Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3D725E86FA511F18B9CF90ECF1D38B0.roa
File: F3D725E86FA511F18B9CF90ECF1D38B0.roa (raw, json)
Hash identifier: e5URkaiNEMgci45cL4w4Uh0ZKQx2Rzv3Q1TV5NY7vqg=
Subject key identifier: 08:82:3D:CB:77:30:3A:49:09:0B:6B:CD:C7:91:C0:55:35:D6:50:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C00A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3D725E86FA511F18B9CF90ECF1D38B0.roa
Signing time: Wed 24 Jun 2026 08:23:18 +0000
ROA not before: Wed 24 Jun 2026 08:23:13 +0000
ROA not after: Fri 31 Jul 2026 08:23:13 +0000
asID: 200758
IP address blocks: 45.198.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114698 (0x1c00a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 08:23:13 2026 GMT
Not After : Jul 31 08:23:13 2026 GMT
Subject: CN=6a3b93f6-4c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:7e:e9:a5:c1:1a:f8:48:f7:ee:ec:fe:81:
72:e2:9c:64:f6:3e:37:cc:ed:85:14:ea:89:11:d0:
d4:63:ed:ef:47:35:6e:47:ba:df:95:ca:c1:17:dd:
fb:74:3f:6c:4f:fb:24:88:f2:72:ed:3c:ed:21:96:
c2:79:20:3f:b3:be:31:9b:a2:08:6e:62:dd:8c:7c:
14:e9:da:10:e2:b9:98:c6:0d:7d:15:f7:d2:06:3f:
04:a1:23:4e:28:2e:d3:8a:d5:00:58:c7:71:58:f6:
2e:f6:27:15:fe:05:2e:a2:4b:45:43:57:49:76:cc:
cf:73:a5:80:10:20:91:b7:b0:21:ee:35:32:c2:a6:
e1:92:93:cb:d0:79:5f:68:63:1b:0e:8e:47:c6:cd:
f5:34:1f:ce:c8:a3:33:7e:e6:4a:2d:78:2c:34:22:
49:6d:29:e7:93:ad:1b:03:8d:52:50:8e:d0:34:6d:
75:8b:91:a0:0b:44:3d:2e:4b:6f:81:2a:63:01:28:
2d:b9:8a:5c:e8:fa:8b:21:dc:fa:8e:a3:01:73:28:
1c:da:2f:cb:c4:06:20:c4:e9:7c:25:e8:ea:2e:74:
04:37:62:66:d5:a4:6f:5a:17:93:50:d8:03:82:3f:
f6:ff:99:ce:92:b8:e4:24:59:71:37:39:3c:82:50:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:3D:CB:77:30:3A:49:09:0B:6B:CD:C7:91:C0:55:35:D6:50:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3D725E86FA511F18B9CF90ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d7:cc:de:3a:7a:6a:03:f4:11:51:99:dc:46:d4:56:86:c0:
6d:7b:74:94:ab:f1:94:43:03:00:ae:c4:b2:e8:98:00:23:52:
f5:c4:15:c6:9f:35:21:0d:d9:f5:90:bc:04:62:ea:9b:49:d4:
58:ca:37:82:7b:b2:f8:78:8e:63:60:aa:3b:06:5b:e3:2d:3f:
27:df:29:90:58:ef:55:bb:0b:e9:12:42:34:35:78:1d:ba:f3:
3b:ff:ae:7b:6d:0e:68:75:60:23:a0:13:28:2d:85:84:31:67:
6d:c5:2e:83:a6:da:f1:21:f2:21:7c:b1:ce:d4:0e:c7:f5:77:
36:ea:90:44:71:03:2d:79:a5:c9:ce:3a:ca:c2:f3:92:fc:51:
e4:e3:4a:ea:de:5c:3b:71:9c:3f:e2:ab:1c:10:90:59:98:83:
7c:c7:46:5e:7c:10:b4:b5:2c:50:e7:c0:df:0d:16:fb:ad:d9:
dd:71:f3:82:15:85:03:13:89:79:1c:6b:43:bd:e9:de:fa:7e:
7c:1c:23:82:fe:f5:86:0d:c1:ac:18:79:e3:e2:f0:df:12:52:
a1:f8:e5:85:fa:66:3c:31:92:b4:0f:2a:1f:76:3e:95:c3:45:
51:11:76:71:19:c8:2c:1f:19:d5:a4:2f:aa:fe:3d:61:be:4d:
75:e8:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:45 2026 by rpki-client