Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F43BB12756411F1AAAFDEF5CE1D38B0.roa
File: 9F43BB12756411F1AAAFDEF5CE1D38B0.roa (raw, json)
Hash identifier: mt+n02/z+RDiAmBNIRZoBTdyNtHqDd19IjVomm6E05s=
Subject key identifier: D8:37:9A:60:3F:51:E9:A8:58:7E:37:9A:0F:D2:99:0B:DF:B2:D7:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C210
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F43BB12756411F1AAAFDEF5CE1D38B0.roa
Signing time: Wed 01 Jul 2026 15:50:46 +0000
ROA not before: Wed 01 Jul 2026 15:50:41 +0000
ROA not after: Sun 09 Aug 2026 15:50:41 +0000
asID: 44559
IP address blocks: 45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115216 (0x1c210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 15:50:41 2026 GMT
Not After : Aug 9 15:50:41 2026 GMT
Subject: CN=6a453756-2656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:11:56:d5:03:45:b7:56:36:8f:37:45:26:
6f:b2:29:cb:ef:88:17:80:18:4b:d5:a7:96:62:24:
4b:87:77:b9:83:29:41:0f:c4:02:c6:2c:0b:8f:41:
b2:43:45:fe:01:8f:ba:ec:60:25:ed:f2:eb:83:ae:
43:63:53:64:85:7c:37:4c:65:33:38:5c:97:ce:3f:
22:fa:12:ea:ff:fe:17:5c:b3:1b:8b:97:9d:59:80:
44:a3:39:02:05:e5:33:bb:a9:eb:d5:88:72:d0:4e:
d5:bf:57:cf:0e:98:b5:de:9f:b0:68:fe:20:86:2c:
42:69:98:e4:7e:ff:d1:e6:8a:1d:96:60:ec:12:bd:
a9:20:3f:87:05:57:05:bb:94:54:f5:7e:ef:c0:ee:
b6:60:87:1e:91:5c:62:87:5b:62:dd:25:65:80:e6:
1e:82:5c:09:07:0e:e3:fd:3a:62:73:b5:54:08:c9:
aa:30:0b:dc:2b:02:b0:97:83:b3:8e:90:a4:c8:31:
9b:63:8f:1c:bc:78:26:2a:6b:e9:43:41:08:75:d2:
74:08:95:aa:d9:4d:08:40:72:85:08:1f:c0:cf:a3:
c3:da:1e:f5:c0:7a:79:22:0b:7f:9c:45:6a:10:5c:
e6:05:2c:f1:04:15:b6:9d:1d:4f:8a:83:ca:06:dd:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:9A:60:3F:51:E9:A8:58:7E:37:9A:0F:D2:99:0B:DF:B2:D7:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F43BB12756411F1AAAFDEF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.205.0-45.202.208.255
45.204.65.0/24
45.204.73.0/24
45.204.75.0/24
45.207.161.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
a8:67:f6:d8:54:2b:31:b7:3e:59:7e:de:7b:b9:ef:e9:e8:f8:
41:9c:35:1a:7c:ef:0a:57:4f:88:ec:5b:11:65:8a:6a:56:a6:
7a:05:8d:97:20:7b:d0:cc:e6:00:36:71:92:ab:c7:1c:a6:f1:
4e:a0:69:17:38:4d:55:8f:6a:56:26:76:b8:28:2f:4d:44:b6:
d1:72:de:71:92:b0:26:09:fd:b3:12:09:bb:4e:96:96:43:37:
2f:54:bf:76:e3:43:e1:47:03:01:b0:cb:36:31:6b:0e:6b:e8:
05:e2:50:6b:04:d1:c3:e3:45:ec:e3:69:1b:cb:e2:7f:65:d9:
65:97:52:c6:c2:c5:bc:33:55:1c:f0:6f:ca:46:9d:6f:e5:f8:
69:66:40:d8:cb:63:dd:8e:d0:ed:5f:57:73:dd:28:ba:40:bf:
a4:77:95:51:f8:dc:78:3b:89:9e:e0:2c:64:27:6d:fa:f1:55:
3c:f2:9e:18:5f:70:07:27:3b:9d:28:f4:7f:1e:4c:60:1b:b1:
e6:6c:38:86:06:66:43:c2:ed:64:a5:90:a5:28:63:06:47:8b:
be:bc:37:d3:be:d0:bd:fc:42:e8:a4:a3:f3:32:e5:8f:ff:a9:
83:52:f0:fa:ec:e5:bc:6b:df:d6:a4:11:ac:3d:03:a0:72:6e:
c4:b9:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:01 2026 by rpki-client