Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EAFC9468FB11F1801AD5B8CE1D38B0.roa
File: F4EAFC9468FB11F1801AD5B8CE1D38B0.roa (raw, json)
Hash identifier: HJOdEnHDbupcoFwm3gPrgtyY5eZhOPr5vtrQAx8O59A=
Subject key identifier: 7A:DE:7F:C1:F6:74:A3:B9:68:B2:18:E7:B3:8B:2E:93:7D:38:95:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BD90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EAFC9468FB11F1801AD5B8CE1D38B0.roa
Signing time: Mon 15 Jun 2026 20:51:18 +0000
ROA not before: Mon 15 Jun 2026 20:51:14 +0000
ROA not after: Sat 19 Jun 2027 20:51:14 +0000
asID: 62610
IP address blocks: 45.207.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114064 (0x1bd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 20:51:14 2026 GMT
Not After : Jun 19 20:51:14 2027 GMT
Subject: CN=6a3065c6-619b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:8c:e0:7f:92:a9:5e:36:3e:70:b8:77:25:
95:83:66:66:7c:eb:32:de:77:6c:69:3a:e5:66:02:
27:8b:e0:25:cc:b8:c3:d4:40:a5:00:fa:45:3d:ae:
b2:da:16:e8:13:b4:81:f9:1f:1b:71:db:05:39:59:
1f:55:fd:02:2f:4d:f6:50:b1:fe:13:45:cd:5c:3e:
fb:ad:70:55:fa:8b:6b:9e:ef:a0:87:56:c7:93:a1:
33:a1:3b:d3:53:9b:6b:76:ec:df:bc:77:92:cb:4b:
7b:94:b2:4c:88:22:9c:1b:88:29:a3:b3:a4:f4:7a:
67:66:c4:db:61:44:d0:cb:d3:cf:f0:87:7b:2e:f0:
e3:53:8b:18:56:9d:eb:68:3f:ce:64:3b:46:8c:ec:
19:2e:07:42:a9:4d:0d:61:2a:0e:df:51:b7:a1:cb:
0a:57:8e:19:f8:24:18:5b:ea:eb:6e:90:6e:77:00:
90:69:16:bd:ad:c2:24:6d:03:e9:67:6e:9c:1e:51:
d1:56:0e:f3:c9:39:fe:fc:15:be:fd:64:fb:57:26:
03:81:1f:aa:ef:a9:f0:f4:26:ca:7c:9f:ad:de:50:
18:47:11:87:a8:c9:57:57:3f:46:83:c7:46:db:40:
48:9c:51:83:07:b5:a8:bb:fc:46:c3:3a:cb:87:61:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:7F:C1:F6:74:A3:B9:68:B2:18:E7:B3:8B:2E:93:7D:38:95:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EAFC9468FB11F1801AD5B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c1:e6:66:98:01:7d:a1:a6:67:06:3d:8f:bd:55:63:93:bc:
55:a0:f5:70:93:3c:71:03:40:b3:83:10:81:24:49:bd:f1:f1:
10:c0:7d:4c:93:7d:ae:dd:19:20:ae:51:8f:81:a7:0a:c0:ad:
d4:34:d8:a0:73:65:e4:40:1e:85:cf:c7:ff:b9:11:a4:bc:a1:
17:ff:78:01:1e:0e:7b:c9:95:a4:60:4e:fc:4d:75:e4:1d:a6:
7f:90:be:5a:e4:b9:63:9d:f6:e6:70:d6:be:57:d6:86:82:54:
8f:cb:3f:36:a0:ea:50:1e:5a:2f:9f:45:e3:86:43:24:a2:eb:
77:98:1e:a4:a7:64:f0:ac:49:72:5a:79:5a:5b:6f:73:ea:0e:
f7:54:e2:5a:d8:44:5b:cb:83:2c:a0:54:7b:b7:59:1b:72:4b:
f2:48:8f:70:46:45:f7:23:f1:a9:54:7c:bc:93:75:bd:b1:13:
50:27:88:7e:37:08:15:a3:8a:9c:af:aa:d4:38:f6:55:0e:b2:
71:5e:f5:46:a0:f9:99:5d:98:de:ca:92:95:0c:ba:b6:19:56:
3b:f0:a0:a6:bd:03:aa:65:3b:44:a5:49:38:fb:f6:cb:55:7c:
7a:99:66:fa:37:06:3b:1b:02:79:49:e3:24:fd:d9:4f:a3:73:
89:6f:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:06 2026 by rpki-client