Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC0D67706D4A11F198B769C2CE1D38B0.roa
File: FC0D67706D4A11F198B769C2CE1D38B0.roa (raw, json)
Hash identifier: e9RQ3evrh6wx43/Gl/4XPZRJS+jZvDfaZFzLu9UYxgY=
Subject key identifier: 76:C7:7A:A7:F4:30:28:90:E1:C0:90:B2:19:B6:D1:A6:09:C7:B5:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC0D67706D4A11F198B769C2CE1D38B0.roa
Signing time: Sun 21 Jun 2026 08:27:05 +0000
ROA not before: Sun 21 Jun 2026 08:27:00 +0000
ROA not after: Tue 21 Jul 2026 08:27:00 +0000
asID: 214238
IP address blocks: 45.192.59.0/24 maxlen: 24
45.192.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114502 (0x1bf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:27:00 2026 GMT
Not After : Jul 21 08:27:00 2026 GMT
Subject: CN=6a37a059-7761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:4d:94:05:d8:34:09:45:a8:ae:ac:9c:5c:
f9:6c:5d:42:90:3b:d2:70:49:07:4e:42:06:47:84:
48:e3:dc:05:c6:c6:d9:ac:24:08:bf:51:de:27:eb:
34:dd:27:88:b8:63:62:be:3f:20:7e:7a:00:c5:c1:
37:80:a3:31:65:5b:c8:33:24:ca:d7:aa:aa:36:f1:
49:7e:68:6f:d4:99:0b:13:b4:e2:2b:36:52:f5:28:
45:6f:09:b0:70:11:4a:87:e7:15:09:a8:0a:0e:b1:
2c:05:ce:d9:15:25:83:75:62:a6:e8:1c:ec:f2:f7:
fd:16:1f:fc:d4:0f:f1:75:37:bf:4b:26:71:f0:8a:
a4:21:28:01:3f:f7:d3:3d:b8:90:cd:6e:7a:24:e7:
de:68:96:fb:47:b0:03:25:ec:d6:ce:51:63:1c:f1:
3b:64:86:2b:87:0f:7b:ee:be:3e:3f:e9:75:3b:9e:
d5:94:ee:4b:de:83:c0:cf:ab:7c:3f:60:5d:70:9d:
f2:e9:76:9e:fb:1f:f6:af:96:0f:f4:b8:d5:af:c5:
19:ee:0f:73:72:2d:af:55:e0:90:fb:95:4e:07:90:
e5:89:71:c2:96:f1:28:41:d7:8c:d8:d0:89:54:47:
90:25:37:7b:95:95:4c:ca:16:bc:a7:d5:fa:a4:9c:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:7A:A7:F4:30:28:90:E1:C0:90:B2:19:B6:D1:A6:09:C7:B5:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC0D67706D4A11F198B769C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.59.0/24
45.192.63.0/24
Signature Algorithm: sha256WithRSAEncryption
41:45:d6:d7:6b:72:dc:f9:00:6e:ec:20:03:b8:36:07:db:53:
d2:4b:2d:0b:3a:0a:e2:90:25:7c:89:82:f5:1d:72:9a:f4:15:
14:b9:5f:25:f1:ed:a4:de:58:84:45:f1:78:1c:91:02:b5:3f:
45:2c:a9:28:c9:09:aa:8c:e4:62:b5:38:0f:72:df:32:b9:0b:
0e:ac:f9:47:c7:7c:03:39:9d:d9:b0:55:9c:74:a4:27:fe:7b:
48:64:7c:3b:90:6d:da:06:a1:43:0f:5d:7d:ca:26:d3:cf:0b:
4f:ba:b0:65:3f:2b:97:7f:6b:de:92:64:4b:65:b8:7b:f1:d5:
81:f8:d0:f4:84:ea:10:81:fb:03:b8:d7:a5:9d:eb:19:0a:81:
b9:dc:7b:e0:82:39:fa:ac:19:43:bc:8f:e1:17:6f:e4:a1:f6:
74:1d:70:95:fd:1f:78:5d:83:15:69:82:7d:84:99:c9:5b:14:
f3:06:40:52:34:c1:87:18:68:2d:1b:a8:e1:33:a7:50:da:4d:
f2:bc:e6:f2:d1:a6:d2:bd:4f:da:44:d1:b1:7a:cd:43:a8:9e:
f3:04:75:75:aa:93:8c:d9:01:e9:5d:1b:59:df:ea:d3:19:a6:
22:e2:96:f6:27:03:77:71:52:e3:40:b1:bd:14:cd:f8:48:11:
a1:e8:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:05 2026 by rpki-client