Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71BC5588706811F1ADB443B0CE1D38B0.roa
File: 71BC5588706811F1ADB443B0CE1D38B0.roa (raw, json)
Hash identifier: fVxt13yUJWs9ULX6wZ28Sgfy3dA2cLWEvXJMv1b7HZU=
Subject key identifier: AB:1F:36:A6:26:BA:D9:14:24:F1:8D:C8:97:AF:3F:2A:52:97:85:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C064
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71BC5588706811F1ADB443B0CE1D38B0.roa
Signing time: Thu 25 Jun 2026 07:35:31 +0000
ROA not before: Thu 25 Jun 2026 07:35:26 +0000
ROA not after: Fri 24 Jul 2026 07:35:26 +0000
asID: 201814
IP address blocks: 45.192.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114788 (0x1c064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 07:35:26 2026 GMT
Not After : Jul 24 07:35:26 2026 GMT
Subject: CN=6a3cda43-ebc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:35:e4:57:23:d1:27:13:e8:ef:33:b9:db:
d9:e2:d2:ad:54:99:d7:2e:b1:56:f2:db:0f:e4:51:
ba:29:24:96:d4:15:42:ca:44:c6:9b:5e:5c:db:47:
69:37:f0:8b:45:80:11:3f:60:4d:4c:e7:8b:88:c9:
40:fe:7f:2c:dc:e4:42:ad:8d:d0:a5:4a:dc:52:2e:
ce:db:66:2a:46:eb:e7:09:47:4c:29:86:cf:41:1b:
74:21:51:12:5a:46:70:39:5b:65:74:e9:7e:f9:9c:
ee:72:42:c1:69:73:bf:21:4a:4e:17:da:55:44:a9:
d4:0a:b0:1c:48:d6:39:21:ad:22:8f:02:e8:5b:58:
ea:39:c4:22:4d:10:52:1d:5e:20:e6:a2:89:57:86:
74:78:31:cb:1d:ae:1c:ff:9f:c0:f2:09:23:27:34:
e7:60:13:25:96:8b:59:9b:25:0b:79:11:c8:df:87:
d0:25:51:d2:6a:a5:2b:1c:d6:6e:f5:68:df:c1:50:
2a:cb:8b:31:ed:c6:0a:2e:5a:2d:1f:d3:ce:46:15:
11:c7:cb:29:22:32:b9:0e:d5:97:f2:2d:98:b1:35:
bd:b6:04:aa:ed:8a:e3:4e:e3:a1:e8:eb:fa:55:e8:
2a:f4:3d:f5:22:1c:d1:c4:0b:60:08:b3:da:ce:37:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:36:A6:26:BA:D9:14:24:F1:8D:C8:97:AF:3F:2A:52:97:85:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71BC5588706811F1ADB443B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
95:14:36:14:f4:83:77:67:6d:b6:56:3f:ea:86:2f:34:25:07:
25:da:4f:cf:0a:b8:64:5c:d8:19:d4:24:e6:07:77:2f:33:4c:
e4:a9:3f:48:80:30:3c:aa:2a:f4:f2:2b:a6:d7:80:d4:c7:9a:
e9:ff:b1:8c:06:df:fa:b4:16:9f:f3:e4:9e:7b:a8:c7:f7:e8:
14:13:0b:b2:03:59:5a:c7:b7:75:4f:1d:0f:7f:9e:9c:8c:e4:
6c:94:db:e3:52:6a:75:bb:ec:18:5f:7b:9c:b2:15:aa:c9:31:
27:04:b6:f6:40:b3:94:87:b6:a6:6b:80:0a:a0:91:0b:19:22:
3b:58:20:8f:59:74:10:04:ee:75:a1:f7:30:7e:2a:4a:8d:56:
b4:a7:4f:e6:7b:49:f8:d5:9a:35:49:be:6d:1c:ff:0d:23:7b:
55:93:4f:49:c3:29:46:eb:12:0d:84:7e:18:a1:52:7d:f4:90:
b7:36:69:a9:55:16:ef:d9:32:8d:21:f2:21:e6:1c:f8:d7:f4:
a3:d1:13:d9:f5:09:98:94:75:e5:e8:a7:32:2d:89:e5:ff:ef:
7b:4d:25:66:03:20:70:37:0a:79:e2:8e:8a:69:b9:ab:a6:fb:
07:fe:bc:72:6c:39:3b:c8:ab:c7:8e:7b:c1:22:67:d6:86:fd:
5a:62:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:39 2026 by rpki-client