Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8AD48C802011F1B547D6FECE1D38B0.roa
File: 8F8AD48C802011F1B547D6FECE1D38B0.roa (raw, json)
Hash identifier: QyYRdhGK6j+oq+jRpHJBxIhzqK2cE5f/Ar0PzedmRHk=
Subject key identifier: EF:86:DC:C9:92:EE:E4:9D:81:FB:FF:77:5F:2E:06:8E:AC:87:9E:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C538
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8AD48C802011F1B547D6FECE1D38B0.roa
Signing time: Wed 15 Jul 2026 07:41:16 +0000
ROA not before: Wed 15 Jul 2026 07:41:12 +0000
ROA not after: Sat 22 Aug 2026 07:41:12 +0000
asID: 57043
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116024 (0x1c538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 07:41:12 2026 GMT
Not After : Aug 22 07:41:12 2026 GMT
Subject: CN=6a57399c-47d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:9f:7c:3e:9a:b0:a4:b9:c9:eb:55:cf:6d:
ff:c1:0c:49:3e:e4:67:4d:3c:eb:d7:e1:58:59:71:
93:7b:f1:5e:8b:47:25:8a:11:43:98:46:25:fc:9c:
d3:cd:35:82:f5:77:dd:54:d2:44:68:46:2a:28:5d:
b0:99:10:b6:93:13:33:c1:66:8a:a7:87:5d:73:d9:
5c:31:68:6f:10:c6:38:b8:bf:1d:4d:89:66:74:5f:
8c:ba:12:7d:9e:a5:f6:30:c8:ec:b7:7b:d9:61:35:
3f:b0:c7:36:d9:42:73:79:93:83:b8:49:2d:95:11:
9d:ad:c0:88:7f:8c:15:93:4d:4f:59:7e:14:66:e6:
ef:7c:77:9d:b1:f4:71:1b:90:f2:9e:52:a6:5f:33:
02:98:69:62:95:01:71:65:92:e4:a8:39:85:f5:ea:
de:54:96:5d:f3:27:24:98:48:2a:22:70:5a:f2:91:
d2:b7:7b:45:2c:d4:ab:4d:42:2e:cb:d9:e7:62:47:
a5:40:a2:ff:ee:d6:a8:af:56:18:bf:89:15:52:79:
f3:2a:dd:58:18:f8:4f:06:b2:63:c3:52:a1:a3:93:
1d:90:0e:36:e9:d3:e0:0b:18:f8:3f:ea:41:88:29:
56:f6:fb:35:e2:41:12:62:9d:95:10:56:f5:4e:9d:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:DC:C9:92:EE:E4:9D:81:FB:FF:77:5F:2E:06:8E:AC:87:9E:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8AD48C802011F1B547D6FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7c:f8:4f:cd:19:7e:41:e5:b5:14:02:6c:96:a1:0b:d3:3a:
38:71:c1:1a:84:8d:e1:8d:9c:bb:c3:f9:b9:ff:3a:79:99:ea:
f0:bf:ab:54:4d:fd:78:f3:84:72:31:20:71:0d:71:40:2f:d2:
93:40:97:a0:d6:2d:53:fc:97:ce:a1:f5:c1:4a:28:7d:43:ce:
cf:41:60:7e:8c:d8:86:be:ac:6a:3b:c1:bd:38:3e:cf:f7:46:
8b:15:49:9b:94:87:5a:fd:59:cb:41:23:d3:7f:8c:65:73:59:
96:8a:c2:75:0f:e3:8d:25:b7:15:3c:b8:2d:de:fb:ed:d5:bd:
77:7f:3a:78:47:11:e7:a5:83:50:68:b6:f2:aa:3b:dd:fe:49:
df:81:44:1f:3f:15:ea:d5:6e:ca:f2:ae:1b:e1:c3:ae:45:69:
4c:04:55:d1:f6:f9:2e:4a:d2:30:98:36:0c:0c:60:14:d8:ca:
82:d3:07:d5:c2:e1:32:52:55:f9:f4:2f:c3:8a:ec:bb:1b:59:
fd:fd:c6:fc:c3:19:ef:78:c8:40:28:9d:81:25:07:73:e8:7b:
07:71:d5:a8:b6:79:bb:ef:82:48:05:73:e2:b0:ef:da:3b:f6:
36:64:30:28:d4:e7:34:c1:fc:32:94:bb:13:b0:de:51:bd:de:
ad:d1:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:47 2026 by rpki-client