Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F18B6E6E7B6411F1B95B44B3CE1D38B0.roa
File: F18B6E6E7B6411F1B95B44B3CE1D38B0.roa (raw, json)
Hash identifier: kuBMb/6jd0OrdCKJrlNeN283p972IDAW4Tl/Fgu8D+8=
Subject key identifier: 9B:58:55:91:42:38:0B:43:14:98:87:01:ED:79:BB:33:D8:C2:2E:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F18B6E6E7B6411F1B95B44B3CE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:08:11 +0000
ROA not before: Thu 09 Jul 2026 07:08:06 +0000
ROA not after: Thu 13 Aug 2026 07:08:06 +0000
asID: 273980
IP address blocks: 45.192.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115665 (0x1c3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:08:06 2026 GMT
Not After : Aug 13 07:08:06 2026 GMT
Subject: CN=6a4f48db-f9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:92:b6:2f:78:af:d3:b9:11:ad:66:a5:88:
cf:6f:fa:ba:3f:7c:b6:7a:43:20:df:0d:27:81:cb:
96:f9:0e:a0:a6:fc:8b:28:be:b0:82:9b:2f:d8:8d:
8f:7c:1d:e7:3b:54:02:66:96:44:9a:d2:99:3b:74:
38:0a:3f:f6:af:c9:c9:f1:ca:46:85:29:f4:d9:43:
50:56:9f:92:5f:43:76:6f:d9:ef:32:ad:64:bb:9c:
50:33:34:82:12:60:9b:3a:1e:6b:1f:27:1e:5b:bb:
58:67:07:8a:23:f8:74:6a:6a:46:2e:78:17:47:7c:
00:2e:17:22:f1:f0:be:e6:5e:37:32:de:b1:a5:15:
0f:b6:93:35:15:0d:c8:9e:e1:4f:ba:e5:9f:ec:00:
95:5d:67:e3:66:f4:e0:60:6a:72:2b:6a:ee:eb:a6:
a1:06:85:ea:3d:3d:6a:20:5c:8e:ec:49:d2:3b:4c:
10:00:4f:8b:ec:d5:9b:6d:19:57:fc:40:99:7f:98:
02:b3:a7:e5:53:c2:10:df:5d:e5:f5:3f:03:7e:0d:
66:f8:82:58:2b:da:14:d9:f2:62:57:e0:61:9b:7a:
07:c4:7d:11:83:66:d6:20:8b:a3:3b:ad:cf:88:b0:
6f:9b:a4:ae:9e:16:6e:c7:a5:db:93:11:c1:f7:97:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:58:55:91:42:38:0B:43:14:98:87:01:ED:79:BB:33:D8:C2:2E:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F18B6E6E7B6411F1B95B44B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.3.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b7:e6:f1:eb:4c:4e:ca:18:9c:e1:b3:46:90:fa:09:08:d6:
62:4e:44:cb:6d:0f:3f:59:b8:80:6b:f2:ed:f9:fe:58:40:bb:
37:9c:a7:c2:fd:ea:be:4c:e8:4d:6d:62:59:7b:95:89:18:04:
08:a8:49:c7:a0:3f:9d:91:58:ff:28:d4:fa:72:03:4e:92:1a:
8c:c7:92:16:4c:0c:79:45:e1:c5:40:28:3a:7a:9e:6b:2b:df:
4b:34:0d:b0:cd:c6:20:63:f9:be:2b:c6:93:6a:b6:b7:83:a4:
89:08:fa:54:61:7d:91:21:03:f2:f1:25:35:db:e1:5c:9b:0f:
30:77:6e:1c:05:a7:a9:56:eb:c6:f3:65:5c:41:6b:ea:a9:fc:
d6:92:f7:09:15:9f:47:40:7f:8b:60:62:eb:50:cc:68:7d:42:
4a:c3:95:6f:44:ba:1f:7a:df:58:d0:21:2b:09:58:1d:cf:a9:
f1:41:b4:82:62:00:b3:e6:17:d8:d7:66:61:d2:5b:52:74:66:
1c:59:21:53:7d:2a:5f:09:4d:37:ac:4f:29:34:00:85:53:ca:
80:9e:80:0b:69:67:56:d8:cb:15:8b:71:e3:9e:f6:fd:66:3c:
4a:ba:f0:4d:6d:dd:06:f5:28:7c:d3:85:b2:b5:4b:cb:e0:5d:
c9:51:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:09 2026 by rpki-client