Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFBD87BA778E11F182AF26AACE1D38B0.roa
File: CFBD87BA778E11F182AF26AACE1D38B0.roa (raw, json)
Hash identifier: iN3xYcQ56Q2I3+dxs6WN7hJKqTLbKkZZFIgENPsVa3I=
Subject key identifier: CB:CD:86:B5:E7:78:0D:20:57:D7:AA:F7:51:10:38:EB:4C:E1:F2:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFBD87BA778E11F182AF26AACE1D38B0.roa
Signing time: Sat 04 Jul 2026 09:57:48 +0000
ROA not before: Sat 04 Jul 2026 09:57:42 +0000
ROA not after: Mon 10 Aug 2026 09:57:42 +0000
asID: 63139
IP address blocks: 45.197.70.0/24 maxlen: 24
45.197.71.0/24 maxlen: 24
45.197.72.0/24 maxlen: 24
45.197.73.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115417 (0x1c2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 09:57:42 2026 GMT
Not After : Aug 10 09:57:42 2026 GMT
Subject: CN=6a48d91c-46c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:96:f3:a9:1c:c6:78:b8:03:4d:e9:d1:9c:
fd:eb:81:97:ad:3c:0f:23:c2:29:01:70:e0:4a:6a:
83:05:b1:46:ac:4d:8b:42:30:33:ae:8d:d0:46:ab:
b6:4e:59:b7:40:b6:a2:28:10:d5:f4:48:74:07:0c:
8c:72:98:0e:7d:81:09:8e:e6:08:3c:65:61:14:b0:
6b:52:fc:be:d1:7b:16:66:94:cc:a8:47:70:ba:4c:
18:dc:7d:16:21:77:9d:d8:18:e1:70:32:c3:f0:98:
a0:46:b5:6b:51:eb:4c:69:92:41:65:93:6b:83:e2:
9b:a5:1f:ad:aa:52:98:55:50:37:1c:fc:f3:37:35:
8e:0c:a4:42:03:12:d2:e2:17:57:df:f2:5c:59:5d:
44:3d:89:d0:9c:6c:37:5b:a3:51:54:60:fc:8c:05:
d4:e0:05:0f:c8:f5:22:63:17:98:fa:ba:30:9e:6b:
30:a3:c8:96:8f:ed:ea:b4:9d:96:c7:27:12:d1:e7:
11:8a:35:ac:2e:ef:62:31:c5:a5:0c:8f:12:cb:7c:
de:a0:dc:bf:41:92:e6:ec:d6:12:e9:16:48:85:f2:
6e:23:e7:af:61:19:fc:60:d7:6d:40:f5:56:17:84:
57:bc:eb:ed:f4:ed:1f:ca:a3:af:7b:25:61:ac:c5:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:86:B5:E7:78:0D:20:57:D7:AA:F7:51:10:38:EB:4C:E1:F2:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFBD87BA778E11F182AF26AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.70.0-45.197.74.255
Signature Algorithm: sha256WithRSAEncryption
3a:15:27:9d:3d:74:67:6c:c3:86:9c:73:12:8c:36:36:ec:45:
13:3e:31:bc:b0:2c:83:72:cf:cd:91:cc:c4:79:da:24:c2:cf:
2d:c4:cf:fd:6c:19:e1:b7:54:7c:e5:a5:1f:38:9d:51:8d:4d:
6a:c1:3b:df:2c:dd:0f:9a:04:8f:37:ef:eb:4e:67:8a:74:02:
ce:7d:53:5d:0e:1c:5d:0c:d9:07:aa:a4:58:61:85:77:09:9e:
77:14:27:58:dd:92:fb:e5:1a:f5:b5:fd:3d:dc:95:d0:d2:bd:
4b:cc:f0:41:96:84:e5:52:8d:58:6f:1b:68:70:64:90:bf:9b:
60:b1:ae:bf:f7:be:5e:30:a1:c6:b9:bd:ef:12:ac:57:96:d3:
7b:f8:28:4c:a2:62:fc:c1:04:8b:39:11:91:8c:4d:29:cf:97:
54:50:3d:eb:1b:49:9d:75:c3:aa:35:75:dc:c7:6c:69:34:99:
e5:43:69:f8:ba:b1:79:c9:e7:cf:66:18:98:31:7e:81:0c:cf:
9a:eb:72:2e:32:d4:86:3d:b7:5f:3c:54:09:4d:0f:4f:6e:9f:
42:9e:95:f2:c5:d4:00:cb:22:f1:55:f2:a9:41:36:b3:e9:3a:
b6:92:4b:3b:3c:29:52:ab:ff:f8:4a:72:4f:17:2c:22:2c:b2:
be:99:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:38 2026 by rpki-client