Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6300DE7F5011F1900DF40DCF1D38B0.roa
File: AA6300DE7F5011F1900DF40DCF1D38B0.roa (raw, json)
Hash identifier: Ii+W4xMUuAr8wURsTZmf+dTbRdvN++rQJs+h096IyiM=
Subject key identifier: 98:E7:DE:32:EF:3E:80:78:6F:A5:70:50:CE:F3:F6:7D:DD:7A:E1:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6300DE7F5011F1900DF40DCF1D38B0.roa
Signing time: Tue 14 Jul 2026 06:53:06 +0000
ROA not before: Tue 14 Jul 2026 06:53:02 +0000
ROA not after: Mon 10 Aug 2026 06:53:02 +0000
asID: 138915
IP address blocks: 45.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115933 (0x1c4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 06:53:02 2026 GMT
Not After : Aug 10 06:53:02 2026 GMT
Subject: CN=6a55dcd2-6093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:62:5f:f3:ca:6d:22:20:05:1a:42:dc:2a:
3b:8e:f4:0c:8a:45:2c:e4:cb:3c:d3:c9:b7:c9:ed:
e5:0b:cd:17:1c:68:f9:19:9b:d1:48:c4:9f:69:84:
a2:83:70:1f:d8:67:43:b6:c2:48:1d:22:3f:49:15:
e3:b2:c3:b6:62:c2:b6:7b:63:35:c9:9d:a7:7d:be:
1b:35:d9:04:fc:6e:4b:71:f2:54:3b:60:b2:28:bf:
8c:4b:d2:2f:0e:1b:3b:fb:2a:b6:55:26:26:a8:a2:
0f:29:8e:87:06:b5:f5:fe:eb:80:fb:f7:bb:10:b9:
de:32:a8:99:d1:4e:d4:59:e1:f5:65:b3:0a:9c:af:
76:d0:6f:42:15:76:c5:f1:f1:9b:01:fc:aa:d9:eb:
6c:aa:a2:68:67:48:0e:27:15:ad:dd:6c:a9:00:e0:
88:a8:00:87:89:30:2f:e6:97:b9:99:5a:07:0e:eb:
6d:d2:b2:55:d6:9f:f3:2c:b1:c3:ec:f1:a9:ff:8f:
4f:f7:7c:ef:a3:24:94:bc:0d:e4:c1:52:06:05:56:
c8:61:90:66:e2:58:6f:eb:46:68:6d:25:98:19:1d:
e6:3f:f1:aa:ae:c7:e9:7f:c0:2a:13:11:14:eb:6c:
82:bc:a9:d6:4a:08:36:ac:2a:9c:81:64:83:4d:df:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:DE:32:EF:3E:80:78:6F:A5:70:50:CE:F3:F6:7D:DD:7A:E1:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6300DE7F5011F1900DF40DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2e:8d:ef:e8:65:d2:ed:80:13:d2:be:7e:ee:ea:66:c6:53:
4b:e7:9c:0c:24:17:6a:e3:04:a7:d5:ad:6e:1d:de:2a:04:54:
b0:b7:37:f7:29:a4:c6:70:04:cf:15:f1:b8:7f:a3:10:37:4a:
95:e6:ac:48:b9:02:11:00:d1:eb:9e:b5:d8:00:c7:8e:0d:7a:
11:23:9f:82:ed:37:c0:2c:1d:96:18:43:73:fe:76:8c:47:f1:
e7:f8:07:82:2c:9a:15:16:61:52:54:8c:44:97:5f:b5:0d:94:
1a:ed:ec:13:d0:f1:b2:56:ef:ee:d2:58:eb:98:b5:45:2c:ee:
aa:60:db:d1:09:ba:f9:10:00:b6:4f:e1:24:9a:87:60:4e:89:
ae:79:c0:6e:5b:f9:1b:d6:93:8e:e8:f3:97:2f:48:1e:b6:fc:
30:54:91:7f:eb:8d:1c:f2:c4:2b:d3:14:85:74:42:d4:88:da:
2f:10:a2:0a:88:98:e3:ff:93:7a:a6:5a:77:37:fb:79:3a:18:
f3:b2:22:d0:8f:d1:26:b1:d9:d0:a0:49:e9:62:f9:e9:7b:61:
7e:a8:48:68:9f:b8:31:97:40:47:03:66:98:c1:e6:5b:30:59:
ee:1c:fa:ef:f0:9e:69:96:fc:df:26:bd:d0:b7:e9:32:e7:fc:
6b:a5:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:45 2026 by rpki-client