Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4BCDC408E5111F1A9F238D9CE1D38B0.roa
File: E4BCDC408E5111F1A9F238D9CE1D38B0.roa (raw, json)
Hash identifier: ktooyu8OMcfQ84HuJDvAwLOPj32JoCozhbn9oYF79GY=
Subject key identifier: 97:A2:DE:86:0B:70:AF:38:C0:1F:45:A5:17:92:2E:D1:43:4F:DD:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C92F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4BCDC408E5111F1A9F238D9CE1D38B0.roa
Signing time: Sun 02 Aug 2026 09:09:41 +0000
ROA not before: Sun 02 Aug 2026 09:09:37 +0000
ROA not after: Wed 16 Sep 2026 09:09:37 +0000
asID: 401701
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117039 (0x1c92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 09:09:37 2026 GMT
Not After : Sep 16 09:09:37 2026 GMT
Subject: CN=6a6f0955-af6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:99:19:2f:6e:41:4c:5b:7b:b1:ad:fc:ce:
13:de:d2:8f:8c:5c:f3:22:d8:99:e3:2d:93:12:99:
b2:4a:9f:43:10:20:94:09:63:89:59:e1:34:98:46:
24:6b:2e:58:30:2d:5f:7d:a9:da:28:3e:b6:62:a9:
fd:52:0c:c0:b4:84:5c:42:99:74:fe:0c:40:b9:19:
71:16:2a:5b:9e:29:da:26:ff:f2:6b:c0:bf:09:9f:
58:cc:2c:38:c7:48:b2:63:fc:c6:37:a9:43:cc:d6:
36:52:58:73:17:57:a5:1c:4f:14:df:ad:66:d7:49:
e3:48:74:f9:9b:64:64:ae:39:17:49:2b:c9:4a:1e:
da:5b:32:70:e0:9f:53:d6:ae:f7:5e:51:7c:bc:49:
b9:57:9e:09:ba:0c:d3:6f:6c:e3:c7:2e:30:b6:dd:
b7:83:10:4c:59:01:fe:4f:ff:ba:d4:5e:78:9d:6d:
28:be:15:eb:0e:17:6c:5b:c3:5f:9a:4b:26:80:e9:
88:92:f3:70:0d:7b:6c:83:6b:b2:f1:d2:f8:ba:ed:
2b:c3:2f:68:58:02:83:07:ed:4f:49:4c:a5:a1:ec:
23:c7:99:16:a6:0c:da:15:de:12:09:54:8c:7b:74:
ed:fa:04:5b:e5:08:32:aa:dd:d0:6e:db:cf:96:2d:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:DE:86:0B:70:AF:38:C0:1F:45:A5:17:92:2E:D1:43:4F:DD:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4BCDC408E5111F1A9F238D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:58:83:52:31:fc:8f:6d:94:50:f0:04:51:fb:a3:34:1b:7f:
97:5f:32:fc:aa:e3:08:60:b8:dd:ef:10:fe:7b:52:49:58:47:
91:10:3a:04:be:00:02:70:ca:66:2c:38:4e:d3:b0:f8:fe:e4:
45:1e:3e:08:d8:84:85:dd:e6:9e:9b:46:4e:29:f0:b4:94:d6:
e7:44:b3:f8:e9:c1:b6:0d:91:84:0c:89:45:30:8c:e6:31:99:
7f:40:ab:1e:59:c5:24:46:48:3a:22:c5:95:df:87:b4:67:4a:
6c:e0:95:8e:25:ef:27:53:3d:12:f0:70:51:3d:6c:13:a1:4e:
4f:1d:97:90:d3:59:d1:2e:5a:1a:ec:f6:92:5c:1f:9e:9a:d7:
e5:38:6e:f0:97:d0:22:78:53:7c:98:ed:0a:f7:48:d5:30:40:
c0:8e:c8:8e:a1:89:2f:78:57:f1:df:67:97:f9:89:f4:ae:cd:
7c:d6:09:12:b2:c6:51:ce:e9:2c:1c:b2:0f:06:f5:75:b4:56:
f7:4a:0f:89:93:ec:71:48:9c:6c:a9:9c:3f:2f:17:9f:6e:3a:
33:b6:da:3a:bd:00:70:8a:58:02:2f:6e:d4:27:3b:47:da:66:
e3:1f:a3:78:30:07:ff:f1:6d:47:87:a1:aa:e1:5b:44:5f:55:
e0:44:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:06:30 2026 by rpki-client