Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1DCF60869A811F1A241E0DBCE1D38B0.roa
File: F1DCF60869A811F1A241E0DBCE1D38B0.roa (raw, json)
Hash identifier: p36mML+RxcwCnw2JRyRmNAEks28338SKGJe9hVuQ2Lo=
Subject key identifier: C0:68:DA:F0:23:6A:08:0F:FC:E2:7A:07:2C:B8:B9:41:7F:CD:3D:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1DCF60869A811F1A241E0DBCE1D38B0.roa
Signing time: Tue 16 Jun 2026 17:29:36 +0000
ROA not before: Tue 16 Jun 2026 17:29:31 +0000
ROA not after: Fri 15 Jun 2029 17:29:31 +0000
asID: 17561
IP address blocks: 45.199.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114255 (0x1be4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 17:29:31 2026 GMT
Not After : Jun 15 17:29:31 2029 GMT
Subject: CN=6a318800-9740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:b7:6b:a7:ce:65:3e:bf:5d:e2:2b:c1:86:
cd:74:70:60:4e:a6:ca:6e:1c:f5:4b:5f:e4:51:fc:
eb:10:bb:e5:48:2d:c0:38:4e:2f:b4:e7:9f:b7:09:
90:15:a4:35:a9:73:cf:2f:ef:22:e0:49:a5:35:06:
aa:76:fc:89:29:a4:c3:f1:fd:01:d7:67:11:f8:3e:
74:38:92:4c:0a:88:7f:58:22:92:85:6e:e5:fb:b8:
7b:42:03:16:dc:f9:c0:a3:fa:f0:b5:57:72:e0:9b:
79:21:3c:bd:e4:dd:06:02:58:54:cf:6d:13:30:e9:
f7:c1:dd:1a:d3:05:ef:81:5b:e5:1e:35:47:79:4c:
31:3c:ae:1d:f0:9f:be:96:05:00:aa:d7:d4:2f:53:
05:24:af:68:61:2d:ab:66:d7:f6:9a:af:66:1c:44:
bf:1f:79:03:6b:d2:16:cb:5f:5b:95:2f:d1:c7:7b:
6c:43:9e:a7:df:9f:f9:9a:9e:f5:56:4e:72:28:ce:
10:86:65:ad:1b:5e:bc:3b:94:5f:43:ce:5f:3e:c2:
89:4f:97:89:6c:c2:7c:02:76:c7:27:a7:99:55:95:
bf:f8:e9:be:f4:3a:34:22:d2:6b:fc:2b:14:08:ff:
a9:34:6b:9b:d0:d3:24:3c:ef:e7:1c:8f:c0:36:12:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:DA:F0:23:6A:08:0F:FC:E2:7A:07:2C:B8:B9:41:7F:CD:3D:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1DCF60869A811F1A241E0DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:21:75:25:42:77:fb:00:5b:58:98:42:a9:1a:a9:cb:1c:1a:
49:63:1d:7b:b6:9e:b3:16:4c:9f:c6:6e:3a:80:46:62:e5:70:
da:51:39:4b:75:90:70:2d:1e:48:7b:6e:7f:8b:0d:07:78:90:
86:d7:24:2f:61:b2:c0:a1:83:c2:e5:a3:a0:32:2a:e0:8d:ab:
a0:cf:4a:df:47:ab:3d:06:f3:2e:fa:2b:40:8d:29:9a:d1:62:
6d:02:98:49:96:0d:9c:0e:d0:ac:fb:8a:82:58:37:1e:ce:db:
0e:37:62:cf:b6:91:e8:c4:41:02:6b:5b:75:f5:35:3e:1a:87:
67:7f:32:2b:5b:23:ce:7a:6f:6c:88:fb:d2:eb:8b:e0:d0:7f:
ce:9b:c8:e6:45:ea:63:55:da:e4:0a:1e:8d:2e:5e:82:84:c0:
53:18:7e:3d:cb:b2:ff:35:c0:49:fd:a1:ea:83:1d:c6:dc:b0:
37:e7:ab:94:93:28:53:18:6b:0b:31:bf:3c:fd:77:bf:8a:62:
af:62:59:06:45:f6:87:b1:36:62:07:1f:8d:15:6c:59:7d:d9:
21:8b:60:43:2e:16:f2:3f:b3:08:13:01:2d:de:14:e3:5f:41:
b2:93:79:3b:9d:08:4b:66:d9:b7:6b:4c:8d:71:9d:bb:5d:41:
f3:4f:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:30 2026 by rpki-client