Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/723528F67D5511F1BF285FF4CE1D38B0.roa
File: 723528F67D5511F1BF285FF4CE1D38B0.roa (raw, json)
Hash identifier: OOelasZ6gIqLw3C11lFAQqcxa+CuQPcKBZgbuHX7ZnQ=
Subject key identifier: 49:06:26:EE:9E:4D:68:BD:79:44:FF:B7:DD:63:EE:F8:65:7C:8E:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C489
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/723528F67D5511F1BF285FF4CE1D38B0.roa
Signing time: Sat 11 Jul 2026 18:22:17 +0000
ROA not before: Sat 11 Jul 2026 18:22:12 +0000
ROA not after: Tue 18 Aug 2026 18:22:12 +0000
asID: 400619
IP address blocks: 45.204.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115849 (0x1c489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 18:22:12 2026 GMT
Not After : Aug 18 18:22:12 2026 GMT
Subject: CN=6a5289d9-c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:85:a4:37:d3:ff:4e:bb:35:50:fc:4c:60:
7b:ee:58:43:b6:b2:b3:92:b7:f4:d3:a2:b8:99:8c:
60:cb:27:8f:1e:d9:9a:ec:21:70:5a:a0:61:4f:3b:
6e:8e:ad:ff:ed:57:08:21:dd:42:3b:2b:3a:1e:20:
91:26:79:b3:1c:d6:fd:cb:8d:9f:93:bb:69:a4:14:
4c:ab:c5:fe:f5:f7:bf:9b:1e:f0:42:b0:52:8d:67:
f5:5c:2f:e9:50:b8:bd:fb:54:b3:88:3a:21:17:c4:
76:5e:17:f1:a1:a1:f8:66:86:b5:96:74:84:ab:ce:
f2:5c:c2:f6:71:2b:aa:91:e7:41:50:d5:38:18:52:
e4:7d:63:d7:08:3e:18:ac:14:2e:cc:b4:87:d4:7a:
97:47:80:52:40:12:12:80:bc:bd:cd:36:ba:cd:5a:
f3:fd:ae:bc:2e:ab:df:1e:07:17:46:55:61:36:09:
16:25:f9:40:90:39:93:00:c7:ba:6e:aa:7f:ea:5f:
17:02:7b:bd:7d:f1:97:44:dc:06:35:dd:b9:aa:32:
9c:4b:63:cf:7b:c4:25:4d:48:11:13:0a:62:f4:63:
3e:3d:87:40:9c:63:0e:87:23:0e:05:3d:80:70:be:
a7:4f:8b:a3:58:a7:98:b0:22:ca:4d:24:ed:7c:09:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:06:26:EE:9E:4D:68:BD:79:44:FF:B7:DD:63:EE:F8:65:7C:8E:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/723528F67D5511F1BF285FF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:eb:8a:bc:25:0e:0a:44:bd:08:8d:fb:60:bf:16:db:d0:dd:
89:57:97:a8:39:05:1b:c5:28:81:b4:2d:31:ad:3e:05:e0:90:
09:fb:dc:0b:e4:90:1a:17:f1:1b:cc:93:d6:23:33:4a:66:d6:
1d:d3:a7:8f:4c:67:20:82:8a:c1:b3:c8:71:ad:ae:31:75:cd:
98:f4:05:2d:bb:7e:48:30:c6:04:97:ef:56:b5:18:9a:d8:53:
26:dc:15:65:03:2a:8d:a9:1b:dc:cb:2c:85:c7:9e:1e:52:14:
9d:95:bc:01:c5:3d:34:6d:02:59:14:fb:a4:ee:38:5a:ca:76:
d0:2d:62:c1:ea:5c:ed:2c:08:bf:db:a1:66:c8:de:a0:1b:8f:
86:44:81:db:52:68:1b:0a:18:61:19:df:d2:6e:2c:be:eb:64:
d1:cb:57:c3:99:95:03:b3:ef:ec:b8:43:36:22:3e:58:00:93:
7c:4a:ca:12:6a:b0:de:e2:e3:0a:ef:a0:6b:6b:9d:b3:e7:d3:
c1:db:1b:18:72:a2:42:fa:fe:5f:09:b7:e8:36:a0:cd:99:7d:
d1:8b:60:fb:e4:d2:07:f1:84:36:60:21:15:46:9e:4c:3b:2a:
96:46:90:27:39:eb:32:d2:9c:c9:76:ef:04:be:76:04:64:c6:
68:83:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:41 2026 by rpki-client