Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2DB6107B6711F18063A2C3CE1D38B0.roa
File: EA2DB6107B6711F18063A2C3CE1D38B0.roa (raw, json)
Hash identifier: j+jfGMvtsxc5Q4ekWnvM4zx66v3l6UgkYNuCGXsy8J0=
Subject key identifier: B2:5B:91:36:E0:F1:FA:5A:1F:32:D5:A9:49:D7:9A:39:1A:97:D6:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2DB6107B6711F18063A2C3CE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:29:27 +0000
ROA not before: Thu 09 Jul 2026 07:29:22 +0000
ROA not after: Sat 15 Aug 2026 07:29:22 +0000
asID: 152711
IP address blocks: 45.202.64.0/24 maxlen: 24
45.202.65.0/24 maxlen: 24
45.202.66.0/24 maxlen: 24
45.202.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115681 (0x1c3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:29:22 2026 GMT
Not After : Aug 15 07:29:22 2026 GMT
Subject: CN=6a4f4dd7-c750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:20:86:35:ec:1d:99:3b:e9:7a:66:cf:2a:
93:08:29:c7:27:80:2a:35:99:35:6b:ef:98:8a:11:
a8:f9:ab:94:4e:58:05:2f:77:da:c5:95:5a:86:1b:
1f:4a:d9:3e:1f:be:bb:63:4a:90:19:d9:8c:8d:87:
34:28:95:37:80:15:0c:54:38:53:db:fa:5a:cd:87:
2c:67:b1:dc:0f:76:a5:1d:fe:7a:e1:b3:0d:4f:20:
e4:2e:89:5f:79:02:72:18:26:f0:9d:b6:c5:42:1e:
9b:52:a9:2e:f0:ed:3c:0b:ab:d7:03:55:33:5c:80:
5c:e9:73:05:a7:7b:72:ca:ee:a3:62:78:03:28:18:
45:76:cc:6d:8c:27:8d:a8:64:60:84:2a:c3:13:e7:
37:e8:42:2e:4f:e3:0d:59:ba:77:0c:2f:70:0e:79:
03:17:63:d5:1e:3d:64:c5:6b:ec:97:14:24:e6:8b:
45:64:71:a1:81:66:36:c8:b5:8c:74:de:99:13:9b:
1e:17:ab:95:ab:1c:ef:56:e7:1a:b9:ba:59:35:f0:
d8:45:e5:59:96:13:4f:d2:34:40:1b:27:88:20:d3:
b0:a9:db:67:c4:82:c4:89:01:64:c5:f3:e6:6e:bd:
37:b2:3e:fe:da:ff:70:d7:9f:9a:88:23:5a:77:c6:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:91:36:E0:F1:FA:5A:1F:32:D5:A9:49:D7:9A:39:1A:97:D6:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA2DB6107B6711F18063A2C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d2:ce:9a:07:33:6a:7b:e0:a6:dc:c7:5e:6b:5f:fb:39:20:
4b:3c:33:89:1f:0e:00:c3:65:b0:27:89:df:11:2d:a3:95:7e:
d4:c3:92:b0:b2:8e:47:78:45:2f:57:a3:05:7f:a1:38:0d:68:
4c:a0:53:53:fb:c7:63:20:1d:82:07:dd:e6:20:09:e0:65:79:
c4:09:eb:b5:c1:53:24:6d:4c:7d:7a:ae:f3:22:2f:14:eb:11:
a0:b2:46:1e:a8:26:4b:b0:54:e2:85:29:2d:d7:0c:46:83:04:
15:b4:97:2d:f9:7a:53:86:0b:7c:e5:a9:57:f8:66:28:11:81:
9a:67:90:d0:be:46:87:90:6d:b5:83:4c:ea:ec:84:31:b3:78:
92:42:9b:3a:16:9c:86:8f:7a:d1:bf:34:85:34:3b:61:a7:0d:
e4:fc:6b:25:e0:e3:dc:6f:3e:a6:0b:ac:28:8f:e1:63:58:1f:
dc:85:38:92:70:ee:51:4f:07:eb:79:0f:4c:78:09:2f:12:9b:
89:ac:6d:bc:91:c1:96:41:bd:16:f7:27:9e:6f:c2:79:7b:b1:
c2:7d:21:8d:83:86:ac:50:f4:a8:0e:20:de:3c:67:54:a1:0d:
76:d5:4e:b5:91:75:bd:15:b9:11:b1:b1:c4:1e:f8:a9:68:63:
bb:9c:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:42 2026 by rpki-client