Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CDE5BD46A5811F18A5E3B0CCF1D38B0.roa
File: 7CDE5BD46A5811F18A5E3B0CCF1D38B0.roa (raw, json)
Hash identifier: KW/p0ZyNVSye6DugNKygY+8BOaSKiToHmFsVcA1lq7Q=
Subject key identifier: 66:1E:42:99:A1:51:20:19:5B:A5:73:D0:60:3D:EF:DE:A3:C7:5E:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CDE5BD46A5811F18A5E3B0CCF1D38B0.roa
Signing time: Wed 17 Jun 2026 14:26:11 +0000
ROA not before: Wed 17 Jun 2026 14:26:07 +0000
ROA not after: Sun 13 Sep 2026 14:26:07 +0000
asID: 139880
IP address blocks: 45.204.160.0/20 maxlen: 24
45.204.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114374 (0x1bec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 14:26:07 2026 GMT
Not After : Sep 13 14:26:07 2026 GMT
Subject: CN=6a32ae83-b208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:a8:4d:a8:e6:5d:1a:cb:da:40:b4:67:15:
1d:49:b3:a0:cc:32:fe:f9:6c:a0:7b:85:ff:f8:29:
7a:8c:01:8c:a3:11:58:40:07:c9:9f:68:39:dd:16:
e6:19:c7:b1:b3:96:0c:72:89:0c:47:29:fe:41:ba:
97:e4:6e:e4:a2:ac:80:ed:f2:83:33:0a:e6:bf:22:
69:c2:52:36:cc:dc:c6:08:46:62:a7:32:14:18:f4:
59:73:1d:5f:d5:63:49:06:2c:11:2b:65:51:f9:aa:
59:0d:3f:4a:05:4c:7f:8e:4c:01:5f:d8:a0:c4:c1:
57:ff:3f:e0:56:4a:7a:6c:ad:b7:fb:0b:e7:1e:46:
ec:c5:2e:01:b6:2c:ee:0e:03:05:3f:d4:63:d4:e0:
88:94:aa:96:78:ed:94:a2:01:18:27:c0:e8:38:4a:
ee:51:55:be:58:1b:af:8c:0e:d3:bb:0b:8a:e2:8c:
42:02:29:5e:77:9f:5f:7a:b8:41:df:46:4b:1e:d8:
cc:f6:ab:87:e4:67:61:d1:d7:db:b3:3e:e1:1e:3e:
94:34:c3:94:52:ef:a1:3a:3b:25:92:10:b8:53:c9:
46:98:1e:1e:d0:6a:eb:23:95:6d:9f:45:66:52:21:
ce:99:1a:8a:f4:d9:33:ff:b6:d0:d2:9d:6f:43:4f:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1E:42:99:A1:51:20:19:5B:A5:73:D0:60:3D:EF:DE:A3:C7:5E:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CDE5BD46A5811F18A5E3B0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.160.0/20
45.204.224.0/20
Signature Algorithm: sha256WithRSAEncryption
64:2b:58:31:79:41:31:0a:a1:1b:02:03:77:cc:74:30:61:6b:
a8:9b:e1:9d:ac:f3:a8:8c:2b:28:ee:54:7e:ce:ed:19:a2:95:
10:63:13:6a:bf:18:08:b3:5a:db:39:df:2d:8e:21:0d:3c:71:
01:22:9d:e5:47:4f:2f:b6:c5:f7:2c:f4:99:4c:eb:4b:0f:fc:
20:5a:45:d5:f2:01:34:29:c6:2f:b0:8b:24:3b:84:f9:fd:c8:
6c:96:9f:ab:90:4c:e1:44:93:81:83:b9:de:aa:ed:e6:d4:bf:
57:6b:7a:61:39:5c:e2:a5:65:a2:83:a3:a8:a2:5e:9a:80:6a:
9a:98:a9:a6:00:c1:64:5a:0b:78:d4:4e:2a:fa:08:e7:cf:5a:
00:a3:bb:04:d7:21:8a:25:ff:e9:e3:32:95:8d:22:50:7c:cd:
12:82:98:36:b3:d3:7e:7d:43:a9:1c:d0:22:1d:c8:eb:68:ea:
b6:d8:fe:4e:20:77:b5:98:07:89:8b:d8:25:5c:16:9c:4f:86:
6f:4e:1e:e5:8b:9f:1b:0c:70:ab:f9:80:50:91:10:03:47:61:
60:17:05:e8:58:b8:f3:59:04:fc:a2:70:6e:36:3d:89:05:13:
77:51:bd:56:9b:61:33:32:d2:b3:eb:0b:f1:ac:ec:25:4b:20:
17:8c:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:22 2026 by rpki-client