Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DF3D03E8C6711F1A8A85C1BCF1D38B0.roa
File: 9DF3D03E8C6711F1A8A85C1BCF1D38B0.roa (raw, json)
Hash identifier: tZpMk5t2FmSVqNhaRMPCAOjmqsg4TdV1//FEhVD1sZk=
Subject key identifier: 48:69:45:74:20:19:8E:43:47:D0:48:F7:39:2D:AF:75:BB:C1:5E:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C8C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DF3D03E8C6711F1A8A85C1BCF1D38B0.roa
Signing time: Thu 30 Jul 2026 22:40:09 +0000
ROA not before: Thu 30 Jul 2026 22:40:05 +0000
ROA not after: Wed 02 Sep 2026 22:40:05 +0000
asID: 212238
IP address blocks: 45.199.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116936 (0x1c8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 22:40:05 2026 GMT
Not After : Sep 2 22:40:05 2026 GMT
Subject: CN=6a6bd2c9-2c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:6d:1d:d2:ae:23:75:eb:0f:04:07:c7:ad:
1e:fa:da:6b:33:c7:f1:3d:76:5d:28:3a:a9:a4:62:
d9:a6:94:0c:59:b7:09:91:70:5f:56:72:a8:01:53:
16:22:c1:5c:4c:e1:08:e2:87:52:cd:43:bb:04:fe:
0a:e3:16:c5:c8:94:0e:4b:12:12:3c:62:20:44:3f:
10:6d:1c:42:37:1a:1c:c1:ac:ff:56:31:0f:9d:77:
0f:89:9e:80:99:f9:1d:d9:78:86:ce:f8:f5:c7:b8:
20:c4:05:88:8f:fd:5b:8f:3a:5d:2f:74:86:33:64:
42:55:ee:fc:2c:ab:a2:db:02:3e:90:8b:25:9e:13:
e6:6c:28:10:53:de:31:04:c8:20:46:8c:11:4c:01:
96:3a:b2:49:a3:3a:87:4c:0e:4d:d7:95:4a:ae:0d:
71:5b:72:78:45:37:72:93:8d:85:02:22:b2:17:dd:
96:d5:66:f0:e9:ce:6e:fe:47:5a:be:94:b9:40:55:
c0:b6:be:e2:07:7a:57:d1:bd:a4:cd:52:bf:30:73:
f9:8b:23:bf:32:e6:9e:56:3a:69:48:2c:b1:7d:54:
df:f3:67:8d:7b:1f:8e:53:8c:0a:ea:26:ff:52:5e:
79:14:41:6e:73:8a:d2:bc:c9:47:b1:60:6c:06:34:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:45:74:20:19:8E:43:47:D0:48:F7:39:2D:AF:75:BB:C1:5E:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DF3D03E8C6711F1A8A85C1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:46:4b:c2:1a:1f:9e:42:c4:f2:9c:b2:fe:c2:48:a0:92:c4:
5c:70:88:dc:69:20:fb:99:93:b7:24:71:a6:d4:77:5a:15:59:
b0:59:bd:e3:41:15:78:d0:93:ef:2c:16:ea:5e:12:ab:c2:e6:
24:6e:77:8b:dd:60:41:79:2c:c0:d8:99:8a:d2:8d:08:17:e6:
68:c7:f8:7a:2d:16:b2:fd:38:d9:2f:be:df:08:6f:77:1f:63:
40:74:26:99:98:6b:ac:87:7d:70:ee:d6:cd:ee:c5:50:3c:e4:
54:c3:63:a5:61:94:e6:b0:41:b2:60:7b:44:6e:0b:b2:50:27:
c7:5d:0f:0e:52:53:c9:63:72:51:b7:a4:91:ae:e8:04:a5:fe:
79:f1:a0:b4:fd:54:29:7e:ba:df:89:24:ec:5f:85:c6:71:07:
d1:f9:a3:ee:88:03:4c:42:c9:a8:4e:aa:c7:ff:e4:18:a7:19:
c2:26:f4:25:ba:cd:20:5f:05:3c:bc:a1:6e:86:8d:bf:71:75:
5c:43:d3:cb:34:2d:5c:e5:34:40:2b:21:19:80:29:e8:08:00:
4d:f2:f3:2a:52:d3:0a:04:6b:d1:f6:e8:02:2c:a6:29:48:b4:
0a:c8:3a:a9:a1:a3:9c:5c:9f:66:9b:60:b5:b1:0e:9c:e8:c5:
f5:30:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:23 2026 by rpki-client