Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97650596717111F1A7DDA8F3CE1D38B0.roa
File: 97650596717111F1A7DDA8F3CE1D38B0.roa (raw, json)
Hash identifier: +WBo82iW48mIJklNniiviIJcHpaUH314dS+i9YIUkKM=
Subject key identifier: C4:2A:CF:FE:7E:A2:9F:4A:69:5B:89:05:38:D3:78:9A:EE:02:39:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97650596717111F1A7DDA8F3CE1D38B0.roa
Signing time: Fri 26 Jun 2026 15:13:31 +0000
ROA not before: Fri 26 Jun 2026 15:13:26 +0000
ROA not after: Tue 04 Aug 2026 15:13:26 +0000
asID: 61112
IP address blocks: 45.207.34.0/23 maxlen: 24
45.207.40.0/24 maxlen: 24
45.207.41.0/24 maxlen: 24
45.207.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114873 (0x1c0b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 15:13:26 2026 GMT
Not After : Aug 4 15:13:26 2026 GMT
Subject: CN=6a3e971b-3bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:2a:59:37:97:22:14:a9:42:c5:c9:c9:fa:
16:e4:57:c9:25:5f:b9:89:20:97:88:e5:77:c5:41:
36:02:b6:6a:f4:72:7b:34:c0:3c:7e:f5:30:f0:43:
e0:d9:8a:3e:29:11:55:4d:27:de:06:7b:47:a8:d8:
04:d0:f9:5d:24:52:0f:11:05:55:e3:e6:46:4b:e0:
ee:a2:19:5b:d6:9f:09:b7:0c:bd:21:dc:dc:d2:05:
0c:01:2e:1f:6f:24:cc:39:48:c5:d6:9f:87:35:c4:
73:6a:98:8f:a1:22:9b:08:e9:63:29:37:e5:0c:02:
e1:48:22:a4:05:dc:6f:50:f8:39:a6:10:c7:58:a0:
98:17:7d:67:ce:5d:e1:de:33:67:f5:6b:5e:6d:5c:
23:23:54:29:e8:3f:f3:c3:09:4b:bc:f6:4c:f3:ea:
c2:38:d2:48:70:e6:be:48:79:09:41:c5:59:88:8b:
17:f3:24:34:55:d0:28:a7:13:2a:80:65:d4:28:10:
e8:e5:b9:48:23:e3:02:4a:fd:51:91:47:60:fc:fa:
bb:6f:37:a4:7f:82:68:25:7d:0c:fb:58:de:95:54:
99:55:4d:d0:ce:86:b6:6e:02:7a:72:fd:bd:6d:c6:
29:17:a8:1b:60:9c:86:54:5a:44:b1:78:62:86:ca:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2A:CF:FE:7E:A2:9F:4A:69:5B:89:05:38:D3:78:9A:EE:02:39:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97650596717111F1A7DDA8F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.34.0/23
45.207.40.0/23
45.207.59.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ae:ff:2c:64:ff:a4:95:36:91:3c:44:aa:d3:46:bc:95:0e:
3a:31:fc:67:f7:74:41:39:bf:fd:be:fa:6f:9c:70:c1:6b:ea:
2a:90:67:eb:4c:a3:56:ad:0d:c0:f6:a7:5f:20:7a:e1:1d:67:
d8:86:15:91:95:2f:a2:5a:d0:2b:8b:64:f5:ed:b5:5a:67:72:
3e:cf:b8:da:06:07:df:eb:ce:bb:72:8a:c8:57:da:4d:02:ad:
9b:db:80:7e:7e:75:14:df:91:f6:a3:4e:f3:dd:b5:e1:56:95:
27:50:7f:3f:1c:8b:52:10:ba:4a:30:5a:0a:c3:d1:9b:e0:51:
f7:fd:fe:22:98:83:07:41:b9:f0:c6:00:64:42:85:57:47:17:
bc:7c:53:16:ba:e8:26:31:50:db:65:9e:a7:a0:8b:ae:31:2e:
81:b8:45:84:5c:6e:be:2b:f9:db:0b:14:a3:75:15:d4:dc:4c:
a2:52:4e:3f:e4:de:e7:13:b4:a2:13:e7:62:81:b3:03:eb:a1:
4e:cb:55:7a:65:32:00:74:38:d3:53:b4:77:54:56:fd:48:99:
ab:b1:fb:08:ae:2d:2a:72:63:33:03:63:70:31:69:09:ce:8d:
21:d5:51:f4:d9:0f:31:fc:9c:5c:0b:84:0d:4d:79:2e:d3:8b:
e4:24:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:38 2026 by rpki-client