Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86E7A39C68FA11F187CFB4B0CE1D38B0.roa
File: 86E7A39C68FA11F187CFB4B0CE1D38B0.roa (raw, json)
Hash identifier: lRrIEppEBGIiazs+3jVeQMj3s0biiXyHyHeaLPQcmFE=
Subject key identifier: AB:60:96:18:FD:51:23:05:67:30:44:E5:04:3B:F2:3C:4B:B3:3A:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BD8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86E7A39C68FA11F187CFB4B0CE1D38B0.roa
Signing time: Mon 15 Jun 2026 20:41:04 +0000
ROA not before: Mon 15 Jun 2026 20:40:59 +0000
ROA not after: Sun 19 Jul 2026 20:40:59 +0000
asID: 11427
IP address blocks: 45.203.192.0/22 maxlen: 24
45.205.76.0/22 maxlen: 24
45.205.88.0/21 maxlen: 24
45.205.156.0/22 maxlen: 24
45.205.160.0/23 maxlen: 24
45.205.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114058 (0x1bd8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 20:40:59 2026 GMT
Not After : Jul 19 20:40:59 2026 GMT
Subject: CN=6a306360-b894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:bb:8c:76:11:5a:4e:27:e5:a1:4f:cd:f0:
b5:f3:0c:0e:f0:a8:41:46:12:6e:dc:b6:cc:2c:2a:
db:93:e5:d7:62:81:1b:1e:5b:ed:ad:70:2e:af:f1:
81:f8:c1:ff:49:15:61:c5:e5:a6:33:a3:7c:3e:30:
3a:35:ad:8e:c9:9e:2b:75:1d:52:d2:be:64:05:b8:
c3:f0:68:89:19:d4:30:55:39:f5:0f:42:11:3e:3a:
db:80:f0:a8:76:d3:86:ee:f9:7d:79:33:2e:5c:63:
0d:b0:a1:c7:09:79:7a:56:81:cc:6d:b9:6b:b2:0d:
13:6c:4e:2d:cc:09:ba:92:2b:09:5a:66:28:3c:46:
97:0b:7a:d3:ae:de:97:fc:87:be:d6:75:78:76:af:
f6:8d:94:68:1d:d0:f9:0d:36:8b:a4:97:40:12:d5:
28:03:54:37:bf:d2:23:e1:ae:f6:ae:83:95:a3:19:
98:87:3b:3e:4c:cb:76:87:f1:f1:ca:5e:c0:90:c1:
2d:6b:7b:44:ac:0e:5e:be:ed:6a:22:a5:af:cf:b9:
2b:f0:3a:bb:c8:bc:46:ba:91:e7:96:66:aa:18:a8:
75:b0:e6:8e:ff:5f:29:c2:a0:c8:95:80:cb:7f:e0:
27:dd:27:a4:7a:03:3b:d6:4a:8a:ab:03:24:59:bf:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:96:18:FD:51:23:05:67:30:44:E5:04:3B:F2:3C:4B:B3:3A:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86E7A39C68FA11F187CFB4B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.192.0/22
45.205.76.0/22
45.205.88.0/21
45.205.156.0-45.205.161.255
45.205.170.0/23
Signature Algorithm: sha256WithRSAEncryption
13:40:9d:b2:aa:e0:56:4c:19:5d:aa:22:74:19:7c:a5:e1:8d:
16:f4:59:8c:ec:51:fe:15:2d:93:bf:97:4f:41:8c:6d:1b:1b:
68:52:6e:9f:a1:e4:f1:89:45:03:a7:98:ad:c2:d0:63:3d:e7:
04:46:2e:3b:cf:b6:51:a6:f3:f3:c9:d1:55:b0:8c:0f:fa:c9:
df:73:f9:d4:42:01:da:f2:2f:d1:cd:61:a1:c6:72:4b:cb:05:
63:b6:5c:3d:16:dd:cf:a7:60:c6:b8:d0:ad:01:37:82:9c:1f:
7e:11:a0:1b:ee:d0:a9:42:87:50:61:c5:e8:b2:61:b9:eb:76:
ef:d1:96:2f:a6:f9:1e:42:81:27:aa:20:4a:c5:31:8f:ea:85:
fe:9f:c7:0e:b8:d4:15:15:2b:f2:84:bf:22:ce:8b:bf:c2:d2:
13:45:93:c2:11:03:67:b4:76:a3:42:e5:22:93:89:d1:e8:ac:
7a:f5:0e:95:cb:73:2c:5b:e4:e0:2a:f7:90:8b:6f:70:20:fc:
8d:3e:78:70:c6:1c:c7:9b:27:11:8b:1a:a5:36:bd:b0:00:bf:
04:ce:cd:68:45:ff:9b:93:b3:b9:6d:d9:dc:23:49:ec:80:b2:
62:27:6d:9c:53:c9:60:4e:da:7b:4b:91:1c:fe:22:e3:0a:47:
bd:52:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:37 2026 by rpki-client