Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A817676675E611F1AC0AB616CF1D38B0.roa
File: A817676675E611F1AC0AB616CF1D38B0.roa (raw, json)
Hash identifier: jcS75LSa5FypNRcZYEfZkjdr67Lz6OHEva3TDi+xAKo=
Subject key identifier: 58:1A:32:B9:D8:C2:D4:7E:59:ED:4E:FC:33:79:00:41:A9:72:0A:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C248
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A817676675E611F1AC0AB616CF1D38B0.roa
Signing time: Thu 02 Jul 2026 07:21:35 +0000
ROA not before: Thu 02 Jul 2026 07:21:30 +0000
ROA not after: Sun 09 Aug 2026 07:21:30 +0000
asID: 14315
IP address blocks: 45.196.70.0/23 maxlen: 24
45.196.88.0/23 maxlen: 24
45.196.110.0/23 maxlen: 24
45.196.114.0/23 maxlen: 24
45.204.74.0/24 maxlen: 24
45.204.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115272 (0x1c248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 07:21:30 2026 GMT
Not After : Aug 9 07:21:30 2026 GMT
Subject: CN=6a46117f-916f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:0f:ff:43:79:28:8b:3f:8c:e5:c3:79:79:
2e:fa:ea:6e:3a:6c:78:1c:33:fe:e5:a8:22:77:9f:
51:1e:65:73:b0:97:7c:8a:98:9e:5e:49:83:06:71:
8a:4b:5d:d3:73:0e:77:dd:a5:64:2c:62:d4:cf:23:
58:d6:7f:76:9f:2d:c4:df:97:f2:92:95:bf:e6:2b:
a5:ae:0e:01:66:97:1d:ac:a8:91:9d:c0:eb:17:e4:
82:dc:5f:b5:ff:04:49:95:b2:90:83:f0:ad:00:d6:
de:98:28:13:b9:d9:e9:68:d5:95:25:43:20:33:71:
6b:29:e9:26:f8:1a:30:4e:36:23:1d:05:16:08:fe:
18:a0:bb:04:c2:6c:c6:81:da:41:32:b9:3c:31:2f:
19:21:c7:bb:4b:ae:9c:09:da:de:0d:ce:eb:5c:d7:
31:7a:b2:d2:30:d6:35:eb:dc:28:28:30:a8:1a:ab:
c0:d9:7e:f2:f7:8a:f9:73:76:ba:9d:8f:2e:4e:54:
8d:b1:da:b8:cf:c3:42:7c:c4:29:40:03:ed:a8:37:
89:cb:55:23:82:4f:e6:cf:ae:2e:5f:dc:6e:a5:0e:
91:07:01:e9:2d:03:91:c6:5d:47:4e:6b:fb:d9:0e:
8f:89:38:6f:37:02:a0:84:6e:b5:bc:ed:e1:db:91:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1A:32:B9:D8:C2:D4:7E:59:ED:4E:FC:33:79:00:41:A9:72:0A:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A817676675E611F1AC0AB616CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.70.0/23
45.196.88.0/23
45.196.110.0/23
45.196.114.0/23
45.204.74.0/24
45.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a3:8b:d5:dd:bb:4a:fb:e0:d6:8f:76:57:22:97:71:89:25:
40:77:ef:bf:76:e0:79:79:8f:bd:1a:9b:56:c5:a4:32:72:e2:
0f:dd:9c:73:c6:2b:08:57:e7:dc:9f:bc:e4:e9:10:71:21:d9:
98:87:d4:ad:f3:c0:ae:6f:8f:3b:6e:8f:23:27:0c:50:f0:de:
2d:0c:ad:c9:71:ec:7f:5b:19:ef:2f:4a:11:fc:b8:2e:3a:6f:
0c:a5:58:3a:97:f3:9f:e1:c0:5c:8b:bd:8d:25:59:6b:14:a4:
2e:18:96:6d:67:9b:9b:9c:33:27:94:1b:a5:9e:f8:82:b6:33:
cc:fb:1a:b6:9c:3e:81:6a:f0:e8:b2:89:3f:25:a8:7e:65:53:
34:d5:a8:ce:d6:9e:79:2d:4c:5d:59:e5:62:fb:0b:d6:d9:e0:
8e:d3:78:0a:4c:f5:5f:21:90:66:e9:88:b3:29:79:60:ed:c4:
3f:a6:db:15:06:e2:45:d1:3a:82:dd:39:ec:d7:66:29:53:24:
64:14:f8:45:a8:35:fa:6f:c2:5c:f4:31:bc:fe:1b:17:5f:40:
23:8d:ce:9e:bf:90:be:72:1e:9b:30:b7:f0:a1:80:2e:b0:47:
b0:ce:c6:41:8b:8f:e5:9c:44:75:72:e2:e6:00:b7:b9:74:24:
d8:6a:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:11 2026 by rpki-client