Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85E9A6C0779B11F18D1A6CF4CE1D38B0.roa
File: 85E9A6C0779B11F18D1A6CF4CE1D38B0.roa (raw, json)
Hash identifier: dmzBCutcdlpYMXJmKFPAduZQQBpkSHyViyv1leGGBjw=
Subject key identifier: 75:51:BA:71:3F:5E:D9:2F:16:D6:39:69:08:31:E7:26:25:CF:75:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85E9A6C0779B11F18D1A6CF4CE1D38B0.roa
Signing time: Sat 04 Jul 2026 11:28:48 +0000
ROA not before: Sat 04 Jul 2026 11:28:43 +0000
ROA not after: Wed 12 Aug 2026 11:28:43 +0000
asID: 212513
IP address blocks: 45.196.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115437 (0x1c2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:28:43 2026 GMT
Not After : Aug 12 11:28:43 2026 GMT
Subject: CN=6a48ee70-0a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:04:33:ca:d6:b6:4b:92:ac:f8:07:04:bc:
5d:61:ee:a9:c3:5f:fd:7e:8c:b1:b1:0e:0f:fb:37:
94:ee:c3:d1:e0:b7:76:bd:76:3c:a1:e6:d7:f6:08:
f5:f7:75:59:f9:b0:64:5a:d1:f1:58:93:30:c7:3b:
6b:11:04:ca:f8:80:cd:ef:a2:0e:60:12:e1:41:ee:
93:8b:6e:41:56:4b:8e:12:59:a5:93:be:8c:93:46:
d0:b2:16:96:86:36:34:a5:74:77:2d:f4:54:4e:6b:
2f:70:74:cb:cc:ba:c8:4c:65:df:20:1b:70:1f:40:
59:fd:c4:39:94:96:82:e5:b2:06:ee:6b:2d:3a:dd:
39:02:cf:70:38:95:48:8d:5f:25:50:0b:53:cd:d9:
5d:7e:d6:a6:9d:32:51:85:5e:6f:e1:ba:38:9b:e0:
ab:16:38:14:6a:7a:93:f6:e7:7f:d7:d0:b3:72:8f:
68:a0:fd:04:fc:f6:2f:1a:4b:94:0f:0c:9c:11:a8:
b9:0f:6d:a0:b2:ef:de:24:ae:8e:85:b0:46:fc:c9:
95:ca:b2:f8:3d:9c:65:04:0d:a7:ca:e8:af:a8:a1:
95:44:c3:ce:9b:34:05:a1:e8:40:8c:64:ed:b5:3d:
b2:6b:22:a8:8b:bf:15:36:dc:a3:a8:4b:a8:ec:7c:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:51:BA:71:3F:5E:D9:2F:16:D6:39:69:08:31:E7:26:25:CF:75:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85E9A6C0779B11F18D1A6CF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:72:ac:b8:48:0f:9d:07:6b:c1:1d:51:94:43:2f:01:e9:85:
fb:c1:65:f9:01:e9:27:50:5b:2e:52:44:37:83:60:62:73:d6:
c0:9d:4c:c9:b9:b3:61:11:3d:04:51:9c:e9:23:1d:e9:6b:26:
e6:14:dc:ac:78:61:a6:03:81:ec:f4:fe:11:f2:16:1e:ef:7c:
b8:c7:e2:68:73:6f:cc:53:02:27:43:06:3c:0f:91:5e:3a:ab:
e0:3e:e3:20:9c:32:78:d7:ce:de:1f:64:d8:42:bd:da:e4:3e:
34:e7:8f:c4:6d:ab:5f:d7:3f:8d:59:af:38:fe:24:07:85:93:
2a:83:9d:d3:47:fb:5e:ee:5c:d5:2f:3d:81:0c:3c:63:b4:9d:
55:5b:1c:27:f9:4a:65:91:c9:d4:69:6b:01:b9:56:15:c0:f4:
cc:91:86:a1:d3:86:09:ac:e8:ff:cc:f7:b3:5b:f1:32:9a:81:
68:8e:f1:d9:20:ca:33:ee:e5:34:4b:26:f6:4e:08:f3:3e:ad:
d1:f1:f3:03:4d:25:ea:53:0a:79:c2:5c:f0:b2:82:3f:bd:1a:
fa:5f:d1:85:39:1c:be:3a:31:cd:8e:2f:42:fb:54:4c:c2:50:
1a:07:ce:8a:b3:81:9e:2f:44:a4:96:d1:85:96:bd:22:65:93:
67:fe:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:55 2026 by rpki-client