Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F40CE4D284E811F1994794E2CE1D38B0.roa
File: F40CE4D284E811F1994794E2CE1D38B0.roa (raw, json)
Hash identifier: FSo+QethGguoO3ct7spxMfTej9MBfDIY30exQUjAX9w=
Subject key identifier: 1E:6E:0E:EF:9B:FF:CC:EB:8E:0D:3C:06:61:24:77:47:AA:23:21:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F40CE4D284E811F1994794E2CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:45:49 +0000
ROA not before: Tue 21 Jul 2026 09:45:45 +0000
ROA not after: Fri 28 Aug 2026 09:45:45 +0000
asID: 16125
IP address blocks: 45.194.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116426 (0x1c6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 09:45:45 2026 GMT
Not After : Aug 28 09:45:45 2026 GMT
Subject: CN=6a5f3fcd-0c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:c9:66:d0:51:e1:82:e4:f8:e6:6d:bc:8f:
5b:ea:ea:fb:c0:05:5f:ef:06:40:91:07:d8:1b:5d:
31:5b:03:69:fb:82:a8:54:a3:85:b6:48:1b:15:7c:
52:da:73:e8:58:cc:28:49:39:db:74:21:9b:bd:c8:
59:c4:92:13:64:11:d2:7c:1b:ed:62:a9:f9:84:21:
e7:2a:79:dc:c5:ae:6a:76:79:3e:ae:45:59:33:6d:
e0:bc:44:b0:dc:06:d8:cd:a5:4c:fe:6d:56:93:9e:
a4:16:57:23:03:25:00:78:97:63:fd:3e:f6:73:00:
95:fd:f4:ca:25:db:53:0f:67:1d:2a:35:4f:27:db:
6c:85:a6:54:27:44:11:81:bb:7a:25:cf:1c:86:76:
97:69:dc:9b:c4:cf:bd:c6:88:e2:a9:22:02:c9:43:
3e:d6:3c:0f:ab:89:d7:5c:18:0f:a3:93:86:63:ab:
29:23:7d:23:8b:18:d4:91:d4:a3:73:f4:32:31:c6:
42:7d:cb:a5:d3:fb:99:bf:06:84:89:26:2b:86:13:
45:ec:94:f7:69:91:88:a5:ef:83:1f:f6:5a:ed:4d:
53:b0:dd:80:c1:fb:47:87:bf:bc:1a:a2:58:e2:14:
9a:6a:7e:8d:fa:63:65:37:8f:a6:41:a6:af:cb:04:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:0E:EF:9B:FF:CC:EB:8E:0D:3C:06:61:24:77:47:AA:23:21:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F40CE4D284E811F1994794E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3c:d8:27:b9:6b:63:2d:c1:db:fa:ff:68:d6:4f:4a:36:3a:
fd:06:44:87:66:07:8d:87:80:4c:38:06:06:b4:8f:54:bd:04:
61:84:fb:21:8d:d3:83:fc:fe:d4:dd:7e:32:60:41:07:02:f2:
d3:7a:52:64:79:54:c7:8c:58:b7:1b:91:50:3a:c2:7a:23:e1:
0a:ee:bd:43:a9:2a:33:22:0f:7e:34:2e:4d:e9:c6:6e:92:62:
fb:29:42:11:74:b0:e8:15:62:c5:a6:be:a2:c3:f6:87:45:60:
78:52:ca:24:13:2c:d4:f2:ec:0a:d9:c7:55:95:f8:29:8d:c4:
33:ec:3d:86:c2:77:45:65:4b:6a:9d:ab:a6:50:32:5d:ce:24:
ba:c5:76:64:e2:7f:dc:59:dd:3b:67:be:5e:a2:96:46:1e:2b:
21:d5:6f:30:ec:e0:fc:6f:d9:eb:ec:bc:01:51:03:74:17:01:
ea:33:92:f9:98:c6:ad:b6:54:72:39:3b:60:60:2d:fb:c3:a3:
87:76:12:99:8a:a7:e8:15:d1:cd:68:c2:c2:99:2d:dd:84:03:
8b:d4:4e:dd:36:9f:86:f7:97:af:5e:31:3b:e9:46:e8:77:23:
9e:4f:9d:f1:ae:2e:47:c2:05:e6:09:77:0f:df:3e:28:66:e6:
f1:f3:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:11 2026 by rpki-client