Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91EDE7C07B6E11F1B63D39ECCE1D38B0.roa
File: 91EDE7C07B6E11F1B63D39ECCE1D38B0.roa (raw, json)
Hash identifier: FJ1tgYWLW3RFWlMauaOgSfNCciCnovwYONXZkOHw3Qw=
Subject key identifier: 1D:9E:14:33:B4:44:6E:82:F0:38:11:67:68:DE:2B:96:01:1C:69:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91EDE7C07B6E11F1B63D39ECCE1D38B0.roa
Signing time: Thu 09 Jul 2026 08:17:05 +0000
ROA not before: Thu 09 Jul 2026 08:17:01 +0000
ROA not after: Sun 16 Aug 2026 08:17:01 +0000
asID: 53808
IP address blocks: 45.196.238.0/23 maxlen: 24
45.196.238.0/24 maxlen: 24
45.196.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115699 (0x1c3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 08:17:01 2026 GMT
Not After : Aug 16 08:17:01 2026 GMT
Subject: CN=6a4f5901-ccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:4b:d8:5d:1b:28:4c:6e:98:6e:18:1d:21:
64:8d:f6:68:8d:fb:10:9b:01:fb:92:45:8c:0e:fe:
0b:9c:7d:30:4a:a0:99:64:cd:9a:ac:02:fd:43:28:
65:3a:95:1a:97:95:c5:2f:f3:ea:40:67:62:80:38:
08:99:5e:45:37:95:c0:cd:21:7e:83:39:4c:7c:66:
59:bd:e8:a3:93:68:11:ff:68:f6:10:76:9c:40:18:
31:ee:88:39:cb:19:de:65:ae:f1:7b:a4:5d:ba:cc:
70:51:c1:e5:33:23:e7:7f:e8:82:80:d0:22:bd:05:
1e:3d:4f:54:be:3e:af:6f:92:bf:30:a3:9a:bd:0c:
02:83:49:b9:fa:ef:e6:e4:0e:03:e3:51:8d:49:55:
5b:e1:05:ff:92:67:a2:80:fb:50:ec:11:ba:af:e8:
98:d2:4a:e8:8b:b4:68:02:54:c5:0d:00:21:d3:37:
1e:0e:b9:d6:ca:83:92:fe:59:35:99:ad:ce:db:23:
46:e8:22:3b:34:94:0e:cf:d6:e1:5f:44:a1:5b:d0:
26:36:36:b7:2b:14:0b:0a:84:1f:8b:a6:bd:ef:0e:
69:1e:e6:81:c3:ef:d8:e0:e2:55:09:64:2d:90:9b:
a5:ae:68:eb:7f:96:87:6b:01:ba:64:ff:eb:ef:94:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9E:14:33:B4:44:6E:82:F0:38:11:67:68:DE:2B:96:01:1C:69:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91EDE7C07B6E11F1B63D39ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.238.0/23
Signature Algorithm: sha256WithRSAEncryption
70:34:4f:8d:fa:10:88:f9:f3:9f:bd:dc:56:fd:b1:b7:ec:10:
32:b3:e8:ab:52:f5:87:03:20:9b:42:db:8c:38:1e:aa:2f:63:
bd:e4:6f:2b:08:46:0d:d1:66:35:07:94:af:66:98:1b:da:81:
fa:1b:47:f2:c1:1d:bf:f0:cb:f6:e5:d8:65:77:ca:1c:be:0d:
b0:54:1d:ff:96:c4:e6:ce:f2:1e:49:7e:18:17:db:d0:e6:a1:
bf:a5:9a:14:9c:9b:63:9d:08:3c:10:06:f7:74:2d:22:e9:07:
b4:2a:68:c2:7d:66:e7:c8:4c:04:7c:c9:88:8a:a2:eb:3c:2d:
29:24:7b:cd:02:79:6f:ab:f5:8e:20:f0:f3:d4:8b:a4:ff:bb:
02:a3:aa:d4:b7:3b:92:6c:2e:9c:96:ae:3f:4c:cf:c6:d2:11:
78:ed:f8:84:32:9a:45:2e:37:64:63:7a:b1:b3:66:90:7f:08:
ed:be:1f:69:b2:00:32:30:5c:ee:04:3d:16:47:49:9f:3b:95:
f3:13:a8:54:15:c2:b6:cb:2f:95:bd:96:a4:27:14:ba:8c:fb:
60:22:d3:80:ce:30:cf:31:d1:ca:af:76:50:7b:df:2a:ee:ca:
ad:09:75:e5:36:a9:af:23:a7:13:0c:bb:3c:fa:41:c3:d8:d2:
f3:a4:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:14 2026 by rpki-client