Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68969B1679DD11F187641CABCE1D38B0.roa
File: 68969B1679DD11F187641CABCE1D38B0.roa (raw, json)
Hash identifier: 0R+w1fFD+DQ9mOfjtsBimPomNeXhbxDKlIHLnI/DrY8=
Subject key identifier: B8:20:15:A5:1C:62:A9:D9:D0:59:04:0F:97:5A:21:2B:7F:77:29:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C364
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68969B1679DD11F187641CABCE1D38B0.roa
Signing time: Tue 07 Jul 2026 08:25:28 +0000
ROA not before: Tue 07 Jul 2026 08:25:23 +0000
ROA not after: Fri 14 Aug 2026 08:25:23 +0000
asID: 63023
IP address blocks: 45.195.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115556 (0x1c364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 08:25:23 2026 GMT
Not After : Aug 14 08:25:23 2026 GMT
Subject: CN=6a4cb7f8-53a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:92:44:c7:6a:4c:b9:dc:44:de:82:fe:61:
e7:7b:85:f3:b7:b4:e0:b8:b0:cb:d8:b3:91:a2:e2:
cb:fd:84:ef:cc:9d:10:d6:da:67:85:8d:bd:e7:21:
45:1c:29:11:5c:d3:62:d9:c9:c9:4b:b3:fe:70:15:
9b:2f:d2:3e:66:82:63:39:3e:bc:e9:d6:6b:07:4b:
8e:7e:02:92:a1:33:af:ea:eb:ab:1f:02:1f:64:18:
bf:03:29:d0:b4:3d:82:f6:8c:2f:7f:78:ca:99:9e:
72:f0:c1:f8:d8:02:85:d8:ed:64:e6:d4:da:c2:27:
b5:2e:a9:e6:df:19:be:4e:d8:8d:18:76:f9:b1:e7:
d2:82:a0:f7:74:8f:f0:90:6a:86:2a:86:1f:bd:02:
a3:0e:4d:0b:6f:4a:13:a3:9b:5a:46:2d:67:c0:04:
e5:d8:ba:ec:2a:20:0a:4c:a2:41:80:a3:6b:2a:5a:
9a:5d:3c:29:67:5c:df:e5:0f:28:91:73:66:e6:e8:
c8:65:14:6c:42:9c:be:8d:38:aa:5c:a4:5f:56:e4:
45:43:48:dc:cd:25:19:23:c2:9c:e3:cf:22:3b:f1:
fc:32:a8:6b:4a:fc:82:8f:b8:0b:ba:7c:61:6d:fb:
a7:6c:1c:31:d9:3f:0c:8f:dc:e3:62:3a:34:46:e3:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:15:A5:1C:62:A9:D9:D0:59:04:0F:97:5A:21:2B:7F:77:29:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68969B1679DD11F187641CABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.2.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d0:d5:5e:f6:00:37:64:38:38:44:e4:25:6a:20:51:23:f7:
a9:a6:74:b2:51:8b:53:2b:cf:14:1f:00:e1:ba:15:7b:c5:6f:
91:5c:cc:43:a5:9e:7c:5a:8b:9f:0b:f3:94:2e:b7:44:4a:e9:
90:7b:24:04:a8:39:b0:6b:d6:4a:26:39:2e:32:8d:ea:94:ff:
e8:99:b7:16:26:bc:ff:ba:1b:d6:74:4a:e7:49:ad:63:ed:f3:
39:08:6c:87:db:37:70:14:8d:8e:92:c4:9d:9e:d0:c9:f1:eb:
46:2c:77:0b:08:29:df:93:72:86:be:0a:c3:bf:0e:6d:96:ab:
17:bf:3d:cb:e3:0f:48:2a:0a:89:5c:06:51:e3:ca:46:61:99:
c5:5b:dd:01:8c:b4:a6:12:06:55:b8:d2:69:3b:aa:f9:0f:1e:
47:ec:e4:0e:0c:f5:f5:81:11:ad:13:73:84:f1:14:d0:c9:5d:
49:3e:70:48:77:ff:75:21:1c:c0:05:fb:00:0e:26:8f:cf:67:
a0:70:dd:d8:0a:00:b2:17:ae:20:77:25:a4:33:96:3b:4a:01:
b9:bd:ee:69:56:1a:c0:e9:3f:71:fa:f0:e7:5a:cb:a5:3a:38:
c9:f3:7d:10:5a:4a:91:8d:a6:6a:8a:4f:bd:ea:93:c0:26:fb:
b5:18:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:17 2026 by rpki-client