Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A74E41047B6511F18FB95AB7CE1D38B0.roa
File: A74E41047B6511F18FB95AB7CE1D38B0.roa (raw, json)
Hash identifier: MmlG4vE2D7lJQFQnriF7/YJJ9U42Vlt/wL+1JmsYXfU=
Subject key identifier: 70:64:F0:43:AE:BD:5E:80:A2:81:E3:2D:D8:9F:C8:1F:5B:FD:2D:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A74E41047B6511F18FB95AB7CE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:13:16 +0000
ROA not before: Thu 09 Jul 2026 07:13:11 +0000
ROA not after: Thu 13 Aug 2026 07:13:11 +0000
asID: 213690
IP address blocks: 45.192.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115669 (0x1c3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:13:11 2026 GMT
Not After : Aug 13 07:13:11 2026 GMT
Subject: CN=6a4f4a0c-bacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:37:5a:67:30:2b:31:94:ae:c1:f9:18:ed:
fd:3f:71:96:09:52:b6:04:c1:e8:b5:bc:2d:05:3d:
22:3c:a8:d5:45:01:6c:38:06:09:96:a7:90:c4:93:
7d:36:1d:3a:bd:68:16:e4:7b:da:3d:99:9b:10:80:
d8:8d:f8:6c:4f:a5:78:6a:49:a9:94:85:92:a0:74:
fb:19:43:8b:bc:20:ec:8f:df:90:22:e8:e9:af:c3:
e5:db:76:52:7f:74:b7:68:1b:5c:ed:78:50:03:98:
d8:c9:07:86:fa:4f:7d:bc:e4:85:eb:71:8a:f2:c9:
99:95:15:58:bf:55:40:b6:0f:4a:4f:ff:1b:93:49:
d3:34:ae:bb:51:63:e9:b4:cf:e7:6d:23:5c:b2:40:
58:cd:64:0d:0f:82:16:04:1b:b1:78:cd:5e:db:8e:
27:79:68:86:3e:1b:25:71:48:1f:9f:ee:40:a3:55:
e5:e2:d9:d1:55:44:14:c8:51:d7:4c:b5:9c:bb:68:
23:bb:d9:a7:fc:c1:48:86:93:c8:cf:8b:ea:10:16:
e5:ff:5c:16:f8:23:49:a3:9a:50:2d:57:f3:dc:61:
6b:17:f9:78:d7:37:a1:47:98:20:d0:ea:cc:cc:47:
d1:bd:09:e7:67:7f:c5:79:3c:ef:da:30:62:63:42:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:64:F0:43:AE:BD:5E:80:A2:81:E3:2D:D8:9F:C8:1F:5B:FD:2D:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A74E41047B6511F18FB95AB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.0.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:5e:45:44:c1:08:35:df:29:10:93:96:36:fd:dc:59:c3:21:
f4:b8:c7:7f:e6:5d:b3:8b:4a:a6:a1:51:0b:d8:fa:f6:bb:c4:
78:5a:eb:0c:99:35:66:c8:47:9e:9a:48:b0:35:8a:71:90:68:
a4:a0:55:7a:d8:41:01:04:9a:f2:a2:8c:2d:5d:c6:2b:66:67:
c0:44:1f:87:b5:9b:55:2f:37:af:04:75:cb:cc:4d:88:b7:44:
c5:f4:8a:e6:57:61:89:25:0f:76:80:98:72:15:ef:ed:b5:56:
71:eb:43:d0:73:69:f5:20:c4:d5:c5:e3:8b:43:4a:fc:60:bb:
3b:bb:fd:cc:07:dc:2e:01:5b:3d:ed:6a:b4:92:d1:c3:3e:e7:
3c:57:0e:3e:b5:5c:a9:48:c4:af:0d:5e:45:81:c1:a1:2c:03:
fa:61:d9:70:45:eb:d0:5c:85:e2:30:ff:26:ea:d2:d6:74:01:
c5:cf:9c:78:b1:3e:ca:53:0d:b9:86:4b:33:6c:e9:f7:3f:1a:
e1:8b:a9:13:8f:b3:54:46:61:51:3d:40:02:46:65:b8:28:15:
21:75:a1:a4:10:8b:a5:d6:ee:53:ee:61:b9:aa:a8:92:86:da:
3b:c1:8f:10:4a:ce:46:eb:0d:cc:42:e8:d5:06:ee:bb:fa:ce:
53:b7:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:33:37 2026 by rpki-client