Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF710910716B11F18BF446D1CE1D38B0.roa
File: AF710910716B11F18BF446D1CE1D38B0.roa (raw, json)
Hash identifier: fmyYykmu5/fLdp5MnhR4eeDODRmR5aXiXtHMQ+Skx3I=
Subject key identifier: 1D:2F:7E:56:C6:71:90:2F:DF:DF:6D:A8:D2:6B:8E:4F:4E:6A:6E:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF710910716B11F18BF446D1CE1D38B0.roa
Signing time: Fri 26 Jun 2026 14:31:15 +0000
ROA not before: Fri 26 Jun 2026 14:31:10 +0000
ROA not after: Sat 01 Aug 2026 14:31:10 +0000
asID: 17561
IP address blocks: 45.198.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114861 (0x1c0ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 14:31:10 2026 GMT
Not After : Aug 1 14:31:10 2026 GMT
Subject: CN=6a3e8d33-9ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:a5:3f:10:aa:bd:49:55:bc:53:05:4c:a6:
ce:75:e8:58:83:2a:fa:1d:e2:0f:80:5e:14:82:7d:
ff:56:5b:0f:ba:1a:39:16:5e:98:bc:28:c6:9c:20:
06:29:4d:fa:ae:f7:c2:da:9f:d3:1a:ac:83:40:03:
f7:27:13:11:dc:ee:46:31:df:e7:cc:18:6b:db:72:
ac:a7:32:2b:38:41:73:31:02:9c:64:ad:2e:34:73:
97:eb:86:26:70:0a:f1:21:c6:3f:fe:49:ed:3b:86:
32:05:11:a5:df:a8:cf:8e:aa:d8:c2:90:7b:b4:b1:
35:d4:54:fc:40:8e:5a:3b:03:ef:6d:61:e5:94:09:
05:61:31:16:99:6f:bb:78:69:3f:ff:ff:80:aa:4b:
7b:b9:32:0c:1f:08:68:26:f6:34:4b:8d:fb:ba:e3:
0e:ad:68:28:36:ef:a8:22:78:95:5c:9a:bf:9c:87:
73:53:a8:d4:43:d0:bd:78:8e:f8:31:14:84:31:6b:
8b:d7:12:1b:60:82:32:d8:9b:49:9c:45:64:51:5e:
e4:a1:34:5e:2f:d8:47:c1:44:3a:2e:5f:f4:25:0d:
d8:11:fe:fd:92:3e:33:dd:94:10:42:fd:45:fb:3c:
a4:4a:dc:57:0a:ee:b7:33:37:ce:39:b6:36:5a:66:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:7E:56:C6:71:90:2F:DF:DF:6D:A8:D2:6B:8E:4F:4E:6A:6E:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF710910716B11F18BF446D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:48:aa:cb:78:e4:a1:61:88:c0:97:03:39:9e:56:59:ee:d4:
66:94:75:1a:41:da:6f:7a:c7:51:55:f5:22:bc:50:d4:8e:97:
50:6b:35:d4:5f:f3:e0:f0:fc:45:5f:6f:5e:32:b2:72:d2:dc:
32:d9:ad:38:8d:df:2e:19:e3:b5:64:96:32:d0:14:36:85:75:
06:89:d0:2f:fe:4f:a4:59:c5:d5:cb:18:bc:3e:62:f5:31:75:
d7:12:e2:39:c6:0c:26:1b:04:28:c6:79:56:95:6e:9f:94:29:
53:07:4c:cc:19:b5:c5:3a:7f:67:10:20:83:2b:41:9a:cf:fe:
79:fe:9b:71:ee:92:eb:c4:39:8c:fb:3e:03:ec:a0:0e:6e:0c:
c9:64:ca:b2:e2:0f:28:c3:8a:89:67:6e:05:6a:01:d9:8b:b6:
f9:52:ed:11:59:a0:9e:5d:f3:2a:30:1c:91:54:72:c1:9a:29:
ca:da:8a:8f:2f:0f:9e:ea:51:80:f5:87:c1:69:65:68:55:aa:
89:b8:a7:40:dd:7a:57:02:ac:ba:ee:6c:e3:27:72:b1:39:34:
87:ba:e8:75:2c:92:1d:ac:bf:dc:55:1f:a8:15:46:8b:09:ca:
b3:4e:a0:e1:34:2b:3a:85:20:f3:6a:9d:1a:40:c4:7c:1a:a8:
3f:1d:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:31 2026 by rpki-client