Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77B8EFD4311E11F1B5D2B2DADAE4EC9C.roa
File: 77B8EFD4311E11F1B5D2B2DADAE4EC9C.roa (raw, json)
Hash identifier: gqjO3XN1OsfmUSRl4QWxVgVjtTh/lJygkfLCF42FuQk=
Subject key identifier: E3:19:78:57:93:7D:AA:C2:85:7C:45:14:28:35:56:D8:9C:75:D3:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77B8EFD4311E11F1B5D2B2DADAE4EC9C.roa
Signing time: Sun 05 Apr 2026 18:37:15 +0000
ROA not before: Sun 05 Apr 2026 18:37:11 +0000
ROA not after: Tue 05 May 2026 18:37:11 +0000
asID: 202662
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109134 (0x1aa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 18:37:11 2026 GMT
Not After : May 5 18:37:11 2026 GMT
Subject: CN=69d2abdb-2f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f4:ef:f1:15:81:c4:8b:ea:48:f1:e4:4f:f5:
4e:4d:86:2a:ed:9a:cf:a7:37:3d:54:ec:48:4d:98:
69:20:d9:2e:91:78:67:3e:72:74:7b:fe:2d:b8:0b:
8e:28:be:a9:02:2c:4a:cf:5c:58:f4:92:37:1b:3a:
ef:ee:58:d0:fb:a3:ea:cc:8f:06:a0:6f:ea:05:38:
17:0f:cc:32:cd:77:2e:28:7f:b8:81:cc:1f:56:d4:
2d:33:6f:70:06:07:45:52:8a:c3:eb:4f:78:02:78:
a1:7f:f4:ad:e2:83:64:9f:47:8b:56:3b:6b:46:b6:
b3:ea:c5:00:09:64:b9:be:1d:cb:ce:63:7a:1e:af:
55:fd:62:64:19:95:ad:f9:af:fa:6e:17:4c:31:3b:
d0:41:3d:d0:59:35:d2:40:77:7d:01:b1:43:7b:eb:
ba:f3:f4:42:f4:83:71:5a:cb:b7:30:32:27:6e:a2:
55:9d:a5:9f:77:c2:9f:4a:84:80:56:88:58:31:14:
5d:26:6a:3f:2a:04:a6:e4:d8:b4:97:ab:28:d4:65:
92:23:a5:cd:98:0b:e9:36:6e:21:f8:f1:3a:52:88:
10:a2:f6:83:a0:a1:03:2f:d9:8f:26:23:d2:83:71:
43:17:21:70:3e:fc:84:f1:ba:c1:69:66:2e:34:16:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:78:57:93:7D:AA:C2:85:7C:45:14:28:35:56:D8:9C:75:D3:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77B8EFD4311E11F1B5D2B2DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3e:f3:39:87:b1:0a:bf:87:15:67:b1:da:5a:90:75:56:a4:
d2:a3:82:80:d1:d5:3d:5a:a0:12:39:71:90:42:51:3c:82:27:
c0:ef:03:9b:e2:c9:02:ae:0b:b9:9d:55:3a:10:b2:f3:b3:08:
f8:8c:37:30:4a:32:4a:1c:23:59:5a:2e:78:1e:70:03:50:63:
ab:1e:54:98:81:42:01:31:56:3f:25:cb:97:48:70:74:ed:7e:
cc:2f:9b:12:0b:68:8b:42:a8:98:92:ff:25:d8:41:8b:d9:14:
d2:c9:1f:61:1e:73:47:d4:f9:e0:13:b2:97:7b:cd:67:cc:26:
50:b8:62:de:dd:b8:17:b0:88:10:4d:58:57:97:5a:3d:07:38:
33:37:eb:4e:c7:70:fd:a5:07:04:fe:ff:da:32:00:ea:8f:c8:
d4:16:16:f7:88:61:d6:bd:57:5c:11:c8:92:47:b2:f0:fa:34:
70:2d:fd:c1:74:14:d0:bf:bd:17:c9:08:66:e0:3e:26:02:3d:
e9:ee:2f:75:f6:c0:d7:4f:00:f4:5b:bd:af:12:45:6e:1e:95:
4a:85:69:49:b8:cb:79:2f:eb:93:4e:13:6a:fa:52:24:a1:1a:
89:3a:8f:d8:cf:99:78:e1:0d:e2:65:75:d4:47:33:63:42:d0:
8c:71:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:26 2026 by rpki-client