Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6B82E6779011F18BEC45B5CE1D38B0.roa
File: 6C6B82E6779011F18BEC45B5CE1D38B0.roa (raw, json)
Hash identifier: hu/WaLQ96dTEOaOWcmAXBFEr68/pxTGxf+l1RNFyYKQ=
Subject key identifier: A3:C4:E8:F6:6D:ED:70:29:43:62:74:FD:29:57:CE:82:9C:E8:89:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6B82E6779011F18BEC45B5CE1D38B0.roa
Signing time: Sat 04 Jul 2026 10:09:21 +0000
ROA not before: Sat 04 Jul 2026 10:09:16 +0000
ROA not after: Mon 10 Aug 2026 10:09:16 +0000
asID: 401615
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115419 (0x1c2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 10:09:16 2026 GMT
Not After : Aug 10 10:09:16 2026 GMT
Subject: CN=6a48dbd0-499d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:eb:01:48:21:f1:66:f3:d7:b4:bc:1f:05:
95:05:cb:b6:61:04:38:3a:1d:e0:0d:74:36:f6:8f:
65:29:8b:85:b5:71:28:fd:e3:d8:f0:0b:49:1e:3c:
ee:c9:e8:68:17:cd:f7:c3:45:b9:7a:d1:a4:2c:b2:
d0:89:fc:c9:cc:20:56:55:e2:8b:ec:c5:3e:76:eb:
60:48:b3:69:b9:50:4d:5a:d6:c8:77:2b:7b:86:54:
c1:af:ef:6c:ae:56:bf:1f:06:15:11:d0:e2:59:9c:
cf:a3:7c:6e:33:5d:50:f1:77:7b:25:3d:bb:4c:49:
b2:19:eb:7e:d7:fe:69:1d:15:e1:f6:ce:07:7c:b9:
44:cc:82:76:8c:72:d8:75:94:b2:3f:1d:55:7f:fd:
2f:c5:2b:97:18:97:4f:1f:44:31:14:dd:4c:d9:43:
4c:06:07:01:61:d3:4e:9d:19:6e:b2:64:4f:37:91:
8a:78:53:4a:aa:c3:a7:35:06:d9:ad:1b:38:bc:6b:
ae:3c:a0:81:97:51:91:7f:51:03:11:c0:d4:1a:64:
fc:9a:3f:b2:61:ff:74:bb:83:f6:a5:8d:dd:ed:a0:
97:83:fc:cd:44:b2:60:f3:26:bf:94:22:1c:25:b4:
0a:93:0e:bc:08:a3:ce:43:e1:02:79:36:1f:80:55:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C4:E8:F6:6D:ED:70:29:43:62:74:FD:29:57:CE:82:9C:E8:89:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6B82E6779011F18BEC45B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f1:ea:ba:22:c3:0c:2d:e8:c1:bd:f6:18:5d:48:56:0d:fa:
c5:a6:42:1a:c6:e1:ec:d8:80:f0:98:a6:cc:67:3d:bb:ea:5f:
0f:5d:25:8c:4d:27:5a:0e:2e:c5:6b:51:b4:7e:c7:68:b5:b5:
5f:11:2c:87:aa:9f:36:b0:63:2f:34:8c:75:f4:f2:00:1c:e2:
60:07:08:df:db:04:08:59:30:7a:cd:55:14:5f:52:0c:3b:f3:
31:49:c8:01:93:8c:b2:0e:a8:ae:be:fa:e3:d9:e3:ca:30:d5:
57:18:ae:f0:77:55:86:70:d6:ab:40:4f:ba:5c:46:30:6a:97:
f2:e7:87:39:70:97:e0:b0:17:fd:91:97:fa:19:58:e2:ef:17:
54:60:21:94:3c:9b:5b:17:8a:96:52:d6:4d:10:51:e0:af:54:
ec:a7:19:c3:77:a0:38:14:c1:44:a2:96:96:40:a2:81:c5:8f:
df:1b:37:0c:ee:c3:66:b8:83:3d:57:c5:48:bc:68:b1:3d:4c:
d5:8a:6b:db:cc:48:39:b6:8e:f0:65:05:0b:24:7b:c1:5b:5e:
4b:72:9b:f8:e9:bf:a0:32:74:26:e3:41:a1:a3:64:c0:c4:0f:
71:0d:6d:a0:bc:1f:98:e8:e1:88:79:03:91:80:ac:6d:73:3f:
6e:4d:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:41 2026 by rpki-client