Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4D5BEA8699811F18B6405FBCE1D38B0.roa
File: B4D5BEA8699811F18B6405FBCE1D38B0.roa (raw, json)
Hash identifier: l/6MDKxKYS0RSFNiXKThCcv9lqLpkzUGyo7RcDhRPdw=
Subject key identifier: 26:15:64:92:E0:D9:ED:B8:54:84:7A:F5:FF:68:4B:6B:1D:95:1E:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4D5BEA8699811F18B6405FBCE1D38B0.roa
Signing time: Tue 16 Jun 2026 15:33:22 +0000
ROA not before: Tue 16 Jun 2026 15:33:17 +0000
ROA not after: Sat 18 Jul 2026 15:33:17 +0000
asID: 197574
IP address blocks: 45.194.66.0/24 maxlen: 24
45.198.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Jul 2026 15:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114222 (0x1be2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 15:33:17 2026 GMT
Not After : Jul 18 15:33:17 2026 GMT
Subject: CN=6a316cc2-471c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:ad:4e:0c:eb:f2:6a:a2:0c:57:3a:54:92:
55:7d:27:3b:7b:57:c4:52:2b:cb:b6:32:8b:c7:3b:
f1:ef:08:b7:45:cb:11:67:a3:7d:dc:ec:be:15:52:
09:f5:cc:6e:69:f5:ef:69:03:5d:a5:9b:be:dc:be:
c5:82:e7:49:37:b3:b6:d5:54:53:2a:cc:c3:46:b4:
c2:ee:c5:22:ae:d5:cd:a9:4f:41:13:a3:8d:83:ec:
2f:64:a9:77:98:cb:9b:47:80:c8:75:b5:0b:cb:74:
8f:4a:73:db:7e:a6:8f:c3:33:72:0b:bf:77:ef:13:
0b:c0:9b:a4:ff:1f:e6:38:f8:d7:ee:ad:ed:c4:32:
5b:25:5c:4f:6c:0b:d5:1a:5f:f6:06:73:7b:33:15:
1f:0c:6b:05:94:ea:f3:57:3c:7a:e6:d0:d2:84:e1:
9e:1f:6c:bf:77:1b:b7:a1:47:0b:c5:6e:13:58:db:
37:86:92:16:85:04:f9:e1:8a:38:c1:20:1c:33:80:
14:23:77:9e:69:61:b8:da:83:41:e9:d4:c8:77:f9:
f1:ff:d5:19:10:98:71:c3:41:05:44:82:f0:12:bc:
75:10:98:13:08:3f:69:c9:1d:63:4c:98:5d:e7:53:
45:b0:b5:93:3a:45:a7:ac:b2:a9:84:12:0d:bf:ad:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:64:92:E0:D9:ED:B8:54:84:7A:F5:FF:68:4B:6B:1D:95:1E:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4D5BEA8699811F18B6405FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.66.0/24
45.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a7:e8:25:4d:01:bf:48:ae:c6:22:d9:24:02:57:89:c5:e2:
8a:2f:00:c8:6c:a2:32:bc:20:43:17:3c:d8:3c:6e:dc:5e:e6:
6e:d1:36:81:b4:f3:64:fc:fc:29:ce:eb:0d:51:5f:93:67:d6:
d9:2d:e7:e5:ef:b3:ea:68:21:87:9e:e8:24:c3:c2:c2:76:9b:
e3:28:4e:40:a5:26:2e:27:c5:08:f9:bc:dc:43:48:13:f9:11:
ae:e4:60:d2:27:f2:94:2e:ec:03:2c:40:ca:e9:eb:33:67:a6:
1a:93:d7:bc:b4:10:76:5d:a6:7b:b6:80:71:5a:e6:3e:65:d3:
18:1a:64:6a:1d:b0:2a:26:3b:b1:de:c2:77:3f:a9:1d:84:cb:
56:4d:75:ca:5e:59:9a:cf:26:c0:aa:8f:de:b6:d8:7d:0c:61:
91:22:7a:d1:40:6f:fe:2a:b1:33:5f:8b:a1:f5:1b:a9:d5:70:
dd:b6:8d:c6:b0:f1:05:f7:e3:a4:e7:3a:da:95:eb:9a:f2:ab:
1c:f7:81:d6:77:9c:2c:af:88:02:c5:3e:a4:a9:80:4e:39:de:
73:67:24:a6:61:5f:ca:69:fb:82:82:79:b7:6f:98:24:2b:b3:
06:e4:26:eb:11:62:05:f4:d2:99:b7:af:82:6b:3f:ba:25:8b:
f5:e5:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:21 2026 by rpki-client