Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C97C667F7611F1B0F989EFCE1D38B0.roa
File: C4C97C667F7611F1B0F989EFCE1D38B0.roa (raw, json)
Hash identifier: hmRDM6kQ6CvKkf8Nfc1bjJfbuCssM9C64QZNOk3N4yI=
Subject key identifier: 69:93:B5:7B:A7:62:96:A8:50:2C:D2:37:63:17:58:9C:D8:58:24:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C519
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C97C667F7611F1B0F989EFCE1D38B0.roa
Signing time: Tue 14 Jul 2026 11:25:51 +0000
ROA not before: Tue 14 Jul 2026 11:25:47 +0000
ROA not after: Fri 21 Aug 2026 11:25:47 +0000
asID: 52468
IP address blocks: 45.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115993 (0x1c519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:25:47 2026 GMT
Not After : Aug 21 11:25:47 2026 GMT
Subject: CN=6a561cbf-7574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:fb:79:22:ea:75:ab:bc:e4:2b:15:22:3d:
ab:a5:08:e4:c4:98:67:9c:4a:c3:0b:e8:66:ce:95:
50:06:ec:0f:15:b6:be:7a:a5:59:8f:2d:2a:c1:57:
d9:d5:fa:35:77:cc:6b:02:b7:2e:fc:e0:af:48:c5:
42:52:58:35:dd:8c:fc:77:7b:3d:0b:ee:1d:b3:c8:
d3:49:b6:01:c2:5a:71:40:f3:ab:63:5b:0d:46:08:
2e:1a:c9:17:55:8c:d0:d9:34:10:14:4b:5f:05:5d:
eb:d1:d9:67:f4:3a:e6:5f:c2:26:7b:8f:71:75:95:
75:dd:f8:0e:1d:d5:5e:c1:30:f4:4c:45:b4:ac:43:
85:7f:f0:3e:40:b7:93:42:06:d2:97:ec:00:0c:4d:
e7:77:43:3d:da:d0:b6:52:34:0a:a9:04:9a:19:03:
a3:4a:c5:0b:5a:6e:95:a5:fb:a6:61:d5:27:cd:ff:
dd:ff:b4:f9:5b:1e:0b:85:d1:88:d9:2d:8c:89:dd:
30:7a:1f:a6:15:5b:9d:3c:94:3b:c4:ad:11:22:6d:
c1:69:de:4b:53:da:a7:18:10:0f:56:f2:37:6c:20:
46:cb:77:01:b5:e7:88:52:f0:df:8f:00:d9:06:71:
39:e4:d5:67:d3:cb:81:27:46:d3:74:4d:d9:90:80:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:B5:7B:A7:62:96:A8:50:2C:D2:37:63:17:58:9C:D8:58:24:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4C97C667F7611F1B0F989EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d7:f6:cc:55:f6:16:bb:d7:08:aa:35:02:64:92:54:31:3a:
2b:ca:90:d3:83:64:3d:01:54:dc:a9:36:00:60:61:10:67:3e:
51:99:dc:08:d5:dd:9c:71:6f:10:4e:3f:e7:7f:49:ba:d6:da:
a7:dd:cf:a0:d5:98:9f:4b:9f:29:e9:0a:d2:c4:d0:c4:90:ae:
98:28:1c:62:70:49:af:f3:bc:ce:56:c9:bd:87:84:e1:d4:66:
32:5c:09:c8:fd:60:ce:89:2a:95:1a:ff:e7:23:9b:fe:54:e2:
b6:46:c0:f0:a4:3a:2b:84:39:58:2d:92:0b:ce:e2:c6:7a:ff:
f2:e0:e8:ff:4c:07:1e:17:14:2a:ef:79:44:29:53:5f:cd:62:
15:2b:5a:dd:28:df:7e:b3:6f:66:36:d7:66:e3:74:e2:2a:77:
1f:1b:eb:21:80:33:e0:0d:80:92:0c:12:e3:fa:7a:03:fb:2d:
b7:94:2e:5e:f6:ef:2c:40:50:55:c3:e4:c1:02:26:6b:01:42:
0e:9e:56:85:51:67:c8:50:2f:ed:dd:70:fa:59:82:ed:58:90:
f3:d3:72:d2:75:97:fc:16:25:e6:cd:7f:63:0f:f8:d6:3d:96:
36:11:50:bb:08:ae:50:01:62:09:9b:33:6b:ed:c4:8a:e3:13:
66:55:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:17 2026 by rpki-client