Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABD85848785111F1AAA023CCCE1D38B0.roa
File: ABD85848785111F1AAA023CCCE1D38B0.roa (raw, json)
Hash identifier: yBuLPUwJizqaFzTHOogR0vwYcvdl5fnGiGvf/JxtUmo=
Subject key identifier: B3:30:F9:EF:D4:B8:C0:FF:F4:7E:E8:D3:55:FD:5B:41:1E:CC:7B:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C308
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABD85848785111F1AAA023CCCE1D38B0.roa
Signing time: Sun 05 Jul 2026 09:12:40 +0000
ROA not before: Sun 05 Jul 2026 09:12:35 +0000
ROA not after: Sat 22 Aug 2026 09:12:35 +0000
asID: 40779
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115464 (0x1c308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 09:12:35 2026 GMT
Not After : Aug 22 09:12:35 2026 GMT
Subject: CN=6a4a2008-1dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:0d:bd:e3:ff:b4:db:07:61:da:05:92:94:
fc:2f:9b:c9:76:04:4b:d5:1a:4c:24:a5:02:c1:79:
d3:8e:06:4b:5e:a3:24:bb:a9:4c:41:94:de:56:a1:
04:bc:83:15:07:8e:dd:7c:02:95:c7:a6:f0:ae:fc:
d7:e6:0e:6a:45:00:28:4f:10:2d:c5:27:4b:cc:0e:
d4:b4:84:f5:cf:e3:f5:5e:02:2e:4d:4f:2a:ff:0e:
70:ba:06:1b:85:6f:59:8a:34:be:95:95:56:15:ee:
fa:83:2d:ad:ea:2b:f1:94:0b:4b:3d:84:e7:e8:32:
6f:64:90:a7:51:48:48:b1:e0:5a:72:59:e8:51:dd:
63:4e:7e:c9:2e:88:a2:06:bf:98:f1:d4:f1:db:34:
2a:43:e8:94:f6:09:ce:73:e7:90:76:57:c6:8c:ba:
a6:11:09:e7:fa:7c:e8:d9:2f:a5:c7:7c:94:25:83:
de:c0:3e:87:92:1c:94:b5:3a:ed:e7:91:f8:e4:c1:
6e:cb:f3:b9:76:37:64:7b:39:ea:6f:3e:eb:67:63:
6a:73:0a:84:c6:ad:76:2e:f2:fd:d7:ac:ca:c4:53:
31:c5:18:d0:b8:77:00:67:19:b1:8f:1a:6e:fe:66:
4c:5f:1e:4c:8e:2f:e9:e2:2c:4a:08:7d:bb:7d:32:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:F9:EF:D4:B8:C0:FF:F4:7E:E8:D3:55:FD:5B:41:1E:CC:7B:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABD85848785111F1AAA023CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
82:0e:4d:be:d8:9a:d1:79:2c:99:d3:b1:2b:36:c6:a5:42:77:
04:c7:64:d1:3b:0d:6b:c7:52:15:90:5b:00:44:84:c6:96:2a:
82:53:4d:cf:db:c9:54:b6:f0:ea:3e:46:4a:0c:d2:76:af:d2:
84:39:36:e8:e3:be:68:6b:8f:0c:01:58:0b:98:33:1f:1d:7a:
47:37:d1:6e:f7:e0:05:b6:cd:89:de:ea:47:84:4b:ee:29:34:
0b:b6:73:3a:78:28:83:b2:85:8b:64:26:5a:f3:00:35:82:a2:
6c:30:12:7f:d7:a9:12:dc:d6:9f:3e:f0:10:d4:67:11:8a:fe:
7e:0b:0f:2d:b1:7f:04:06:31:d5:13:17:c6:95:20:57:42:1f:
81:65:0c:a7:d5:38:98:07:11:ae:19:18:18:52:8b:c7:25:e2:
c0:48:13:76:06:01:ce:76:6d:ab:b4:ea:6e:45:3e:a2:93:42:
e5:63:88:a1:41:3c:da:e2:bc:1b:32:b3:65:17:04:f9:1c:28:
42:c6:2c:7a:6e:73:e1:f5:8f:11:3e:7c:7f:2b:1e:60:29:2a:
78:54:8a:92:41:90:d7:b7:bd:6c:67:b6:f0:29:1a:22:b9:e2:
4f:52:a2:9e:59:5e:af:31:e3:fb:71:89:6d:83:26:96:6f:b2:
f0:cb:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:47 2026 by rpki-client