Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/659A21547AA411F197FAEAE4CE1D38B0.roa
File: 659A21547AA411F197FAEAE4CE1D38B0.roa (raw, json)
Hash identifier: jzgLTasF/0CrvWj4ZeWr6iSuPoJ7M3+ll2M4cAralyc=
Subject key identifier: F1:DE:E4:41:39:7E:D2:7B:56:88:FE:75:68:CF:1F:64:E8:3C:EC:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C390
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/659A21547AA411F197FAEAE4CE1D38B0.roa
Signing time: Wed 08 Jul 2026 08:09:53 +0000
ROA not before: Wed 08 Jul 2026 08:09:47 +0000
ROA not after: Fri 17 Jul 2026 08:09:47 +0000
asID: 153347
IP address blocks: 45.192.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115600 (0x1c390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 08:09:47 2026 GMT
Not After : Jul 17 08:09:47 2026 GMT
Subject: CN=6a4e05d0-45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:c3:81:4b:92:8b:4b:f2:a1:1c:67:73:ad:
21:c0:33:be:13:db:c7:33:84:8a:ec:fc:7e:6f:35:
1b:12:6d:bb:a1:3b:d0:d3:ee:99:d6:61:9c:a4:5f:
67:ac:02:0c:a8:ba:8a:6b:1c:c1:ba:2a:4b:cb:24:
56:c0:bb:57:68:87:4d:11:5a:c0:69:93:6d:78:cb:
9c:b8:6f:04:5e:05:aa:64:0b:d1:01:df:7f:95:f7:
26:57:ff:95:51:67:b5:f5:7b:66:ff:b0:7f:e6:c0:
35:82:98:53:a8:59:a9:e2:33:bd:aa:bf:69:19:b2:
f3:7d:33:cd:9f:f4:1e:07:bd:fc:79:c9:9b:fe:0d:
8a:43:95:4c:57:c9:71:50:d1:5c:e3:99:0e:49:fd:
1b:2b:34:4c:7a:e7:6f:3d:6c:29:40:cd:c7:da:a5:
1a:d1:68:30:61:44:e7:40:27:f3:f6:c8:e8:ae:5a:
99:99:e9:9e:18:9d:c3:1c:6f:32:78:bb:61:c6:4a:
a9:63:87:4b:bc:9c:a2:9f:21:c1:56:99:7f:8a:8f:
7b:6c:18:50:4a:d2:dc:f2:43:42:28:53:91:c4:69:
23:f9:20:8e:44:34:20:e2:9f:8e:d0:90:ce:54:55:
ce:0d:d4:f3:83:5e:65:0e:01:3c:26:62:02:77:d0:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:E4:41:39:7E:D2:7B:56:88:FE:75:68:CF:1F:64:E8:3C:EC:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/659A21547AA411F197FAEAE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c8:04:80:d1:d5:ba:bc:dd:cf:ec:2d:7e:f5:72:ee:c7:f5:
84:c3:25:29:e6:b9:ce:69:dc:2b:97:f5:32:24:ee:ad:21:77:
4d:98:75:09:f0:84:48:00:d0:09:3b:98:4e:7e:67:83:32:10:
1e:b8:9c:8b:4b:f8:b6:ba:d6:0b:a6:16:f9:49:d2:8c:e0:94:
7d:4a:b0:bd:69:64:85:05:7c:1a:9f:57:9b:10:51:a6:f8:87:
54:78:e7:53:72:fa:82:8a:11:b9:f8:70:2d:c3:b1:90:3e:ea:
c2:a0:58:da:dc:ad:ce:c0:1b:45:6e:6f:02:b6:35:3a:f2:a1:
d9:ba:c6:48:b6:a2:17:61:da:19:9b:dc:14:70:33:86:73:29:
da:78:68:1f:12:70:fb:67:73:32:e7:06:fa:c0:87:14:d7:50:
5c:8a:6d:3f:81:c7:66:f9:3d:f2:46:fa:03:4c:c4:3f:1b:ec:
80:97:de:52:0c:39:77:b4:cf:59:5e:72:b9:01:63:73:da:23:
d8:4c:3d:1d:e0:1b:7d:4e:09:62:4c:75:ed:b9:1b:90:cb:a3:
56:40:cf:90:ce:70:da:ef:ee:e0:ed:58:3e:46:6b:34:10:7d:
6f:51:63:f2:1b:f4:4d:62:f8:9b:e8:bf:58:c2:79:26:ce:a6:
b8:e7:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 06:48:04 2026 by rpki-client