Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7079896251C711F19028FFA9CE1D38B0.roa
File: 7079896251C711F19028FFA9CE1D38B0.roa (raw, json)
Hash identifier: uPqSDICqOwY5XDhVfDh59q0y85dMeNVaiciK8FykvKE=
Subject key identifier: 77:74:D4:0D:D7:F9:30:50:9B:72:D3:80:6C:48:E3:11:BD:E3:D3:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B55F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7079896251C711F19028FFA9CE1D38B0.roa
Signing time: Sun 17 May 2026 08:07:26 +0000
ROA not before: Sun 17 May 2026 08:07:21 +0000
ROA not after: Tue 23 Jun 2026 08:07:21 +0000
asID: 149940
IP address blocks: 45.198.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111967 (0x1b55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 08:07:21 2026 GMT
Not After : Jun 23 08:07:21 2026 GMT
Subject: CN=6a09773d-6b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:ef:50:46:2c:4b:ff:30:e1:c9:77:9c:02:
55:c3:79:84:92:eb:e2:31:0f:9a:77:90:bc:a3:f9:
c9:b8:42:36:d1:6f:bd:53:9f:aa:e7:8a:74:5e:2c:
1e:7c:73:d5:ae:8f:bf:ee:19:08:b5:96:f9:a3:3d:
37:e5:24:c3:2a:e5:12:be:34:ee:2a:e2:30:ba:77:
3b:a3:06:ec:77:75:19:d4:1e:6d:49:4e:e0:81:76:
f4:89:b2:6c:e1:a7:ef:0c:7e:f0:9d:92:8e:07:1e:
f1:28:9c:87:ee:66:0b:a3:4e:91:71:98:4c:20:e4:
dd:0d:e9:72:a8:b1:a6:97:46:94:2a:5d:15:51:7b:
33:ef:02:b9:1e:ae:a9:a2:0b:c6:7f:d7:88:e7:16:
34:69:ac:58:17:a8:03:ed:1b:bd:42:e1:d5:e8:e8:
c7:44:de:7e:7c:34:60:b6:5e:61:24:0e:25:58:80:
21:d5:82:fb:8f:e2:4f:b5:bf:d9:43:f6:84:48:a7:
e3:c0:18:29:4e:0f:b9:90:08:e4:f9:77:2b:40:a5:
4c:64:da:b5:87:ae:98:84:70:e5:9c:6d:f8:8e:b0:
b8:e2:0f:8b:63:c0:e4:f7:dc:22:8e:ce:00:2b:02:
5a:79:6d:5f:63:25:61:55:a4:08:e3:8c:d9:f4:dd:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:D4:0D:D7:F9:30:50:9B:72:D3:80:6C:48:E3:11:BD:E3:D3:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7079896251C711F19028FFA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.1.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fc:f9:f8:0a:b8:5b:1c:8b:c0:1c:7b:07:38:c2:16:57:db:
70:3e:bf:04:e8:5a:28:06:de:9b:1e:01:d1:f6:34:7a:f6:31:
f4:07:24:f7:06:1a:b6:00:3a:a9:89:09:b2:93:b4:4a:5e:0d:
fa:63:d2:48:df:ce:40:c1:ac:cf:be:fc:07:2a:46:fc:35:3b:
e0:87:54:53:ed:1a:66:e5:49:6b:70:c3:7c:43:70:9e:8d:39:
64:30:9b:6c:27:4b:03:02:70:53:8b:6e:85:9d:b0:8d:f7:80:
97:9b:87:90:f2:6a:61:f5:fa:60:a6:92:7b:63:14:0f:24:b0:
63:e7:77:9a:21:ac:6e:bf:28:77:79:81:1d:e0:77:49:16:e9:
54:70:86:26:f5:23:29:1e:96:41:4c:7a:04:fd:b7:30:88:65:
d5:cd:b2:de:b5:e3:51:84:70:b0:0c:88:e5:76:07:d2:28:d7:
80:ab:d5:78:6d:1c:49:1b:f2:30:fa:5d:02:6a:e2:5d:a1:0a:
15:d2:1d:b5:65:bc:41:21:fb:d6:66:6b:b4:2d:29:17:2a:01:
c4:14:46:7a:93:ac:d7:f8:c8:77:55:65:37:1c:9b:7c:7f:af:
45:fd:05:3a:6b:1b:63:a3:3f:cc:46:58:a1:80:ed:97:f7:b2:
3c:ab:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:34 2026 by rpki-client