Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D220EBFC700711F18A5A80D5CE1D38B0.roa
File: D220EBFC700711F18A5A80D5CE1D38B0.roa (raw, json)
Hash identifier: 0EVsFudR16lZy2rG8mvswBylQkDPA2HyOLVRQx7bw3I=
Subject key identifier: 34:84:2B:08:BC:1D:52:E4:13:91:16:02:A6:5E:80:75:08:76:E7:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C04F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D220EBFC700711F18A5A80D5CE1D38B0.roa
Signing time: Wed 24 Jun 2026 20:03:52 +0000
ROA not before: Wed 24 Jun 2026 20:03:47 +0000
ROA not after: Fri 24 Jul 2026 20:03:47 +0000
asID: 197574
IP address blocks: 45.192.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114767 (0x1c04f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 20:03:47 2026 GMT
Not After : Jul 24 20:03:47 2026 GMT
Subject: CN=6a3c3828-4fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:59:f4:fe:69:e8:b4:1c:bb:81:77:41:05:
cf:60:cf:1a:b5:d0:d0:42:86:bf:f2:b6:4c:a1:82:
79:c7:e1:f8:c9:23:ba:b8:82:b8:19:e8:ad:25:8d:
ac:3a:3b:5b:b8:23:57:bb:b0:3f:08:7e:cc:85:40:
f1:16:6c:73:c9:93:f1:53:16:12:ff:99:db:ac:ba:
04:5f:6c:91:e9:af:f5:fa:6a:fe:37:da:d1:ba:95:
68:96:d8:d2:ed:3a:7c:88:97:df:09:79:ff:65:ca:
29:41:bd:31:87:fa:a2:3e:96:f7:6d:ba:08:55:bc:
3a:cb:9d:83:ff:54:ae:2d:a4:24:0a:1e:a1:5f:69:
cc:6e:f6:86:1e:c8:66:2d:0a:7b:ef:29:e6:0c:95:
1c:38:10:f4:5b:3e:a5:b7:9e:51:75:85:b0:3a:82:
af:ab:a1:ba:c8:b0:42:21:42:75:c0:ab:8e:94:f7:
ec:6e:08:d0:90:10:4d:df:d9:9f:4d:62:d6:75:83:
05:9e:6e:6f:fb:e9:75:8c:81:fb:d9:09:a0:8b:88:
34:e4:20:4d:8c:ce:36:49:dd:93:50:1d:74:3f:e1:
8c:5a:d7:bb:f4:48:2e:fd:65:09:de:43:47:19:cc:
4f:28:ac:c8:d6:cb:78:06:11:07:c4:df:0e:1c:a5:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:2B:08:BC:1D:52:E4:13:91:16:02:A6:5E:80:75:08:76:E7:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D220EBFC700711F18A5A80D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1d:1a:9c:3e:77:dd:e3:6e:1f:d6:ff:fd:45:0a:99:56:fa:
a1:3b:d0:d2:f1:77:8c:78:55:b9:7c:62:90:09:ae:b8:2f:d9:
d7:bb:93:49:1f:9f:78:79:ea:48:5d:31:0c:c0:de:b8:c9:32:
34:40:cc:6c:62:f1:f4:0e:00:91:b1:7a:0e:f3:fc:47:2b:de:
32:3f:ca:76:d9:c8:4a:1b:c8:bd:89:ff:54:af:9f:84:d2:9e:
c5:46:ca:0b:fa:04:e9:31:2b:0b:59:f3:4d:cd:5d:84:2a:ad:
8d:26:fa:e8:4e:6b:cd:2c:38:8c:71:7d:ef:ae:2d:da:e4:7e:
b3:7d:70:3d:82:cc:c0:b0:4b:e5:73:f5:3f:70:f0:9e:1c:dd:
3b:27:51:c4:27:e0:81:50:57:c4:23:29:24:b3:18:7a:de:01:
7e:b3:89:03:52:9f:a7:d7:fa:f3:91:89:f8:64:0b:e8:4e:87:
f0:e7:4c:60:f4:fb:65:31:4c:a5:0b:93:7a:a6:3a:4a:6d:72:
47:e8:f6:23:85:6c:a1:b8:99:f1:e6:15:f6:64:b2:01:90:7f:
6c:9c:2a:5b:df:13:ae:65:a9:05:57:43:7f:68:df:da:c3:54:
c5:2c:84:9a:61:09:86:89:c9:81:09:29:17:8b:28:6a:b7:e3:
65:29:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:36 2026 by rpki-client