Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C4C3EA755C11F19C4CD9C6CE1D38B0.roa
File: 86C4C3EA755C11F19C4CD9C6CE1D38B0.roa (raw, json)
Hash identifier: /uD3hZ17b9TdVnBzwVPqCImpDtYVost950Hnfpw1Txk=
Subject key identifier: CD:AD:5B:D0:03:A8:3A:98:2F:05:80:30:FF:07:35:6C:1B:4D:AA:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C200
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C4C3EA755C11F19C4CD9C6CE1D38B0.roa
Signing time: Wed 01 Jul 2026 14:52:49 +0000
ROA not before: Wed 01 Jul 2026 14:52:44 +0000
ROA not after: Thu 08 Jul 2027 14:52:44 +0000
asID: 132537
IP address blocks: 45.192.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115200 (0x1c200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 14:52:44 2026 GMT
Not After : Jul 8 14:52:44 2027 GMT
Subject: CN=6a4529c1-95f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:d9:24:f1:61:d6:c7:23:0b:cd:57:f1:90:
b6:7a:e1:ef:d2:a1:ab:23:5e:c0:b7:18:d0:e8:97:
4c:b3:e9:99:30:3d:f9:d7:63:09:ab:c6:4d:01:e6:
13:b9:a9:0a:cc:a4:33:e1:36:8f:90:63:bf:20:00:
ab:68:8c:d5:47:66:6a:be:68:e6:50:4e:78:cb:de:
1d:b1:8c:30:58:7f:d7:f8:9d:5e:32:41:c4:af:9a:
5b:96:51:4b:c6:00:bf:87:a4:0f:34:f4:95:3f:b3:
47:05:7d:f9:df:7d:38:f3:9d:0f:f3:c2:e5:84:88:
ce:c6:58:f8:ee:50:47:d7:9f:a2:d9:33:83:73:af:
ca:a4:45:7d:07:b3:ca:1f:6f:02:82:19:99:ed:0a:
e1:58:cb:b1:9a:6b:3d:9e:78:dc:2a:d0:a6:7d:12:
b6:df:7e:0b:78:12:dc:6b:8f:73:11:11:ab:0e:0d:
4e:cc:77:ec:01:8c:e1:42:09:33:5d:bd:e1:b8:07:
2d:a6:db:ff:ad:d1:00:89:cc:6a:cd:6f:71:ef:65:
3c:1f:41:3b:62:10:f0:b5:10:fe:0e:60:5b:72:bc:
e5:d4:c8:4b:52:89:3f:ce:51:ff:76:98:b2:b7:9a:
12:9b:4c:2a:24:ef:b2:a9:84:b0:65:55:7e:af:a2:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:5B:D0:03:A8:3A:98:2F:05:80:30:FF:07:35:6C:1B:4D:AA:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C4C3EA755C11F19C4CD9C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.22.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:19:d0:f8:04:5a:f0:4c:21:6a:f8:56:d9:24:47:30:bf:10:
4f:19:3b:84:3d:6b:3a:da:e9:72:0e:4e:b4:35:74:dc:32:69:
e2:b1:1a:8c:ba:37:31:53:6b:02:71:f2:b3:9e:8c:9d:6c:5b:
db:a8:7a:fb:67:d4:9c:a8:d6:fe:c9:06:42:12:d5:a1:1b:db:
cc:76:bd:45:c8:7a:16:71:45:b2:82:12:84:bf:5d:dc:3c:b8:
a7:31:a1:c5:67:fd:0f:f6:26:a2:1e:7c:32:5a:11:f8:49:1a:
50:ea:84:39:1d:fa:2a:04:c3:c7:c1:52:6e:36:d6:52:7f:48:
d4:79:05:98:43:c8:99:9c:4f:9b:98:50:8a:9f:81:db:95:40:
97:fd:f4:ee:80:b5:55:14:fd:bf:e8:90:22:68:64:1a:17:ee:
13:23:f6:75:72:b5:02:ea:d3:e3:cf:d7:ba:fe:97:c3:a7:28:
7f:31:60:b8:b5:11:d5:76:26:34:78:89:56:04:4c:2d:82:27:
6b:54:b0:b1:ef:a2:2e:5c:8b:9f:46:8f:50:3e:6d:b3:5c:96:
4c:28:d3:4b:6f:16:7f:4c:f5:6d:18:da:1c:bf:45:78:c2:bf:
20:38:9b:73:93:56:92:94:5f:6e:64:67:15:e3:82:c2:9a:7c:
d4:97:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:40 2026 by rpki-client