Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B58C8479E511F1A3E071DBCE1D38B0.roa
File: 82B58C8479E511F1A3E071DBCE1D38B0.roa (raw, json)
Hash identifier: Lr8I5oVJlsF7lY2pMs8X21BF1n1B4CzHCaXNHUlw4f0=
Subject key identifier: C8:D4:80:7A:B4:2E:4B:E4:8B:59:F2:FB:22:16:A8:24:3E:4B:99:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C36E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B58C8479E511F1A3E071DBCE1D38B0.roa
Signing time: Tue 07 Jul 2026 09:23:28 +0000
ROA not before: Tue 07 Jul 2026 09:23:23 +0000
ROA not after: Fri 14 Aug 2026 09:23:23 +0000
asID: 402289
IP address blocks: 45.197.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115566 (0x1c36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 09:23:23 2026 GMT
Not After : Aug 14 09:23:23 2026 GMT
Subject: CN=6a4cc58f-3d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:82:75:10:3f:78:43:9b:d3:93:84:fa:ff:
41:0d:e8:ce:02:63:5d:20:86:b7:e5:01:39:57:76:
33:84:85:11:ac:73:ce:3f:f7:00:da:21:84:7b:4b:
e0:1b:8d:31:3c:c8:dc:72:7d:f2:fb:f9:81:4c:59:
a7:f5:33:16:eb:28:ab:c2:42:41:e1:df:d6:9c:13:
56:d8:28:6d:53:3b:05:3a:25:2c:74:c7:03:59:04:
6b:cf:fd:c2:74:d1:f1:18:ea:42:ec:cd:b4:dc:38:
1f:35:11:c2:19:a8:7e:23:45:e2:e4:fa:30:9f:f6:
4f:c0:1d:1d:41:26:5a:9a:e0:dd:14:57:24:81:f4:
5e:14:1e:0c:ea:ae:a4:9b:1d:6a:f2:14:57:c1:34:
10:e3:85:05:a3:4d:e6:58:24:bf:60:e7:da:e9:a0:
8d:37:42:48:51:36:15:f1:1b:ab:23:02:90:f0:88:
32:88:f6:47:e9:f1:78:95:40:75:a7:a1:ef:83:b0:
c3:f3:86:65:6a:c4:74:ce:19:40:29:8e:dc:b3:93:
47:00:5f:18:0c:da:9d:de:05:b4:5c:f5:82:98:51:
7a:a7:b0:13:72:fe:55:8f:f4:23:f5:00:42:50:48:
cc:15:82:9a:2c:e4:72:4a:f4:b1:20:7e:81:5c:c6:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:80:7A:B4:2E:4B:E4:8B:59:F2:FB:22:16:A8:24:3E:4B:99:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B58C8479E511F1A3E071DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.25.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b5:a2:30:54:d4:ea:ee:05:24:f5:2d:3e:27:bc:fd:7a:4d:
3d:0d:4e:96:45:93:4b:88:85:f0:f7:ec:bd:37:e3:f5:09:38:
0b:f9:a6:f6:a7:8f:da:c7:76:11:1c:e4:53:7e:7e:9c:a6:3a:
b7:c1:d5:c8:d6:23:15:26:42:f0:a0:49:70:4c:fc:65:59:7d:
f8:85:2a:d3:86:17:19:8c:cb:d4:4a:2e:24:5a:1b:45:6f:c3:
6e:e2:1d:b4:b7:65:bf:e5:2d:58:49:86:0d:29:63:45:56:11:
c7:ad:d3:48:24:00:4c:37:28:7e:18:26:e2:d6:b4:ed:78:fe:
4b:20:5d:e9:ed:83:2a:da:8b:40:04:84:d6:fd:75:42:9c:07:
dd:a8:b3:89:48:1d:91:5b:82:cf:00:70:62:94:f4:65:62:45:
91:10:54:9c:37:76:5c:30:33:06:02:d9:a5:ca:34:21:d3:47:
32:e7:55:b2:23:d4:e7:3f:6a:cb:61:34:6f:6d:50:ea:5e:7e:
84:87:00:86:39:1a:40:25:ad:bd:50:3f:32:ff:6c:ea:a5:25:
40:19:1e:cb:26:07:28:bc:4a:38:5a:95:e4:e7:c9:e3:22:cf:
56:b2:d5:35:f5:0c:e9:ca:56:d3:98:b4:c7:a1:fb:07:ed:3c:
1e:49:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:33 2026 by rpki-client