Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD4358A872F811F1963718C2CE1D38B0.roa
File: FD4358A872F811F1963718C2CE1D38B0.roa (raw, json)
Hash identifier: Fle3wPcmhdrkL6P5xxOOeluOuiTIf+fR6+P3aqsOt44=
Subject key identifier: DA:7B:B8:EA:CA:BE:1E:0A:48:DF:17:8E:14:B6:AD:41:C3:F0:E2:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C153
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD4358A872F811F1963718C2CE1D38B0.roa
Signing time: Sun 28 Jun 2026 13:55:15 +0000
ROA not before: Sun 28 Jun 2026 13:55:10 +0000
ROA not after: Tue 04 Aug 2026 13:55:10 +0000
asID: 202662
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115027 (0x1c153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:55:10 2026 GMT
Not After : Aug 4 13:55:10 2026 GMT
Subject: CN=6a4127c3-8e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:28:9a:f5:4f:04:2d:c8:a8:92:2a:6e:f6:
02:de:2a:ba:94:19:e9:59:4a:ed:3d:ee:40:36:5e:
75:8e:0a:0c:22:8d:75:a0:27:da:19:3d:35:5e:ee:
24:da:26:f9:03:d0:2b:cd:a9:70:88:52:fe:e1:a8:
21:6b:34:68:fc:d7:cf:3c:d6:c1:e3:c3:09:85:bb:
bb:98:d7:1a:fc:ed:e1:ad:69:f9:bc:e0:ec:d4:2d:
80:45:4c:2c:47:c5:2d:2e:ba:2e:2e:27:b0:c3:bd:
25:c7:d7:0f:d4:be:1f:22:84:77:de:12:ac:09:39:
bc:16:c0:7e:d3:8b:31:7a:bf:fc:bf:d8:7b:32:d3:
17:fe:43:9a:be:13:79:2c:7a:a6:ef:80:bf:78:9c:
e9:ea:2b:19:ae:a8:1b:49:c0:d6:42:f2:12:1f:72:
d8:d1:57:21:bb:21:4d:2e:78:0c:6b:25:29:73:c1:
47:fe:a6:ab:08:4b:71:6f:45:62:79:9a:11:b6:e5:
3f:c1:5e:ad:f5:95:ed:a6:bf:73:6f:8c:88:f2:28:
bb:73:fa:f2:37:48:8b:ee:3d:8e:17:56:c3:e9:9e:
14:7f:76:b8:c9:6c:0a:59:19:7b:26:6a:5b:03:f2:
b3:12:f5:0b:f6:03:c0:e1:eb:27:e9:a8:9b:2c:d0:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:B8:EA:CA:BE:1E:0A:48:DF:17:8E:14:B6:AD:41:C3:F0:E2:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD4358A872F811F1963718C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d8:03:18:d1:6e:cb:f3:e4:b7:a3:30:35:cc:42:41:cf:25:
da:a2:2d:1e:52:52:6b:81:49:a4:d2:f5:5e:af:17:45:cd:ac:
e9:7d:10:48:13:d9:ef:ec:61:ac:07:fd:7a:00:71:32:36:eb:
13:54:45:25:8c:0c:ef:ba:36:66:4d:2a:63:e7:07:d8:ea:85:
0c:68:c5:6c:80:82:8a:bf:b8:21:70:36:b9:c7:bb:8f:6a:0b:
29:f3:de:31:08:18:e1:5f:31:59:0f:c6:60:10:f1:76:0b:58:
3f:21:cb:ea:11:6a:13:c4:9b:f6:cb:a2:3f:6b:12:b1:41:38:
a8:12:f5:b2:a4:6f:7f:d3:0d:01:e9:62:91:26:a9:d3:4b:ef:
22:96:41:3b:74:bd:b6:84:bf:49:61:3b:4a:1e:4d:96:6a:39:
37:91:81:f8:76:f2:7b:15:13:3a:e8:67:fa:bc:bb:41:c6:4f:
d8:48:62:14:c1:fc:70:c9:85:02:a0:56:a9:ca:3f:80:a4:a3:
b4:a0:56:55:70:fe:1d:6e:ce:e0:d1:93:4a:85:b3:59:d0:bc:
8a:da:9d:54:56:7b:16:0f:82:d6:d3:d1:d5:e6:6f:63:a3:ab:
f7:9b:db:ab:07:d5:4e:99:91:15:52:a1:19:2f:9a:cd:b0:de:
b7:5f:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:15 2026 by rpki-client