Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675AD58E657211F1A24426CECE1D38B0.roa
File: 675AD58E657211F1A24426CECE1D38B0.roa (raw, json)
Hash identifier: GdEhsjYdCEN67mm/pdQJ6RW+woTCUFUeW1K3yuNvyUg=
Subject key identifier: 44:35:31:6B:E6:2F:81:32:07:25:27:70:0E:08:04:7C:23:D7:61:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675AD58E657211F1A24426CECE1D38B0.roa
Signing time: Thu 11 Jun 2026 08:49:06 +0000
ROA not before: Thu 11 Jun 2026 08:49:01 +0000
ROA not after: Tue 13 Apr 2027 08:49:01 +0000
asID: 18229
IP address blocks: 45.197.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113901 (0x1bced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:49:01 2026 GMT
Not After : Apr 13 08:49:01 2027 GMT
Subject: CN=6a2a7682-78c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:01:d6:2e:04:0b:19:8b:42:8d:af:23:fe:
c1:59:c2:cb:84:ab:a1:15:2c:82:dd:9e:f7:96:4a:
ae:6a:29:05:83:a5:0d:84:8f:df:90:81:3b:83:49:
4d:ff:02:c3:1e:57:74:d6:a0:c5:e8:4e:ea:e0:26:
22:67:44:2c:1b:32:cf:5c:4c:0e:16:b2:7d:a1:e2:
79:cc:05:9b:57:d6:e5:ea:c2:9a:79:2d:e5:f8:95:
b4:18:28:3c:df:f8:3f:d8:a3:e8:39:c9:25:fd:7d:
aa:62:ea:e3:c1:8d:0f:77:d9:c3:64:af:34:e4:2f:
9c:c7:83:fd:ce:dd:01:38:53:ae:d6:e9:48:dd:d7:
bd:54:9a:42:76:85:3a:28:38:c5:2e:6f:3d:ef:ab:
0e:fa:9c:75:4c:fb:ae:37:d9:8e:29:07:cf:7f:6d:
5d:ac:f3:8a:d8:c9:bb:7d:bd:2c:e6:87:01:85:75:
24:ff:8d:c9:c9:71:eb:dd:54:1e:14:02:4f:aa:4c:
df:7c:99:1b:97:80:95:30:47:25:e5:59:a9:7e:56:
cf:b9:62:f4:5c:b7:e6:27:98:19:26:3b:dd:97:03:
b8:7a:0b:54:7f:ee:d8:2c:a3:7a:b0:66:35:2f:d9:
af:71:9d:c3:2f:b7:66:b2:b2:b5:2e:42:c7:cc:e3:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:31:6B:E6:2F:81:32:07:25:27:70:0E:08:04:7C:23:D7:61:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675AD58E657211F1A24426CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:db:c4:20:03:d0:21:b3:88:90:09:5a:89:ba:c9:0a:c8:27:
06:76:76:c2:2a:fa:8a:36:7b:e7:8b:e0:db:29:4b:19:dc:a9:
f3:e0:fa:f7:dd:da:22:92:80:0d:e7:b7:1c:0a:1b:5f:15:30:
40:59:13:81:d8:4c:f1:5d:36:06:ea:48:40:c6:e7:41:3f:3b:
20:9e:2f:dd:16:bd:7b:c9:a9:e6:be:44:e0:e0:66:7d:83:b8:
2d:97:59:99:f1:62:aa:6d:7a:ca:1e:0e:c9:bb:56:17:3e:b3:
33:70:4e:3e:89:15:ca:9e:4b:ff:ef:fe:70:11:39:5d:50:e6:
7d:14:50:4b:52:21:db:ea:dd:27:46:7b:c3:f2:f2:ad:74:2f:
5b:e4:e1:16:36:b4:1b:d6:30:e6:28:c4:38:9b:6c:df:30:c3:
9f:04:fc:ed:45:7a:e2:23:d5:fb:18:03:e6:bb:8c:53:a7:5b:
3a:7f:58:d0:5e:ae:28:e3:ec:8a:7b:75:1f:1b:53:66:ea:3a:
58:23:a7:6f:66:68:2a:15:06:b5:cb:81:e4:d6:34:b2:75:50:
a6:89:58:ce:ac:01:f2:b8:79:c7:25:70:ac:e3:c4:d0:34:85:
78:d0:31:e1:9d:a9:ff:bf:82:1f:03:a3:3e:e7:a9:b2:f7:77:
42:db:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:02 2026 by rpki-client