Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAC1575E785011F1BF4D0FC8CE1D38B0.roa
File: EAC1575E785011F1BF4D0FC8CE1D38B0.roa (raw, json)
Hash identifier: KYAWexq4EzuXzZM3+SpqSPt0RYvKWo+Yzyo4FOkD/xU=
Subject key identifier: BD:8B:0C:AD:51:07:7D:EA:4E:89:60:AE:AF:E9:58:90:68:04:F8:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C306
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAC1575E785011F1BF4D0FC8CE1D38B0.roa
Signing time: Sun 05 Jul 2026 09:07:16 +0000
ROA not before: Sun 05 Jul 2026 09:07:11 +0000
ROA not after: Sat 22 Aug 2026 09:07:11 +0000
asID: 401701
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115462 (0x1c306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 09:07:11 2026 GMT
Not After : Aug 22 09:07:11 2026 GMT
Subject: CN=6a4a1ec4-2d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:c4:fe:75:dd:ea:07:4b:ef:8f:04:4a:e8:
12:a9:24:2e:ad:1c:19:9b:bb:78:42:29:c6:cf:a0:
16:29:a5:38:c5:61:eb:1d:da:44:ba:90:fa:fa:73:
21:5d:89:0f:a1:b0:b9:24:f5:49:33:47:b9:53:4e:
c6:4b:bf:34:4b:55:e4:f7:35:bd:83:a1:06:f7:d2:
1e:ae:60:5a:d1:16:08:b0:5c:f5:5e:6b:0a:70:c2:
c7:d7:43:3e:62:a8:53:6b:11:0d:75:0e:14:6c:a8:
ec:f0:c1:99:f9:82:79:a6:36:39:19:c7:29:e4:90:
c1:55:99:c9:43:04:5d:7a:2c:d1:cf:c3:0f:79:46:
f6:a5:9b:1b:6b:81:3f:a5:1b:0e:ca:20:9a:d7:79:
e5:87:f6:77:a3:1d:b3:1b:73:9b:c7:81:8b:af:69:
7d:26:60:dd:71:f4:98:8e:7a:e9:a4:d2:28:6a:94:
da:e9:a5:c8:4d:48:60:78:fa:42:69:e5:28:56:7d:
17:53:15:88:5d:3b:26:f1:91:08:c0:7f:a0:41:7e:
c2:b4:3d:48:38:51:77:3d:9a:68:a8:d3:77:39:9b:
04:d6:07:03:17:f8:92:90:05:b5:aa:d7:96:69:8b:
32:76:02:18:3e:23:0d:d1:b8:a3:7e:af:76:7a:9d:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:0C:AD:51:07:7D:EA:4E:89:60:AE:AF:E9:58:90:68:04:F8:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAC1575E785011F1BF4D0FC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
84:1e:65:39:6c:38:28:98:c4:f5:bf:0f:8f:0b:ba:ad:7e:a7:
a2:af:24:a6:4e:db:69:4f:6c:e2:fb:87:7c:1b:1a:98:f7:17:
94:d8:15:20:96:38:49:8d:b3:b4:31:f9:96:8d:b7:30:0d:7c:
eb:f2:33:40:c0:5e:d1:0e:93:a7:a5:86:bf:3a:3c:53:fe:6f:
d6:44:9a:8d:ff:c4:9f:26:5a:c9:f3:50:61:43:87:f7:a6:70:
5b:22:d8:bd:c9:ac:e0:1f:b3:77:49:b2:cb:f3:80:a4:d7:73:
8b:ea:03:d2:b2:78:39:af:92:63:b8:20:73:a1:11:a2:03:8b:
c9:b7:87:c3:c7:86:98:2d:90:d6:d8:63:22:c2:0d:17:f8:ae:
0a:59:45:01:da:0f:5a:07:b1:ae:45:6d:78:66:6d:f3:23:8d:
15:93:15:e3:ce:80:9a:17:a3:9a:d9:fa:51:23:22:96:ba:89:
09:15:bb:ac:e9:53:bf:19:46:ec:68:ce:5b:37:01:81:b3:2c:
a3:6c:ea:4b:73:00:e1:91:b5:dc:1f:c7:3a:c8:ce:67:45:77:
92:67:7a:d1:49:6b:9d:2d:60:dc:da:95:e7:06:d9:c9:5d:85:
26:2c:aa:35:9f:8f:11:4b:49:b0:f6:3d:05:88:9a:84:33:1a:
ea:5f:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:33 2026 by rpki-client