Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D224D97E7E0D11F1B8128DDACE1D38B0.roa
File: D224D97E7E0D11F1B8128DDACE1D38B0.roa (raw, json)
Hash identifier: kXdihTUTUZbI8JRBmb/X7BWXS3IYaO+sBQdAWFM1gxk=
Subject key identifier: 2B:C8:D1:51:D7:2A:E3:FD:6C:46:0D:C3:4C:B6:6E:9B:DA:4F:E0:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D224D97E7E0D11F1B8128DDACE1D38B0.roa
Signing time: Sun 12 Jul 2026 16:22:05 +0000
ROA not before: Sun 12 Jul 2026 16:22:01 +0000
ROA not after: Thu 12 Jul 2029 16:22:01 +0000
asID: 17561
IP address blocks: 45.206.10.0/24 maxlen: 24
45.206.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115896 (0x1c4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:22:01 2026 GMT
Not After : Jul 12 16:22:01 2029 GMT
Subject: CN=6a53bf2d-7ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:cd:2c:f3:63:ce:06:bc:7a:a3:00:43:e2:
68:44:cf:cf:33:44:65:0b:de:94:20:d4:be:24:40:
2d:85:b6:e3:a8:6f:5f:e1:56:ef:d9:12:40:dc:3f:
34:09:a9:de:b7:51:ea:88:f1:43:fa:8e:2d:58:16:
ce:1b:36:54:cf:a3:d1:1f:d7:d9:fe:6c:f5:fe:df:
ab:ca:29:80:0d:79:81:da:66:c4:b8:53:62:14:9b:
b1:8a:48:02:a2:18:34:a9:6f:14:5d:3f:22:42:47:
05:61:51:e7:fc:ee:c0:a4:08:35:ae:3b:6a:c7:cd:
01:26:47:8b:12:c3:fa:7d:77:30:96:ec:f1:7d:40:
ab:ed:91:dc:4b:76:6c:16:8e:b7:3c:66:2c:b8:5e:
5c:12:9f:02:83:60:65:7e:a9:ee:dd:6b:f5:6b:03:
9f:46:81:d5:ef:1a:00:7f:34:5d:7a:a9:31:58:f5:
90:92:49:0a:c6:dd:c5:ac:6b:af:d2:53:33:94:7d:
b5:71:6b:16:43:34:a5:21:ba:9d:93:90:3b:c7:44:
f8:2b:43:49:7b:d1:9c:91:84:7b:4a:02:44:86:31:
b2:e5:77:7a:f4:4e:70:c1:10:66:11:97:cc:b7:ea:
78:e6:5e:f8:26:f6:3e:40:dd:32:29:02:12:c1:98:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:D1:51:D7:2A:E3:FD:6C:46:0D:C3:4C:B6:6E:9B:DA:4F:E0:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D224D97E7E0D11F1B8128DDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.10.0/23
Signature Algorithm: sha256WithRSAEncryption
64:c9:c6:57:4c:f5:c2:6c:f9:df:71:bb:7b:5b:bc:10:32:e6:
7f:25:db:40:a4:31:be:e9:b6:f8:b3:23:b8:20:42:39:ca:a1:
c8:54:73:1f:92:9e:86:79:5e:02:8e:59:9f:5c:44:55:81:bf:
fd:69:0f:4d:0c:18:b3:b3:44:e2:f0:c0:24:35:a8:fb:4f:8c:
c5:7d:21:5b:ed:8b:15:30:09:5d:a7:9e:2b:e1:9f:b9:30:d5:
32:04:82:5f:99:80:34:35:7b:d2:4c:05:57:a2:f4:9f:42:a8:
18:7e:3d:69:b9:7d:af:17:bf:c8:e8:4d:0a:d8:4c:7d:55:29:
12:1a:30:29:a5:fe:55:9c:06:87:10:47:2b:2b:50:de:a7:18:
c2:42:04:96:9a:59:a4:85:c0:90:6e:54:f3:4e:50:59:db:6c:
c2:ca:07:11:66:36:af:89:bb:29:4d:4a:b7:f1:98:35:6c:ef:
16:ac:1e:b1:e0:aa:b8:c5:59:49:de:f0:b6:27:2e:e9:1e:1f:
db:2c:32:ce:6b:1b:95:83:83:01:61:f0:9d:b6:30:73:4d:2d:
5d:b3:ae:7e:51:c7:e8:e6:ef:90:cc:ef:65:f8:26:42:e8:68:
27:b6:27:0a:1d:7b:a2:75:5c:e7:72:b8:cc:9c:19:e3:9e:b9:
e6:d9:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:38 2026 by rpki-client