Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A6CBD567C4F11F1BA0E8BC5CE1D38B0.roa
File: 7A6CBD567C4F11F1BA0E8BC5CE1D38B0.roa (raw, json)
Hash identifier: zsEmyLdRv4BSBVPo0K9zHf2Yu55vikSEnlFyPgnu1Ug=
Subject key identifier: 4A:E3:79:93:61:2B:16:C5:DB:05:C9:7D:4C:F6:E2:A7:94:EC:72:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C462
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A6CBD567C4F11F1BA0E8BC5CE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:07:03 +0000
ROA not before: Fri 10 Jul 2026 11:06:57 +0000
ROA not after: Tue 18 Aug 2026 11:06:57 +0000
asID: 18013
IP address blocks: 45.204.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115810 (0x1c462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 11:06:57 2026 GMT
Not After : Aug 18 11:06:57 2026 GMT
Subject: CN=6a50d256-7313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:a6:1f:ea:1f:ce:13:dd:f4:59:29:50:64:
b9:c7:71:a8:2d:f0:10:4f:74:27:47:79:6a:13:e5:
a7:71:8d:24:ee:08:ba:15:4e:07:9f:d1:66:71:ac:
84:8c:1c:74:62:30:5a:af:75:1d:15:41:3d:b2:7a:
9d:bc:48:af:c4:76:30:9f:95:89:5b:d8:29:5b:54:
5f:06:de:26:19:89:3c:65:0a:4e:98:99:9c:43:6b:
ac:07:ae:0d:d1:83:c6:fe:c6:ed:0b:4b:2b:bf:c0:
a3:a9:09:f2:86:74:bf:4b:ba:b5:39:14:b3:c1:68:
25:bc:e2:25:f1:3e:fa:22:73:2a:cd:d9:de:e4:20:
a5:92:43:1f:5f:32:f2:f5:0b:8d:7d:7c:22:2e:53:
4a:6c:87:df:90:23:7d:38:2b:63:f1:c7:84:8f:54:
db:78:4a:34:7a:fd:3c:5a:4f:57:bb:57:dd:8c:15:
63:c8:1a:d4:34:c4:e2:c2:01:80:4e:74:30:c1:1a:
e8:fd:04:6d:cf:96:fe:41:c9:6a:51:ea:b5:cd:da:
f1:84:e0:f2:ca:5a:08:9f:a4:bf:c6:d3:43:4a:55:
00:0c:02:bc:cf:4b:b1:13:aa:e1:3a:41:55:00:c2:
4d:55:bf:2c:44:d0:0f:9c:1f:d9:a1:04:70:8d:2b:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E3:79:93:61:2B:16:C5:DB:05:C9:7D:4C:F6:E2:A7:94:EC:72:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A6CBD567C4F11F1BA0E8BC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
89:7e:8f:01:2d:06:43:2a:5d:e6:a4:6e:18:1a:7f:91:99:73:
c0:39:40:d3:9c:b9:e3:09:91:c3:41:dc:a3:bf:3c:23:7b:25:
99:3b:6d:63:22:92:4b:77:90:6d:ef:21:1b:fe:69:41:06:6c:
88:27:01:e5:13:93:19:cb:22:90:a9:6e:42:83:9b:bd:a9:46:
a8:33:84:37:58:a3:1e:c2:03:54:07:2c:5e:2e:c7:79:31:32:
56:bc:0f:36:93:c3:9a:f8:cc:19:71:ce:07:9c:9c:fd:64:f0:
e4:23:82:17:01:e3:11:f4:77:a9:6e:69:a1:3a:63:19:c1:d7:
c5:93:ce:73:df:6d:62:39:78:1e:46:f0:40:37:1c:cc:a6:18:
e1:fd:ab:ca:4a:72:35:58:d5:09:c9:08:ab:96:9a:d5:e4:cf:
32:1a:b8:7c:16:46:e5:14:11:d1:1f:a1:f1:69:3d:8d:aa:ad:
4b:d1:97:28:6e:b5:21:51:42:8c:5b:2c:14:67:1c:bc:69:77:
c5:64:26:d4:32:11:36:16:63:25:32:ea:62:9a:2f:41:03:1b:
24:bc:63:9c:11:00:14:00:30:79:de:af:e7:1b:2b:a0:44:f0:
75:5e:6e:fb:4b:a1:c6:e4:67:2f:f7:33:b1:b2:10:4e:1f:7e:
d9:59:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:15 2026 by rpki-client