Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07F1EA0770A11F18B5210FCCE1D38B0.roa
File: C07F1EA0770A11F18B5210FCCE1D38B0.roa (raw, json)
Hash identifier: zADry9EE4g+101cKMyUxOgnmsfhqZKmlit04I/axXt4=
Subject key identifier: 82:0D:3A:29:AB:C9:2A:59:58:DE:E6:5E:8B:5D:2F:DC:A2:D0:BF:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07F1EA0770A11F18B5210FCCE1D38B0.roa
Signing time: Fri 03 Jul 2026 18:12:29 +0000
ROA not before: Fri 03 Jul 2026 18:12:24 +0000
ROA not after: Thu 03 Sep 2026 18:12:24 +0000
asID: 153517
IP address blocks: 45.194.20.0/23 maxlen: 24
45.194.20.0/24 maxlen: 24
45.194.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115388 (0x1c2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 18:12:24 2026 GMT
Not After : Sep 3 18:12:24 2026 GMT
Subject: CN=6a47fb8d-a972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:7f:29:6b:a3:74:46:f7:80:3a:dd:12:10:
1d:6a:18:8b:a1:88:e7:e3:86:f4:5b:e9:6e:61:c7:
73:2c:36:70:33:34:58:e5:f6:aa:66:56:45:45:00:
c2:35:8b:70:36:d7:50:6e:50:da:3f:4d:37:c1:f8:
84:ed:a7:af:cf:c9:7a:60:60:85:2e:27:0a:af:14:
91:79:7f:21:06:78:19:af:5f:57:88:a4:68:b9:27:
1e:6f:bd:dc:71:f3:73:85:2c:37:ee:69:43:34:1b:
7e:87:c2:24:d5:fd:b5:7e:c3:5e:e0:8a:51:ec:bc:
50:33:98:62:ea:4a:9b:5f:6c:df:25:47:03:94:0b:
13:bf:8c:9d:40:ae:5f:03:73:7c:da:22:fe:2d:b3:
c3:48:4c:8f:50:1d:13:ee:f2:92:9c:a0:fe:44:9b:
f5:b7:22:07:2c:10:98:5b:bd:b3:d4:a0:ff:06:86:
f9:e0:4f:0e:fb:0c:40:3a:33:9c:4e:81:b3:f1:39:
d1:ec:94:ea:83:10:04:3a:a1:94:7b:92:24:38:f1:
2e:54:99:74:8e:5e:18:7f:3e:dd:37:b4:1d:c9:e1:
c8:8b:1e:97:2c:a0:29:4d:3f:7f:a9:65:83:0b:9f:
06:55:85:97:05:6a:f4:84:ce:c7:eb:12:f7:9c:f8:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:3A:29:AB:C9:2A:59:58:DE:E6:5E:8B:5D:2F:DC:A2:D0:BF:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07F1EA0770A11F18B5210FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.20.0/23
Signature Algorithm: sha256WithRSAEncryption
18:2f:8d:a6:5a:24:11:24:35:d3:ff:3f:92:cb:9f:14:de:03:
46:82:43:bd:2c:c8:44:91:8d:35:ae:2d:8f:be:1d:5f:d6:9d:
06:dc:65:65:fa:32:1b:23:62:79:b8:05:57:fa:82:6a:83:0d:
0c:55:05:51:94:6f:8f:44:d1:2c:77:b0:f3:81:a7:28:bb:34:
b1:5f:ea:08:93:fe:e6:33:c4:96:8e:35:51:3d:4b:db:59:c0:
2e:c4:61:44:8a:1d:f5:1a:ac:12:5b:16:a9:5f:44:13:05:d6:
56:f4:3a:3d:7a:48:a2:0b:bb:40:22:f6:91:7a:6e:79:33:57:
32:83:3e:9a:4d:d2:f2:df:2d:ec:29:68:d5:b7:99:8e:0f:74:
34:75:e8:f0:ce:24:01:41:0d:d7:5c:e9:f7:8f:31:23:10:e0:
94:f8:86:ce:c8:49:ab:de:a8:f2:2a:74:ff:20:fc:fa:a8:ec:
2a:da:f9:75:09:9d:88:96:6c:27:99:f5:3d:a7:d3:21:1d:21:
c5:08:c6:6c:2c:b5:6b:d3:a7:6a:a1:86:d0:3c:55:8f:d1:31:
87:5b:6f:63:3a:08:f4:f1:bf:db:da:9d:22:8b:71:82:79:35:
07:4e:e8:41:de:b3:41:95:16:9d:32:aa:eb:e3:1f:05:86:cd:
7b:9b:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 02:46:31 2026 by rpki-client