Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE72BF3C7F5B11F1AFCBC5D1CE1D38B0.roa
File: BE72BF3C7F5B11F1AFCBC5D1CE1D38B0.roa (raw, json)
Hash identifier: oatJ+un2ujlW4gZX88Ab9TXrGj+ISMhsgrq+jCuiLdM=
Subject key identifier: 4D:EC:BF:C7:08:9B:E6:76:11:31:B4:C4:E2:C9:C8:F0:57:16:E0:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE72BF3C7F5B11F1AFCBC5D1CE1D38B0.roa
Signing time: Tue 14 Jul 2026 08:12:24 +0000
ROA not before: Tue 14 Jul 2026 08:12:19 +0000
ROA not after: Mon 17 Aug 2026 08:12:19 +0000
asID: 22773
IP address blocks: 45.194.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115955 (0x1c4f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 08:12:19 2026 GMT
Not After : Aug 17 08:12:19 2026 GMT
Subject: CN=6a55ef68-22f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:6b:8a:38:10:d5:e3:ee:21:f9:ac:26:53:
84:8e:4b:e6:29:97:74:de:ba:3f:fd:b8:82:12:13:
d1:78:89:d8:3b:aa:6a:f7:9f:a4:38:cd:3e:0d:29:
39:d5:55:50:cf:90:cd:9e:e5:91:12:a5:1f:7d:15:
4f:8d:81:88:41:72:42:4a:36:83:62:6b:42:ba:a2:
7b:b9:fa:76:37:0f:58:a4:57:33:01:dc:83:fa:b8:
23:00:04:b9:1e:91:5a:13:8f:ec:72:1d:13:98:3a:
06:ae:73:ae:76:5c:0d:7d:1a:8d:54:85:00:fe:3d:
24:a1:25:b8:4d:df:4f:8e:42:32:94:9e:2f:8d:ea:
8f:97:9e:9e:b2:01:ea:80:6f:f4:e2:df:b8:99:1c:
f5:b3:47:f7:41:51:2d:b1:4f:31:ad:2d:e3:05:57:
dc:2b:8d:75:d4:b8:70:bf:5a:ff:1f:4a:3d:99:79:
15:27:b4:1a:2c:52:20:c2:98:af:5f:30:c2:a4:c0:
97:4c:c1:df:df:bb:e8:55:5d:ff:ad:98:f9:a7:bf:
a7:f9:34:ad:3f:31:72:d2:cc:6a:63:a9:88:d8:0f:
30:3f:9f:fc:02:9c:b7:3f:09:05:53:72:89:71:69:
c3:52:a4:1a:cd:57:4b:95:e4:aa:90:16:b0:b2:79:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:BF:C7:08:9B:E6:76:11:31:B4:C4:E2:C9:C8:F0:57:16:E0:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE72BF3C7F5B11F1AFCBC5D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:55:1e:3c:54:8e:60:a1:90:37:9b:5a:ee:79:24:8b:0f:7c:
6b:cf:d6:46:4f:d4:46:90:90:50:20:da:7b:08:b2:d1:8e:40:
d0:63:5d:75:94:5d:2b:19:d1:4d:43:70:cf:32:c9:51:ef:8e:
62:bd:d4:c0:a8:60:a6:85:10:13:09:e1:5d:28:b2:24:1c:cf:
ba:69:aa:fd:87:d3:0e:e3:52:89:55:a0:ba:86:cc:af:8b:57:
09:22:1c:d9:d4:ba:ea:42:d3:60:ed:45:89:31:70:01:66:5d:
b2:ed:65:74:96:04:ca:47:a8:3d:81:e6:a5:45:d8:5c:52:35:
50:52:ab:7c:61:fd:02:50:bd:62:58:24:5c:39:65:43:f3:10:
06:f3:d6:84:8b:1d:49:ad:5a:65:99:a9:f1:30:af:e9:3e:0b:
18:e9:ea:6a:6b:f8:96:17:97:12:dd:42:2f:20:b9:23:d4:86:
9f:f7:51:aa:95:66:02:4a:59:3c:3c:13:f8:2a:6d:2f:33:97:
32:98:4d:7d:fc:75:36:a8:8a:7f:ff:6c:a4:cb:67:c1:23:05:
7d:bc:ba:bd:94:9a:c5:5d:22:04:00:75:c9:c4:de:8c:1d:01:
f7:07:95:21:4b:64:18:ad:33:e3:01:44:b0:99:df:22:dd:ad:
99:05:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:40 2026 by rpki-client