Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AC952E47B6A11F1A594DDD3CE1D38B0.roa
File: 8AC952E47B6A11F1A594DDD3CE1D38B0.roa (raw, json)
Hash identifier: G88PpvdvJhhU8pxpiKy4SX0rUlf8iI3D628GhpS3Gro=
Subject key identifier: 79:F8:94:A1:2F:03:7E:E1:E7:1D:07:08:2C:53:CA:C0:46:AC:2E:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AC952E47B6A11F1A594DDD3CE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:48:15 +0000
ROA not before: Thu 09 Jul 2026 07:48:11 +0000
ROA not after: Mon 09 Jul 2029 07:48:11 +0000
asID: 17561
IP address blocks: 45.194.238.0/24 maxlen: 24
45.194.239.0/24 maxlen: 24
45.194.240.0/24 maxlen: 24
45.194.241.0/24 maxlen: 24
45.194.242.0/24 maxlen: 24
45.194.243.0/24 maxlen: 24
45.194.244.0/24 maxlen: 24
45.194.245.0/24 maxlen: 24
45.194.246.0/24 maxlen: 24
45.194.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115691 (0x1c3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:48:11 2026 GMT
Not After : Jul 9 07:48:11 2029 GMT
Subject: CN=6a4f523f-aa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:1c:7d:2d:f1:98:f2:57:8c:bd:aa:ac:cd:
87:c3:45:ed:11:aa:ea:40:ad:86:3c:89:30:ab:1d:
de:a2:b0:fa:78:0f:a0:4c:c7:ee:69:c1:c1:0e:f0:
00:c5:6f:7a:f7:31:46:2e:10:f2:92:c9:aa:29:0e:
e1:c1:b2:f6:8e:29:34:92:6d:b0:b8:0d:51:63:ae:
ab:94:d7:ec:79:89:33:5f:ed:34:21:ee:9c:40:96:
b6:a6:67:e8:fc:4d:04:74:0e:4c:cf:c2:09:87:1a:
0c:85:73:c6:63:ac:b9:6f:bd:21:84:18:fc:6b:c0:
e7:83:04:d1:50:6a:2c:f1:0e:84:2b:84:16:72:ae:
56:01:d2:a1:d9:b0:6c:85:aa:e7:d5:26:9b:71:6e:
6a:0c:53:82:13:08:98:cd:cb:2b:05:be:37:49:57:
7c:c6:bc:62:2a:51:2d:88:30:c3:7a:c0:c3:a7:e7:
e4:25:32:87:47:5f:ae:6b:7c:91:16:95:26:c8:7a:
e3:ae:fd:3b:a8:0a:a6:4f:32:d4:2e:19:01:fc:3e:
35:69:3a:85:81:b4:c8:72:59:7c:58:81:7f:2f:1b:
1f:a9:35:21:2f:99:ad:5a:b0:50:78:1e:65:30:3a:
7e:d2:25:b1:dd:c8:70:a2:47:4c:ae:9d:66:83:a1:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:94:A1:2F:03:7E:E1:E7:1D:07:08:2C:53:CA:C0:46:AC:2E:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AC952E47B6A11F1A594DDD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.238.0-45.194.247.255
Signature Algorithm: sha256WithRSAEncryption
35:2b:90:d1:fc:2b:2d:81:c1:4d:f8:c4:4b:ce:e4:72:56:d6:
f4:0d:a6:8c:0e:c5:93:ca:7c:a5:dc:22:8b:e6:23:67:1e:ce:
d5:55:79:06:50:5d:e6:9d:d4:e1:10:b4:c8:93:6e:91:ac:69:
5d:c6:8f:86:f6:31:f3:ca:45:11:5d:0d:22:80:b1:31:9e:88:
77:22:3a:e7:9f:aa:75:8b:d1:f7:0f:18:70:34:ec:4d:79:45:
df:24:77:6c:09:76:50:d8:67:ca:4a:cc:6c:79:20:a8:f5:46:
4e:45:23:54:82:67:ce:20:e2:4d:78:95:eb:24:b7:30:a9:98:
b7:01:fd:1d:a1:ec:90:49:09:14:ea:f4:ba:ef:ed:3a:05:f5:
a9:8a:d9:b4:76:f6:3e:7b:4d:ef:7a:8f:ff:ec:87:0d:71:aa:
66:73:04:8f:70:59:bd:f2:cd:38:76:a8:6b:9f:54:57:21:6d:
3d:77:fd:81:a5:82:6d:80:ec:59:b3:15:27:c2:1b:29:16:81:
45:1e:a2:54:75:3e:cb:54:e2:66:bf:db:13:85:64:a1:90:8e:
dc:82:8e:b8:56:47:8f:60:25:3b:24:ac:f9:1b:e0:73:d0:60:
95:db:26:9d:f9:71:25:42:ff:85:e6:0f:b7:05:fe:e5:09:c8:
f4:7a:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:03 2026 by rpki-client