Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F9D4E47F4F11F1804BDB05CF1D38B0.roa
File: 58F9D4E47F4F11F1804BDB05CF1D38B0.roa (raw, json)
Hash identifier: 22iJMVJ+kEn2ZLnrG7m75cyo/np9kMIt35byRnFvgn0=
Subject key identifier: 69:8D:49:F5:20:E5:96:9A:8A:CB:4B:5B:32:2C:AD:97:8A:AC:F1:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F9D4E47F4F11F1804BDB05CF1D38B0.roa
Signing time: Tue 14 Jul 2026 06:43:40 +0000
ROA not before: Tue 14 Jul 2026 06:43:35 +0000
ROA not after: Fri 14 Aug 2026 06:43:35 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115931 (0x1c4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 06:43:35 2026 GMT
Not After : Aug 14 06:43:35 2026 GMT
Subject: CN=6a55da9c-b550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:82:7c:78:a5:6b:e7:11:06:dd:42:c7:3f:
59:fc:66:d9:01:c7:91:0d:1c:c2:1b:8d:cd:d9:c0:
f1:b9:39:84:a8:21:88:06:fe:c8:af:36:14:8e:f0:
8c:b5:45:c0:2d:fc:2d:14:36:c3:b7:16:13:b2:0c:
ec:fc:56:ff:a2:b6:17:a0:e6:d7:21:00:aa:7d:74:
08:c5:9f:c6:e8:1d:58:94:d8:49:e3:13:1c:e6:f7:
d2:e4:44:41:ff:9f:e8:46:6b:19:b5:20:30:cc:49:
ee:04:cf:99:9e:0a:0b:4a:c7:3d:f2:2e:f1:6f:80:
2f:9a:1a:cd:53:36:3e:1d:ad:6b:56:13:c7:72:69:
90:39:46:9b:7c:66:85:a6:84:ff:6e:a2:7e:db:c6:
b7:dd:d3:b2:a6:2d:3c:89:fc:77:60:49:c8:ce:63:
1d:2e:7e:cb:fc:c5:da:55:72:4b:3f:35:a9:b1:8a:
bd:91:08:3d:39:2f:71:df:72:e1:01:85:86:cc:3c:
b3:01:be:d5:47:f0:48:27:cd:3d:03:de:09:e8:a6:
5b:e9:75:7b:79:bf:05:4b:9f:00:7c:bc:c2:ec:02:
13:47:07:21:01:cd:a0:f4:d8:21:30:91:38:61:ab:
f7:dd:c2:c4:e9:69:7e:e7:2f:aa:1c:0f:4c:7c:ff:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:49:F5:20:E5:96:9A:8A:CB:4B:5B:32:2C:AD:97:8A:AC:F1:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F9D4E47F4F11F1804BDB05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
38:63:80:f1:e9:94:19:02:db:d9:6f:b0:16:71:3b:6b:16:17:
8f:4c:49:06:d5:a9:e7:b4:c9:79:d1:14:87:81:76:ab:36:08:
b0:52:de:1b:7e:46:4a:7c:b8:0b:80:ba:39:a5:22:05:7d:ec:
0a:d6:61:07:7a:fe:2e:73:4e:1a:51:4c:b0:92:6b:a0:59:88:
5b:bd:c7:6a:a6:a0:bd:aa:79:f9:cb:b5:21:84:57:54:f7:ee:
c4:64:3a:1e:cf:4d:6f:6e:ec:f0:2c:74:e0:89:ea:0e:d3:49:
9b:4a:8a:83:28:90:d0:f5:76:48:36:89:1f:f4:e9:59:c3:62:
e3:37:f8:9c:03:10:61:f0:30:d4:9f:1e:d1:3c:0f:56:c8:d7:
22:ad:28:af:1b:b6:a5:2c:08:a9:8c:99:42:ae:51:3d:85:55:
c9:47:be:8a:ac:98:3a:bc:16:86:cb:73:9b:e1:12:3a:b0:38:
49:45:7b:1d:18:a1:5e:c3:67:eb:e2:7e:5b:27:97:67:e2:19:
9c:6c:28:44:05:67:1d:bd:a0:d7:43:7f:68:3b:d6:ef:f2:33:
e4:91:ae:c0:57:ef:37:02:77:3b:b9:cf:b2:b7:24:19:b8:92:
8a:78:f2:d4:77:57:02:a6:2f:8b:c2:c4:90:87:ac:27:24:ce:
2d:89:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:42 2026 by rpki-client