Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FCDDEA81D611F193DD0EB0CE1D38B0.roa
File: A8FCDDEA81D611F193DD0EB0CE1D38B0.roa (raw, json)
Hash identifier: LUy4lwycChU/ej1aGE+mrlyDubFDaxNS1G90xq7JUp8=
Subject key identifier: D7:8C:8F:51:F5:D5:7C:92:94:B3:69:E0:E5:7A:A8:55:FD:BD:D5:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FCDDEA81D611F193DD0EB0CE1D38B0.roa
Signing time: Fri 17 Jul 2026 11:57:19 +0000
ROA not before: Fri 17 Jul 2026 11:57:15 +0000
ROA not after: Fri 21 Aug 2026 11:57:15 +0000
asID: 63099
IP address blocks: 45.197.135.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116196 (0x1c5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 11:57:15 2026 GMT
Not After : Aug 21 11:57:15 2026 GMT
Subject: CN=6a5a189e-4a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:e9:cb:3c:5a:ef:64:bb:29:02:cf:30:d2:
31:0e:0f:af:bd:71:22:51:0a:69:3b:3b:89:b6:85:
08:5d:ac:bd:16:3c:cd:f6:78:2d:cb:1c:7e:db:1a:
a1:0a:01:12:91:cc:0e:5e:8b:29:de:a4:31:ff:38:
47:4b:60:ee:23:3b:2c:87:0f:3b:18:d9:f1:e0:18:
c5:5e:6e:43:dc:d3:ef:3d:fc:5f:a8:3b:c8:f9:2d:
e9:ba:37:58:d7:a7:6c:ad:36:46:4c:3d:ec:43:0e:
42:86:9b:69:6a:48:a9:fa:2c:24:ac:4f:58:4a:63:
81:17:d4:50:17:2d:cc:ca:4e:d2:b3:cc:41:a2:f6:
dd:f8:68:af:e9:a1:9d:6c:34:97:ae:22:0f:19:4d:
09:46:d8:a1:63:fd:71:b7:48:85:41:cc:13:a3:1b:
db:c3:94:d0:1e:00:9f:82:85:d8:59:60:7c:a8:d7:
de:c1:03:a8:29:9f:f6:e6:fb:84:8a:c9:b5:e6:f2:
42:56:04:60:8b:96:42:4c:ad:93:e4:3b:fd:3d:70:
bf:a0:c5:d0:f3:cb:54:4a:41:79:6a:f5:f3:e4:8e:
c7:46:3b:43:d4:ed:55:dc:68:af:e7:33:a6:f7:6c:
ba:ae:99:dc:d6:14:d1:1e:28:25:1b:06:8b:6c:8c:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:8F:51:F5:D5:7C:92:94:B3:69:E0:E5:7A:A8:55:FD:BD:D5:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FCDDEA81D611F193DD0EB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.135.0/24
45.198.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7f:ce:5d:b6:df:00:ad:ca:ee:60:e2:0e:4b:c3:50:61:1b:
c6:a9:35:b9:a2:e2:45:8e:7f:be:8c:92:55:e3:fd:30:38:8f:
64:ba:c5:d7:5d:67:fb:aa:a0:3b:37:ef:70:0c:22:df:08:bf:
36:b4:9c:fc:46:d5:af:2e:57:e9:06:c7:f1:de:a5:73:5f:71:
cf:23:83:77:e6:b2:48:33:02:33:d9:3c:16:7c:32:29:d2:a3:
0b:d5:78:a7:77:a8:31:10:01:ba:fe:9e:4e:84:28:54:d9:87:
d2:79:5c:2a:50:9f:6c:bf:8d:ea:3e:0d:30:63:e3:c8:8f:2a:
f2:4a:4e:e0:c5:da:ff:11:be:2c:9c:0e:71:95:65:84:77:7f:
64:74:52:38:61:9c:46:3b:0b:75:00:d6:fb:49:23:1f:b5:d9:
11:9d:55:8b:1b:1f:19:6d:74:20:5b:94:44:f8:cd:2c:72:32:
53:12:79:d1:34:e5:58:04:e2:18:2f:70:02:fb:ab:7a:dc:9d:
5a:f2:1d:f0:0e:9e:63:1f:6b:60:5e:0c:31:f5:6d:d3:90:71:
f9:ea:2f:75:7a:70:73:d2:17:62:60:cd:22:b7:39:7e:1b:9e:
10:a2:74:f7:8c:98:17:5d:3f:7a:21:f6:cb:70:93:e9:70:0d:
8a:be:22:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:19 2026 by rpki-client