Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/950F22E87B6911F1ADAC2ACCCE1D38B0.roa
File: 950F22E87B6911F1ADAC2ACCCE1D38B0.roa (raw, json)
Hash identifier: YBCG2gM25mrPKpEFlSoAO7Z5dSd3VWMedPdS0afSuJQ=
Subject key identifier: 31:F9:84:B2:86:05:14:FA:23:84:4B:69:41:58:32:AF:88:01:C1:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/950F22E87B6911F1ADAC2ACCCE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:41:23 +0000
ROA not before: Thu 09 Jul 2026 07:41:17 +0000
ROA not after: Sun 16 Aug 2026 07:41:17 +0000
asID: 216211
IP address blocks: 45.192.196.0/22 maxlen: 24
45.192.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115687 (0x1c3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:41:17 2026 GMT
Not After : Aug 16 07:41:17 2026 GMT
Subject: CN=6a4f50a3-ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:30:7f:9c:78:2d:d1:97:52:1b:1a:06:c7:
5c:6d:a5:22:e3:3f:c2:73:19:79:8d:89:1b:1d:ad:
65:14:df:25:68:07:67:a1:60:84:ad:2e:e7:59:6d:
21:86:c8:01:bc:41:b1:50:cd:c1:1c:dc:a9:7b:44:
3f:9d:ef:8a:01:e1:c0:93:f9:86:43:37:72:1b:58:
bd:7b:3e:eb:46:31:59:67:4d:28:15:03:88:f7:28:
0f:bc:4f:b2:0f:5e:3b:60:94:19:ab:2e:61:cb:c8:
75:35:8d:a4:05:bc:25:78:e0:8e:68:2e:de:69:87:
c8:9e:a7:25:06:e3:c7:c3:07:a1:87:21:1e:5c:98:
f4:16:01:f3:db:6e:8d:f3:60:0c:a8:50:e8:da:24:
2f:05:f5:73:6a:b8:07:e6:de:36:46:2a:91:6b:47:
62:3a:a9:4b:b7:c8:95:89:14:c9:ac:ee:1c:32:3e:
60:ae:e9:d6:d3:12:17:26:f5:04:93:f0:9c:07:34:
67:8e:30:40:51:fb:22:3e:c1:0a:9e:6b:50:11:10:
02:a5:fc:17:32:7f:b4:76:ea:2a:c4:fb:ed:52:2b:
d6:1c:ce:5f:82:24:72:6a:59:30:2b:4a:ab:66:37:
57:e8:3c:95:33:00:1d:ef:2c:78:c2:dc:f6:41:fc:
c2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F9:84:B2:86:05:14:FA:23:84:4B:69:41:58:32:AF:88:01:C1:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/950F22E87B6911F1ADAC2ACCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.196.0-45.192.203.255
Signature Algorithm: sha256WithRSAEncryption
7a:df:1c:ca:5f:a3:0b:82:66:09:e5:37:d6:c2:f4:da:a6:e3:
18:f2:25:d3:69:b1:52:02:b2:cf:a1:ad:29:7f:48:b1:4c:2b:
fd:3f:3d:09:1c:35:a7:c1:c0:20:e7:d6:c4:99:cb:05:90:e3:
7d:69:5f:d7:ce:96:b1:9b:02:7d:43:f9:c4:9c:e1:78:da:fe:
37:6d:7a:20:2c:9e:b5:d6:34:fb:22:42:a0:d9:8d:ba:a4:df:
5c:fb:fb:4e:14:55:e0:5b:65:ff:41:28:1a:83:df:78:69:dc:
e5:ba:00:b9:89:f4:fd:ff:fb:89:66:c2:c4:69:b3:10:8f:fc:
32:35:58:db:c4:4c:a4:1f:c4:8a:be:0a:59:41:b5:5a:46:ef:
d0:f7:76:45:1f:23:fe:71:84:55:67:0e:3f:bd:e3:f3:02:fe:
c0:9f:85:ac:39:b2:0e:73:2c:e3:10:29:aa:8a:ba:ec:ae:7b:
39:76:3e:8a:0c:52:9f:b7:fb:bb:3f:a7:ed:8c:6c:7d:5e:de:
d6:7e:d2:5a:c3:f0:fb:74:bd:42:21:af:63:af:6c:d7:70:16:
bd:cc:96:fc:0b:7b:7f:0f:cf:86:1e:d3:93:82:42:20:fc:35:
f7:99:68:32:95:02:54:60:7f:f8:1c:2d:e1:c0:f2:50:09:c9:
6b:42:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 07:27:01 2026 by rpki-client