Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07A8E2A64D5911F1918CECACCE1D38B0.roa
File: 07A8E2A64D5911F1918CECACCE1D38B0.roa (raw, json)
Hash identifier: L7ft8LLN5nAKmpmbT09tqWXhJJdNy9wf3IRK2sB4FVU=
Subject key identifier: 78:19:40:2C:76:99:13:61:43:BD:11:EF:69:8A:0D:76:E5:F1:0F:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07A8E2A64D5911F1918CECACCE1D38B0.roa
Signing time: Mon 11 May 2026 16:47:01 +0000
ROA not before: Mon 11 May 2026 16:46:56 +0000
ROA not after: Mon 18 May 2026 16:46:56 +0000
asID: 9294
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111552 (0x1b3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 16:46:56 2026 GMT
Not After : May 18 16:46:56 2026 GMT
Subject: CN=6a020805-5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:a2:0a:ba:c5:7b:c7:26:d2:2a:ec:d6:6a:
af:7f:18:4a:a4:a2:0e:4d:4a:b2:7f:11:5b:b0:c2:
1f:a4:bd:1c:d6:01:71:47:b5:05:12:9e:c7:16:b2:
e7:63:38:d1:aa:ee:5c:4d:8e:b7:cd:bd:ee:03:94:
21:75:a5:72:c7:8f:7d:9f:f0:39:9c:e6:4b:06:4f:
5e:e1:08:c6:57:bc:05:c9:41:5c:51:c4:c4:04:84:
b3:c2:14:05:60:fc:fc:f1:3e:f1:83:85:98:0b:81:
ee:b4:34:21:d1:b5:8b:55:7c:c8:db:6b:7f:44:be:
be:0f:d5:69:95:ca:63:65:0a:21:72:c8:c8:8b:89:
0e:45:cd:d0:b9:bf:50:80:bd:5a:8c:c7:10:d1:ae:
d3:b5:a4:88:bc:b6:a5:6a:59:a2:35:06:74:27:5f:
2b:82:6a:3a:88:d2:61:49:60:95:26:f0:e4:ff:68:
13:37:c7:b8:46:91:2e:d1:af:71:66:db:ec:18:a8:
ed:8e:f3:25:b8:c7:7d:95:40:54:45:0d:6f:dd:4c:
82:40:e9:36:8d:e6:c7:66:a8:70:5b:74:bb:70:7f:
73:82:4d:5b:57:4b:ec:2e:57:ca:a0:f3:dd:a6:f5:
39:ad:bc:7e:c2:19:4c:db:15:15:c2:09:99:c1:5c:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:19:40:2C:76:99:13:61:43:BD:11:EF:69:8A:0D:76:E5:F1:0F:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07A8E2A64D5911F1918CECACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
af:ed:35:ed:11:ff:cc:23:43:be:3d:2c:c3:6a:df:ce:ec:0b:
05:64:8b:bf:1e:10:2d:1d:95:f7:b0:1e:63:ae:22:e0:57:3c:
2e:f7:83:44:b7:19:48:a5:b4:62:65:1b:93:ec:06:f8:3f:59:
64:7d:54:58:ad:f3:5f:9b:51:97:c8:bb:6d:b8:23:9c:06:4b:
b6:94:8a:ea:4b:e9:d6:13:c7:3a:c6:df:79:f6:00:98:de:08:
01:17:c1:e6:ac:61:42:2c:4f:0c:9f:cc:66:45:ec:95:67:e5:
31:c6:b8:36:75:83:e1:ae:f7:fb:26:8e:09:41:9c:ba:07:f6:
76:5f:57:8c:e4:e5:25:99:ae:72:1d:dc:12:fd:e4:19:e1:98:
fa:49:33:bc:ff:f9:20:ee:d5:5a:04:27:b4:a6:94:e2:3b:02:
e9:46:aa:49:dc:0a:ca:b2:4a:f8:de:69:88:ef:3e:2b:a4:e6:
3e:cc:75:22:ad:c3:ad:1f:ca:bb:3c:a3:be:55:a7:9c:85:2d:
4b:bf:a9:84:05:88:b6:4f:36:42:4a:a1:d1:42:69:38:db:e1:
92:36:ae:07:ee:8a:31:2c:5e:b1:de:1f:7c:78:e1:c3:21:77:
ab:e3:73:24:5c:d0:0d:2c:00:15:c6:9f:dd:4c:26:ef:eb:95:
66:50:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:57 2026 by rpki-client