Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5984C71A779E11F1ADB6BB05CF1D38B0.roa
File: 5984C71A779E11F1ADB6BB05CF1D38B0.roa (raw, json)
Hash identifier: 9Yr53EbreqkLmkPUu/WgisdGjpzdIxVuEBAV/Q+khLQ=
Subject key identifier: D7:15:70:18:79:91:1B:45:AB:E8:A5:3A:D2:68:15:96:37:28:CE:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5984C71A779E11F1ADB6BB05CF1D38B0.roa
Signing time: Sat 04 Jul 2026 11:49:02 +0000
ROA not before: Sat 04 Jul 2026 11:48:57 +0000
ROA not after: Fri 14 Aug 2026 11:48:57 +0000
asID: 141718
IP address blocks: 45.194.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115443 (0x1c2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:48:57 2026 GMT
Not After : Aug 14 11:48:57 2026 GMT
Subject: CN=6a48f32e-2f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:f5:04:03:df:75:4c:83:56:c1:27:2d:44:
96:4a:d3:89:9b:92:cd:60:89:eb:ab:f8:f4:0f:f0:
ba:f6:74:54:53:bf:dd:11:4f:fd:eb:d2:77:bc:88:
53:77:02:4a:de:34:15:fd:43:0f:0d:51:a1:30:52:
b3:63:4f:cc:14:9e:45:1e:f9:b2:36:53:e4:78:22:
52:c2:63:8d:99:1d:18:0f:c8:07:fa:42:90:a5:3c:
2d:f9:df:17:95:bd:42:4e:05:bb:92:4c:72:1c:b9:
7d:f7:ea:19:85:3e:84:bd:cc:d6:50:a2:11:2b:8a:
37:f7:1a:79:57:6a:94:5e:02:14:da:70:75:41:45:
ba:70:83:4d:ee:9c:c6:ea:07:af:6d:cd:3d:49:99:
8a:2a:6f:94:e5:12:67:0d:95:2b:77:d0:70:3c:6b:
2c:08:78:e7:86:f3:ae:2c:02:ba:c4:9d:e8:e8:ff:
ff:d8:3a:e1:26:4b:70:69:8e:05:2a:5d:2c:54:f1:
17:ea:1a:d5:0a:2d:ef:98:5b:8f:c6:ae:31:ae:be:
ef:31:a5:05:6f:78:7f:9a:e2:e7:8c:fa:fa:f0:df:
e9:37:0b:f1:64:a9:2e:d5:f2:9e:e3:48:ef:7b:09:
46:c1:12:c2:c8:29:70:43:ff:60:5e:6e:f4:ad:a4:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:15:70:18:79:91:1B:45:AB:E8:A5:3A:D2:68:15:96:37:28:CE:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5984C71A779E11F1ADB6BB05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:18:11:df:18:9e:23:aa:df:59:7a:6b:58:21:e8:6f:76:78:
fa:8b:12:04:3b:30:ec:0c:72:3b:45:f1:9b:13:b0:18:9b:79:
c2:5a:8d:c8:79:d1:4e:45:5a:0b:ce:50:2b:33:3b:97:8f:b5:
e7:57:98:87:38:1c:e4:84:75:e1:1d:35:44:4a:6f:4c:c9:0d:
26:5e:ca:b3:80:bb:7f:81:b3:b4:8c:df:b6:5f:f5:f9:e6:06:
27:3f:f5:e6:d1:da:80:d9:2a:8a:74:7f:a8:9b:fc:63:02:e7:
d1:06:ee:4f:c1:0a:56:b0:8e:a5:4a:b6:97:66:ea:91:a6:e9:
98:66:23:59:bc:9b:96:d1:77:f3:f1:2a:d5:19:ce:c4:e8:ba:
2f:61:17:c5:9d:27:2f:62:f4:83:0e:28:cc:9b:71:eb:08:c5:
67:3b:11:ac:b0:ae:e9:0e:12:5c:7b:f1:17:96:e2:72:a5:82:
8a:83:e5:06:70:1b:7c:36:8b:e5:fa:b0:ba:26:dd:47:e5:48:
e6:38:80:3a:87:dc:aa:e7:a3:3d:e8:e9:1d:00:ef:31:f3:07:
d5:49:db:d9:6d:27:27:9e:2a:78:f0:c1:ce:02:f7:07:08:cc:
44:f1:7b:bd:f6:79:34:06:b9:cd:a6:56:00:bd:7e:20:37:8f:
c1:c6:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:54 2026 by rpki-client