Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720C8B68716F11F1B8DE65E7CE1D38B0.roa
File: 720C8B68716F11F1B8DE65E7CE1D38B0.roa (raw, json)
Hash identifier: A9WFYXASNrfPNBAkRpY+6jFLErdKfdVOku83Ps1Wd+s=
Subject key identifier: BB:75:2A:51:96:7C:CB:B9:2B:4F:01:0E:DC:30:3D:06:2A:E7:EC:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720C8B68716F11F1B8DE65E7CE1D38B0.roa
Signing time: Fri 26 Jun 2026 14:58:10 +0000
ROA not before: Fri 26 Jun 2026 14:58:05 +0000
ROA not after: Tue 04 Aug 2026 14:58:05 +0000
asID: 213800
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114869 (0x1c0b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 14:58:05 2026 GMT
Not After : Aug 4 14:58:05 2026 GMT
Subject: CN=6a3e9382-855a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:04:d1:5a:7c:91:29:a0:ab:c5:18:a5:c9:
b0:9b:93:a0:a8:2e:fc:0f:e2:16:06:92:c7:71:c1:
a0:6d:9b:62:1d:14:23:02:09:f4:f8:c7:0b:0e:df:
f2:d9:36:ed:e3:be:9e:bd:c9:74:fb:0b:b3:6c:33:
da:eb:d8:ca:7f:49:ed:45:c5:15:a1:fc:f0:13:1e:
cb:44:5b:bf:65:09:f1:dd:3c:a9:12:1c:ff:34:64:
55:13:51:d1:41:17:9c:47:79:16:b0:40:3d:e4:15:
00:0c:d6:52:89:5f:7a:31:e7:5a:17:a8:f2:27:1a:
f5:a3:0c:ef:be:ed:0a:48:68:12:b4:4c:9d:07:2c:
02:90:e9:5e:0a:36:90:6d:39:7a:7e:d9:cb:98:f5:
07:e3:4e:66:0a:a5:6f:de:6d:df:9b:a9:7a:87:d1:
87:6d:6f:b8:d0:2b:0a:ca:36:c8:0f:75:ba:98:52:
a2:af:0e:86:50:f5:a0:bb:c1:2f:13:03:0a:8c:0f:
37:f9:3e:ac:b5:1e:3e:20:af:6f:c7:d1:c1:59:63:
c6:7d:03:61:86:dc:12:ea:24:95:0d:09:a2:cc:5e:
fc:40:98:52:5e:92:e3:0d:cb:56:67:a1:dd:58:e6:
3f:29:f8:43:10:18:b7:8e:02:18:f4:c1:78:63:94:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:2A:51:96:7C:CB:B9:2B:4F:01:0E:DC:30:3D:06:2A:E7:EC:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720C8B68716F11F1B8DE65E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:70:75:0c:60:5a:29:5c:bf:f4:d2:49:50:2d:93:4c:57:b2:
65:0b:18:86:d7:03:85:f0:83:b3:25:81:74:c8:79:8c:4c:6b:
b6:4c:82:a9:87:54:7e:60:ee:80:ae:a1:a8:25:b5:ea:51:38:
b3:3a:42:ee:6a:cb:e1:c2:28:3e:2c:2a:36:b3:2d:e1:21:d8:
ef:a4:ae:76:74:57:45:3d:8f:b3:e2:90:f6:ac:3a:c4:d3:e2:
e5:9c:b0:c2:de:53:79:cc:28:c8:1b:93:3a:81:9c:3a:b7:7b:
b7:5d:fb:0f:e0:37:76:39:b2:01:8c:a2:ad:9a:23:21:6a:e5:
7b:19:fe:3f:26:2f:04:af:a2:6f:ae:a0:ec:e4:b6:72:f3:8f:
b3:13:de:d9:8f:00:e0:f5:40:55:b3:73:b5:cf:f5:0d:75:45:
e7:aa:09:77:69:17:e1:db:27:42:a6:cc:40:6e:da:05:86:22:
ec:12:ae:fb:c3:d6:a0:bb:97:64:b9:cf:e6:f2:11:20:b1:7e:
72:41:5b:3e:60:e7:ce:7a:dd:07:22:8a:d1:91:22:bb:c0:93:
bf:5b:f8:9b:df:de:60:2c:dc:97:9f:41:f9:b9:e5:f9:57:64:
19:b9:db:c5:a2:94:8a:25:f9:63:ea:8a:df:c7:e6:58:5a:2a:
68:99:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:33 2026 by rpki-client