Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C28DFFE2694311F195F262FFCE1D38B0.roa
File: C28DFFE2694311F195F262FFCE1D38B0.roa (raw, json)
Hash identifier: fpR/b722djO0X1L0qG2s7GwYUNAvKU0aB/bk2T8JoKM=
Subject key identifier: 36:BC:80:4A:36:4E:21:17:7F:31:93:E6:FE:50:6D:10:42:50:68:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C28DFFE2694311F195F262FFCE1D38B0.roa
Signing time: Tue 16 Jun 2026 05:25:18 +0000
ROA not before: Tue 16 Jun 2026 05:25:13 +0000
ROA not after: Tue 21 Jul 2026 05:25:13 +0000
asID: 271875
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114122 (0x1bdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 05:25:13 2026 GMT
Not After : Jul 21 05:25:13 2026 GMT
Subject: CN=6a30de3d-4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:fd:47:70:a9:ef:3f:34:8c:0a:ce:92:52:
ae:cf:32:e2:21:fc:6c:eb:d9:cd:db:f5:a8:ad:c2:
44:da:d5:7f:f8:0d:05:86:7b:e0:fb:7c:5d:b6:cc:
4d:b8:e2:61:fa:c8:92:09:49:02:b7:28:51:4a:14:
38:75:fc:46:78:6f:c1:bb:ca:bf:7e:7a:fb:44:ab:
05:f7:b4:2d:26:56:ed:54:55:98:92:43:fc:e1:2b:
8a:bf:fa:22:f8:75:81:de:5e:ba:ed:d6:44:01:de:
7c:1d:4a:e2:33:00:2d:5f:3d:fc:8c:6e:a3:8e:e5:
83:e2:af:fa:cf:2f:82:74:14:84:e8:85:49:e3:55:
8d:70:fa:a6:af:91:3d:77:ef:01:6b:3a:39:cb:ed:
f2:81:5f:de:34:cf:21:49:03:23:8b:57:d2:47:89:
11:10:f7:39:dd:25:42:55:b7:d9:97:e2:de:de:41:
52:e0:1e:c1:b2:f0:00:40:e5:c0:13:de:d2:0b:52:
b2:70:03:5e:85:4f:0f:67:42:56:da:98:51:24:59:
da:cd:5f:04:df:70:51:d8:9c:32:6b:1f:09:a3:cc:
5c:8a:f5:dd:79:ed:64:8e:36:d5:02:78:57:a1:e2:
c6:98:a8:19:e3:9c:c8:4e:d0:7f:8d:4e:92:fc:96:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BC:80:4A:36:4E:21:17:7F:31:93:E6:FE:50:6D:10:42:50:68:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C28DFFE2694311F195F262FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
31:79:e3:81:d5:12:88:fb:9d:3e:00:e4:f8:41:16:e2:c2:da:
6f:1f:0c:41:85:bc:33:39:e3:42:94:8a:04:04:32:b2:01:8c:
8e:04:63:7c:2c:49:bd:34:2e:b9:5f:f7:59:00:38:cd:75:b6:
98:aa:14:75:a9:09:18:87:1f:95:a4:a6:52:72:76:1b:ca:be:
15:f2:74:f1:4d:40:48:ae:d4:af:6b:e3:3c:1a:b7:84:1a:4b:
1f:61:31:40:15:c9:18:1e:92:5b:6c:68:ec:b0:4c:a3:7b:7a:
dc:a0:ee:38:cb:e1:98:86:f4:cd:15:8d:a7:23:2e:e9:5d:f9:
35:90:86:4d:f1:39:9c:a4:1e:25:ce:0c:af:81:2f:58:f5:a7:
f3:f3:b0:45:cb:a3:2d:56:d8:ba:b0:05:67:ee:cb:27:07:13:
33:78:3a:1f:ff:ff:f9:d6:58:6f:79:6c:63:ba:a8:c2:c4:e0:
0a:10:30:e8:fc:ab:1b:44:4c:78:ed:61:19:ac:0d:c3:83:41:
23:8a:32:70:11:4e:33:63:88:c6:a9:60:20:70:e7:70:7d:7b:
f2:e6:fa:84:30:b7:44:1e:dd:19:67:47:69:a5:86:e6:05:d9:
79:2a:c2:09:0a:8f:4c:de:c0:81:60:4e:bc:44:3c:80:0e:09:
95:e6:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:40 2026 by rpki-client