Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC0864C7AA411F192403EE5CE1D38B0.roa
File: 9BC0864C7AA411F192403EE5CE1D38B0.roa (raw, json)
Hash identifier: xnXUd4ZyRPCqHPb/RPJMc+ikwa/A1Y4mLjqVeyp/ruE=
Subject key identifier: 88:71:A4:B7:E4:46:6C:8D:2F:A5:25:B0:31:09:73:66:15:7B:91:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C392
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC0864C7AA411F192403EE5CE1D38B0.roa
Signing time: Wed 08 Jul 2026 08:11:23 +0000
ROA not before: Wed 08 Jul 2026 08:11:19 +0000
ROA not after: Sun 16 Aug 2026 08:11:19 +0000
asID: 211567
IP address blocks: 45.195.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115602 (0x1c392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 08:11:19 2026 GMT
Not After : Aug 16 08:11:19 2026 GMT
Subject: CN=6a4e062b-e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:08:96:46:65:fe:0d:d7:66:8c:05:bb:0a:
3f:e5:aa:fa:26:25:dc:22:90:41:b5:9a:90:86:66:
44:eb:7c:f8:c1:ea:73:17:cf:29:52:a9:56:3b:f6:
f6:bf:cd:86:9b:f5:c6:2e:8e:0d:4a:18:b4:1e:4e:
bd:60:e0:89:0a:4b:20:e8:15:e9:ed:2e:68:06:b1:
ec:08:5c:b8:0a:52:2e:cc:ae:b2:8d:ad:bf:c9:a8:
be:99:a2:57:7f:a9:38:cb:0d:76:84:8e:5a:f3:79:
6a:19:f8:c1:ab:6d:5b:e7:d6:58:fd:ae:a5:81:23:
1a:80:c0:23:b0:d9:b6:17:f7:55:86:b5:a9:6b:0c:
cb:da:34:ff:bb:65:6c:9b:7c:ab:c2:ee:5d:cd:50:
30:f2:3b:6a:77:9a:16:b8:ed:c6:f2:23:b3:45:26:
db:e6:a0:f0:ee:7d:43:f7:c2:09:d5:9f:0b:38:83:
06:1b:ce:60:ca:5e:93:48:d1:1d:35:97:02:82:69:
42:cc:4b:fd:3d:80:6b:6c:ab:9f:97:ea:ad:21:67:
65:f1:2d:ab:78:93:12:be:9c:d4:a8:fb:e3:d9:2d:
16:33:b0:92:93:13:5f:04:56:34:65:18:51:7c:64:
04:01:a4:ce:65:79:e4:e2:09:58:4f:99:63:af:ae:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:A4:B7:E4:46:6C:8D:2F:A5:25:B0:31:09:73:66:15:7B:91:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BC0864C7AA411F192403EE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d8:7e:a8:b0:7d:7a:7d:d8:ce:4a:1f:17:c1:ef:05:95:41:
57:8c:0f:84:90:dc:a9:40:3c:d1:ae:a3:74:54:8c:b3:38:0a:
ea:e6:35:8a:69:6f:b5:77:26:f1:c2:a1:f5:1d:5c:0a:39:bb:
c8:01:43:f6:be:47:77:e6:20:ea:79:77:cb:12:d9:40:77:ff:
78:aa:4b:69:d2:78:b4:7f:fb:d8:32:f7:9e:be:45:4a:66:57:
43:b2:d8:8e:fa:ff:b4:fb:43:c7:41:44:fb:e7:eb:fa:5d:95:
83:53:74:86:48:af:5e:85:ff:7b:c0:8d:8b:20:8d:27:a0:ab:
b8:ce:02:d7:65:53:fb:ce:64:62:28:c7:50:0a:5f:fd:c3:30:
6e:8f:f7:de:89:ab:b2:44:ab:99:dc:4c:6e:3f:6a:9a:b0:e0:
da:dd:a7:80:0c:12:2f:8b:c2:46:46:4b:53:70:fe:18:6f:7c:
bf:23:80:56:86:e6:90:a9:0f:07:30:1d:ff:39:a5:d4:d3:db:
e9:76:c0:bd:3a:8b:0a:cc:05:f4:18:c3:1e:d8:3c:55:52:f8:
6d:2b:fd:8a:df:73:40:d8:34:78:80:76:44:ca:31:10:23:1a:
9e:36:56:5a:c4:ec:ed:a5:f1:bf:04:7b:93:b2:46:b5:9a:18:
30:6c:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:02 2026 by rpki-client