Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EE58D5472FA11F191B843CACE1D38B0.roa
File: 6EE58D5472FA11F191B843CACE1D38B0.roa (raw, json)
Hash identifier: 0d5xEqEAHDZ7EBjA75zUJxFXCbx3tD5n9uybI2U/l7M=
Subject key identifier: 18:8C:FC:87:28:36:D9:F1:E6:35:F7:0E:9B:CA:6A:1D:28:6B:43:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C155
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EE58D5472FA11F191B843CACE1D38B0.roa
Signing time: Sun 28 Jun 2026 14:05:36 +0000
ROA not before: Sun 28 Jun 2026 14:05:31 +0000
ROA not after: Tue 04 Aug 2026 14:05:31 +0000
asID: 61112
IP address blocks: 45.207.34.0/23 maxlen: 24
45.207.40.0/24 maxlen: 24
45.207.41.0/24 maxlen: 24
45.207.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115029 (0x1c155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 14:05:31 2026 GMT
Not After : Aug 4 14:05:31 2026 GMT
Subject: CN=6a412a2f-51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:30:06:30:cd:06:e1:93:da:99:7e:f0:70:
d3:45:3f:a4:bc:7b:ff:16:9c:87:57:79:df:58:fe:
9d:ed:51:20:45:4c:3f:5f:28:9a:b9:31:98:ef:b1:
ec:a6:af:db:e6:40:9a:ed:e7:b2:2f:1b:ae:8c:11:
e2:fc:39:14:16:34:9f:eb:3e:2e:f3:1c:e5:74:00:
fb:98:87:c1:5e:be:b5:21:3d:48:f8:1b:60:8e:38:
b0:87:d2:39:b4:db:a3:68:f2:fd:cf:28:88:61:58:
96:35:d2:76:5d:aa:a9:bb:d8:4d:28:04:aa:4d:95:
27:92:71:e8:64:4b:84:b0:d0:05:a3:f6:20:f5:d8:
17:9b:20:47:c7:70:94:f9:bf:72:5f:e8:bd:db:88:
11:67:e5:51:89:26:35:61:36:55:af:55:10:03:17:
f6:ed:e3:91:04:ae:93:a1:2c:9e:65:f0:21:45:68:
5e:1e:29:c6:4a:a3:e7:89:51:8d:b7:c2:00:0e:db:
a6:af:cd:ca:79:29:cc:df:e0:71:df:c6:33:51:06:
b3:27:93:91:91:12:45:dd:bf:e7:87:dd:6c:ac:50:
d0:9c:29:cc:3a:49:a8:39:32:98:22:e2:2e:81:19:
21:cb:3d:b9:6e:f3:76:01:f7:85:ee:a7:09:62:7d:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:FC:87:28:36:D9:F1:E6:35:F7:0E:9B:CA:6A:1D:28:6B:43:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EE58D5472FA11F191B843CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.34.0/23
45.207.40.0/23
45.207.59.0/24
Signature Algorithm: sha256WithRSAEncryption
67:50:78:5f:ff:80:83:e1:7f:b7:29:f4:27:cf:70:e3:5b:f2:
11:f2:52:98:d9:a1:ee:1f:fb:6a:35:9c:b8:0d:cd:04:0d:43:
41:97:78:a3:9b:e8:30:c1:9a:0e:5d:05:3f:3f:48:1f:6c:89:
7c:3c:72:05:f6:da:8a:bd:5a:7c:4f:a4:a8:a2:22:82:2f:71:
ba:16:7f:5e:29:8e:78:17:39:f5:a8:a4:bd:a2:d9:fe:92:fc:
29:e9:69:35:33:82:ae:79:19:89:2b:74:f9:5d:b5:d2:79:68:
48:ab:bb:de:aa:7b:50:7b:51:7c:20:d2:2d:bc:34:71:89:e0:
63:f5:74:77:29:49:a6:94:ed:cc:64:85:3d:e4:bf:b4:4a:d9:
ea:fd:08:bd:17:72:26:4a:1c:2c:e9:8f:fc:41:32:cc:d2:0c:
ab:86:67:4b:52:1f:c3:d9:b1:a5:04:ca:41:69:69:36:e2:c3:
8c:69:ef:82:f1:44:27:f3:d5:38:f1:94:8e:88:41:41:ee:1e:
a1:3b:32:47:4e:ee:13:73:f6:8c:08:5a:a7:c7:e1:70:41:2a:
0e:7e:52:1b:77:3a:cc:f2:ae:7a:3a:f4:a6:a6:10:d9:ce:ae:
24:14:d1:fa:55:e9:42:32:23:15:da:cb:0c:7f:20:6c:d5:92:
d3:d7:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:03 2026 by rpki-client