Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB40B3927E1611F1ABFBCF0BCF1D38B0.roa
File: AB40B3927E1611F1ABFBCF0BCF1D38B0.roa (raw, json)
Hash identifier: sMVAxdb2nqzTwQbVq9/Izr27oEQ+fCMIQ29Xibdm//k=
Subject key identifier: BC:5C:6B:E9:AF:9D:E5:03:64:1E:79:C6:AE:20:03:C1:70:CC:C8:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB40B3927E1611F1ABFBCF0BCF1D38B0.roa
Signing time: Sun 12 Jul 2026 17:25:26 +0000
ROA not before: Sun 12 Jul 2026 17:25:21 +0000
ROA not after: Tue 06 Oct 2026 17:25:21 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115902 (0x1c4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 17:25:21 2026 GMT
Not After : Oct 6 17:25:21 2026 GMT
Subject: CN=6a53ce05-83eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:4e:8b:18:24:74:6c:35:41:a3:48:52:39:
9e:34:bf:b7:97:42:1d:46:05:b7:8b:6e:27:12:bb:
5e:7d:f7:11:a7:0d:08:31:a6:6d:cd:6a:0c:c9:f2:
59:c1:3c:44:95:3f:e1:c8:58:f7:8d:40:2b:91:d7:
db:03:3f:af:d9:18:93:a7:45:db:f4:9c:3c:6e:e7:
6c:bb:ee:c4:c3:1f:59:a6:a7:3e:18:30:37:4b:19:
81:45:72:6e:3d:ea:ee:5b:43:3c:0e:58:11:50:3d:
67:07:51:79:ef:9b:a5:7d:96:a2:2d:60:b8:1d:fe:
cf:1c:37:fb:bc:0b:49:dc:a3:29:26:62:05:37:7f:
e0:44:7b:52:d4:8b:84:dc:f4:bc:63:91:5f:4e:1b:
da:bd:75:2f:c8:fd:17:e2:ca:72:be:16:e8:3e:14:
92:a8:8e:2c:ad:59:8d:15:87:8f:e4:01:1b:9e:7c:
08:f3:71:66:f3:c7:75:9d:74:73:f6:1d:44:23:bc:
9a:c9:5a:97:ab:64:af:77:9d:b9:fa:2f:75:c1:03:
03:f8:ad:db:04:2a:f7:e2:b2:c8:5f:95:d1:bb:4a:
19:d8:83:38:bf:7e:f6:4c:4a:94:0b:26:de:60:0b:
ad:20:d7:57:58:7b:cd:0d:55:e1:cb:68:65:8b:e9:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:6B:E9:AF:9D:E5:03:64:1E:79:C6:AE:20:03:C1:70:CC:C8:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB40B3927E1611F1ABFBCF0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f7:45:9e:54:88:fc:8e:0e:43:4c:24:b3:e7:d2:22:2f:60:
d1:12:5b:61:ad:35:d6:f2:81:1a:6c:e4:58:a5:d3:f3:43:3b:
03:38:29:fd:f0:7f:4e:f7:f7:a7:87:48:2f:60:2d:58:83:a8:
3c:df:f1:a2:d6:2c:e8:af:55:ec:5c:ab:20:d6:8b:bc:e4:e5:
7c:4d:c4:cb:1d:5c:ed:f6:de:9a:62:04:71:e5:a7:32:cc:19:
67:fa:9e:2a:23:07:44:2c:fd:eb:a5:64:d3:a4:21:f4:e9:ff:
28:07:77:b8:f6:0c:78:09:64:2a:76:65:c1:ee:5b:8c:93:a2:
e9:14:69:c2:d7:63:c9:dc:47:4f:a0:9e:af:4e:59:c0:e2:4d:
64:49:c9:12:77:83:12:41:2f:5d:86:21:62:0f:89:a6:0f:a3:
e7:0d:ec:51:41:f8:53:b1:d2:bc:b0:d9:ed:b7:62:8c:97:52:
e2:22:5f:c7:ce:ad:8d:d4:05:c7:d5:a0:72:01:65:d4:15:c1:
af:27:f3:26:b9:de:2f:2e:b1:9e:61:51:84:bf:3b:f6:a0:bd:
5a:ab:64:12:9f:66:fe:bb:e4:d2:7b:61:4a:cb:fa:3f:58:29:
f2:a0:b3:67:43:5c:42:b5:e2:c4:54:79:1e:31:c5:a9:cf:d5:
fc:d0:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:40 2026 by rpki-client