Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99D0610C7F7411F1928761E3CE1D38B0.roa
File: 99D0610C7F7411F1928761E3CE1D38B0.roa (raw, json)
Hash identifier: Pv/SUJP8T9nnj7q4qTyXthiKb/vOcHFdAENewGl4rh0=
Subject key identifier: 8A:8A:6E:B6:56:4D:CF:60:E3:DD:C1:47:FE:97:DC:F5:8B:AD:A1:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C513
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99D0610C7F7411F1928761E3CE1D38B0.roa
Signing time: Tue 14 Jul 2026 11:10:20 +0000
ROA not before: Tue 14 Jul 2026 11:10:14 +0000
ROA not after: Fri 21 Aug 2026 11:10:14 +0000
asID: 395793
IP address blocks: 45.195.157.0/24 maxlen: 24
45.195.158.0/24 maxlen: 24
45.196.136.0/24 maxlen: 24
45.196.137.0/24 maxlen: 24
45.203.60.0/24 maxlen: 24
45.203.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115987 (0x1c513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:10:14 2026 GMT
Not After : Aug 21 11:10:14 2026 GMT
Subject: CN=6a56191c-7722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:bd:86:25:7e:35:95:53:d1:d8:3d:16:a0:
6c:3a:6b:32:e6:b3:af:1b:a6:4c:3d:c0:0f:b0:23:
a6:12:d8:2a:ec:af:de:53:34:d1:cc:14:5c:e6:9a:
79:93:d8:ad:e3:03:7b:b2:aa:48:ae:2a:f5:cf:b3:
0f:82:76:bb:9c:6e:1c:17:cf:c1:7c:a2:e9:51:b5:
11:af:e0:15:a2:f6:86:e4:13:e2:72:a8:58:42:0a:
21:ef:33:38:0a:e6:e3:23:63:8b:c9:e7:3e:6e:b0:
ae:8f:26:e2:b7:4a:c1:78:39:b7:46:26:d0:7e:43:
b8:9a:64:75:82:92:3b:6a:94:ea:b2:5d:6d:3d:5f:
3a:77:62:8d:57:92:27:51:39:ae:f9:df:9c:71:26:
0f:f8:80:cf:4d:c4:c5:31:ae:31:e7:1a:c7:67:66:
96:24:39:0d:a5:6f:82:ce:b7:b7:bc:80:d4:f3:cd:
24:22:a4:ae:88:f7:72:82:3e:34:af:d9:c1:8d:04:
09:80:6b:67:72:1a:b3:3d:f1:a8:77:6d:a5:4b:f3:
ba:63:5d:08:86:bc:b3:c3:8f:c2:33:84:74:59:0a:
a3:cf:71:f9:fb:41:98:c4:2e:53:1e:29:0d:83:3c:
d9:d5:75:28:22:f1:35:32:57:48:35:36:88:14:69:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8A:6E:B6:56:4D:CF:60:E3:DD:C1:47:FE:97:DC:F5:8B:AD:A1:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99D0610C7F7411F1928761E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.157.0-45.195.158.255
45.196.136.0/23
45.203.60.0/23
Signature Algorithm: sha256WithRSAEncryption
68:ee:da:c0:ee:3f:01:57:cb:f7:4c:b4:fc:9b:ab:c2:81:9b:
42:80:78:57:35:11:00:62:90:ed:0d:20:c9:7e:a9:59:5d:e0:
c9:ca:f4:ac:b2:bd:37:3b:ec:d9:bd:fb:a6:7c:d1:49:cc:4a:
f8:af:5f:4e:40:c2:e3:7b:0e:c1:d5:98:b1:18:c9:70:84:e1:
fe:06:a8:fa:ed:ed:87:c3:69:80:85:9e:b1:e3:b6:71:9d:be:
bf:44:bd:58:51:3d:f7:f0:bb:3a:c2:7b:1e:db:b8:bc:98:10:
87:ea:22:03:f6:d0:43:ef:44:24:8a:50:08:eb:ab:7a:fc:1d:
54:3b:fd:36:cd:e2:47:59:6e:11:74:fb:2a:23:44:19:74:2c:
74:ca:11:25:b2:d6:66:5c:49:88:67:ee:06:ec:72:43:a5:9e:
91:af:52:67:da:ae:a3:d9:99:39:0e:f5:bb:d0:b0:5a:8b:bb:
11:89:31:14:3d:66:c0:c8:3c:e9:72:9d:97:ef:ca:c5:fc:d6:
b4:09:db:bd:41:5b:78:59:8e:4f:16:54:ef:02:cd:61:e4:4d:
a6:9e:aa:b8:3d:d5:60:4a:eb:5f:8c:c4:b5:9d:1d:39:11:87:
e5:87:fc:5c:7f:9c:6a:84:17:f9:50:21:08:d7:87:05:d7:d9:
43:24:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:02 2026 by rpki-client