0b:a7:ab:b0:1c:48:3a:f2:4d:9b:7e:a8:03:b1:
2e:09:bd:e5:97:c2:9d:64:f3:25:b5:35:e4:b5:5a:8f:74:6a:
37:dc:01:ec:29:c9:8b:77:ef:6f:e5:5c:dc:60:12:a9:5e:89:
39:88:e4:6b:0f:b8:51:5e:7c:fa:c4:16:37:81:fb:42:b3:a0:
21:f4:14:05:77:80:ff:c7:10:33:88:a9:06:5d:a6:f3:b7:16:
7d:8c:59:73:d0:7b:2e:da:fd:44:7f:4a:cb:b3:eb:29:28:cd:
da:98:7d:74:af:65:62:3a:f6:96:8f:16:d1:2f:1b:6a:63:5f:
e6:90:05:d3:21:70:a2:e0:9b:44:1b:a1:fe:d4:4b:31:07:5c:
99:b5:b4:16:16:cd:95:fa:43:fa:d2:e2:bf:94:c0:2d:38:51:
0e:51:2b:dd:69:bc:31:44:a0:9c:5b:58:0a:7a:d8:ed:0a:3f:
28:f1:90:40:82:a3:d8:1b:14:20:85:6a:cd:2a:e1:fe:87:d2:
2e:8c:99:26:b2:9f:bb:af:0e:0b:e4:16:f4:37:0b:d2:c4:e7:
95:ca:c7:2d:d3:a7:37:09:82:87:f6:fb:f0:72:a1:a2:4d:86:
52:2e:e5:9e:36:7d:4d:87:4d:52:b2:81:46:e6:aa:fd:e7:fc:
1b:bc:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:32 2026 by rpki-client