Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE10A4A75E911F196738DAACE1D38B0.roa
File: 9AE10A4A75E911F196738DAACE1D38B0.roa (raw, json)
Hash identifier: W8ccnwRztWmmW6MMEpnseSFYlto/jOLH6sh/abx08mY=
Subject key identifier: 8C:BA:C8:32:26:FE:D2:8B:5E:2E:02:51:66:57:5F:5F:07:DB:75:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C24C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE10A4A75E911F196738DAACE1D38B0.roa
Signing time: Thu 02 Jul 2026 07:42:41 +0000
ROA not before: Thu 02 Jul 2026 07:42:36 +0000
ROA not after: Mon 10 Aug 2026 07:42:36 +0000
asID: 401366
IP address blocks: 45.207.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115276 (0x1c24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 07:42:36 2026 GMT
Not After : Aug 10 07:42:36 2026 GMT
Subject: CN=6a461671-e0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:81:f0:0b:54:78:03:87:80:17:94:8a:64:
ac:84:b8:8c:04:31:47:b5:ba:5f:c6:9e:2d:85:a5:
56:d7:d9:d9:2c:6c:5c:eb:4a:98:aa:e2:a8:20:0d:
b2:63:39:50:fb:72:96:63:50:b0:a7:77:47:49:f3:
74:f4:9a:86:f7:3c:1f:dd:33:e7:cf:90:4b:c5:15:
09:e0:ca:3a:2b:be:1c:64:32:38:eb:75:4f:87:ed:
c5:47:17:a7:ff:c4:39:c8:79:b3:4d:e4:3a:53:0f:
be:6e:ae:b0:8e:23:68:4e:1c:c1:1b:d3:31:3f:14:
94:57:be:a8:27:6f:a9:4e:46:00:e9:6f:18:c7:62:
31:1a:d1:36:43:1a:5e:ea:aa:7a:73:0d:0f:a8:ab:
2f:13:2e:72:00:0d:80:38:ae:7a:de:a1:f3:1f:c0:
18:10:84:f1:9e:1a:52:77:78:78:49:53:d8:29:12:
7f:44:fc:49:83:aa:79:ff:6a:2d:f8:a1:81:a3:5e:
c0:4c:17:86:72:55:6e:36:54:4d:d0:e7:8f:7b:63:
31:08:25:70:eb:02:1d:56:d9:ca:fd:dd:bd:aa:ee:
4a:b7:24:71:b0:f0:d7:56:31:ce:d5:32:c6:39:9e:
d0:ea:7a:47:18:21:4c:cf:ac:59:ca:b7:e3:5d:58:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BA:C8:32:26:FE:D2:8B:5E:2E:02:51:66:57:5F:5F:07:DB:75:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AE10A4A75E911F196738DAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.46.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b3:5a:4f:d9:3c:8b:69:f3:fb:37:a6:e1:61:c2:81:fc:d2:
91:00:6b:a4:a3:c1:69:83:0c:68:31:3b:2f:07:80:c7:7d:d4:
3c:13:01:cf:7b:46:a4:1e:31:de:50:ee:3d:46:e9:53:2b:8d:
21:4e:d0:19:04:5f:4b:a3:22:2d:de:45:ff:3a:4a:dc:9d:67:
08:51:23:15:b4:b7:d2:9d:3b:8e:40:8f:d8:79:9b:b2:a2:4c:
8d:d4:34:c5:f8:76:72:0a:04:04:2d:b8:b8:8e:c1:91:df:a5:
39:9b:01:13:fd:6a:0c:c4:3c:3a:36:bb:a6:82:bd:fa:48:b6:
ef:47:d3:a5:b9:ac:fe:f2:b4:6b:76:43:a3:26:6e:46:a2:66:
62:00:7c:d4:4e:55:69:ec:85:d9:24:fb:5b:35:55:e0:66:33:
a0:32:8b:d3:37:0e:47:2b:8c:72:e7:5e:8f:b9:24:d2:ec:ca:
5e:dd:34:59:97:7a:ab:cd:d0:cf:38:c7:11:05:92:d9:a3:85:
61:c7:61:7a:5f:d5:52:b8:52:38:e8:f2:be:77:91:bb:ff:49:
ad:6a:35:0b:3a:3a:63:84:3a:e9:41:a4:69:2c:74:5e:c0:fe:
ea:f5:70:2e:80:89:28:9e:c1:1c:61:07:3e:72:cb:2b:86:30:
c8:fb:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:20 2026 by rpki-client