Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1B36766698A11F189B3D2A7CE1D38B0.roa
File: A1B36766698A11F189B3D2A7CE1D38B0.roa (raw, json)
Hash identifier: 3BEnzBmW/tj6mKwxPAEt4CId8Pd96GVE2AKwmPGb9Cc=
Subject key identifier: 0C:A0:CB:C8:3A:81:09:7E:74:32:4F:F8:23:BB:72:D5:D3:B2:10:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1B36766698A11F189B3D2A7CE1D38B0.roa
Signing time: Tue 16 Jun 2026 13:52:37 +0000
ROA not before: Tue 16 Jun 2026 13:52:32 +0000
ROA not after: Wed 22 Jul 2026 13:52:32 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114202 (0x1be1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 13:52:32 2026 GMT
Not After : Jul 22 13:52:32 2026 GMT
Subject: CN=6a315525-3e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:de:6e:bf:89:c9:18:ea:6d:d4:d9:e8:e8:
26:58:12:7a:0c:5b:78:f8:1a:f4:cb:ca:0d:d1:31:
6a:a3:3b:71:81:0c:33:4e:42:f4:3a:34:dc:51:8a:
fa:60:c5:16:84:ea:c0:0a:c8:45:87:84:b6:c6:d9:
ed:60:e1:57:e9:18:c2:02:cc:d1:27:11:42:2a:5e:
bb:19:28:c2:10:03:93:c8:dd:a4:c0:62:95:ee:05:
f5:a2:43:4c:47:6e:d6:6c:bf:52:bb:92:62:8c:b2:
34:22:24:02:26:4f:cb:ee:b7:7d:47:52:ab:15:b3:
43:37:63:4b:f2:29:dd:86:7b:8d:40:34:8e:c4:bc:
6b:61:67:d6:e6:ad:c9:27:dd:33:07:a3:58:ea:74:
e1:61:f1:45:0f:b9:a1:15:e2:87:f5:00:fc:b0:e6:
15:91:b0:23:d0:1e:01:c8:eb:39:54:cd:b0:ae:12:
38:d6:6e:7a:bf:4b:18:31:8f:56:49:88:1a:d7:da:
fa:bc:74:14:cb:97:b0:79:c5:95:67:9b:da:1f:dc:
ae:7e:d6:bd:4d:71:89:e4:ff:43:86:a5:da:03:23:
a9:09:da:14:07:18:20:6b:8e:20:bf:09:35:b6:2e:
6a:7a:b1:c7:c7:33:5f:8a:60:fe:08:a1:58:fc:e8:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A0:CB:C8:3A:81:09:7E:74:32:4F:F8:23:BB:72:D5:D3:B2:10:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1B36766698A11F189B3D2A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
33:62:74:56:a0:a6:33:8d:a4:19:43:3c:2b:a2:54:14:68:61:
27:d7:2a:09:cf:8a:0f:19:2b:f1:57:57:a2:8a:b9:27:84:66:
54:5a:dd:23:5d:22:42:70:3c:66:e7:c6:a1:4a:ca:76:ba:d9:
a6:85:15:75:d7:3c:aa:26:c1:bb:3c:ce:00:17:75:f8:55:7a:
ab:4f:f1:a9:fc:9a:94:e6:5c:ea:d7:27:ff:17:1e:ed:d7:92:
fa:84:81:83:7e:9f:18:45:79:de:53:91:ef:8f:80:b7:d5:1c:
8d:1d:d7:9c:87:fd:0e:d8:aa:4d:8d:1d:aa:59:7f:17:b5:1e:
2e:1b:58:ff:36:01:e2:03:ae:9e:95:29:6d:5d:62:29:30:5f:
b7:9b:31:52:0c:3c:43:e1:4c:bd:9a:9a:17:3d:1f:d3:df:23:
71:4f:80:73:27:9d:15:18:ea:51:01:b2:94:e3:7b:fa:28:6f:
d4:4a:dd:97:3a:66:71:fb:4d:ae:aa:b6:28:a3:77:f8:7f:1a:
f2:21:ac:5b:7a:ae:01:bc:ea:c1:45:e0:37:e7:ef:af:d1:37:
88:8a:97:c7:38:53:2b:ca:84:55:39:5d:97:a8:a6:3a:bf:e7:
4b:2d:ee:15:a1:03:14:6b:11:d2:56:85:0a:85:77:f1:f8:2c:
ad:f4:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:17 2026 by rpki-client