Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091629D4841611F19F2610DBCE1D38B0.roa
File: 091629D4841611F19F2610DBCE1D38B0.roa (raw, json)
Hash identifier: 5nwZzs81FjQB3rbknE1GhF7ngeLzXz5x/CdEZw1p3QQ=
Subject key identifier: C5:6C:AD:14:AE:F1:0C:2A:28:CA:55:6D:B3:B5:D6:01:83:68:D4:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C648
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091629D4841611F19F2610DBCE1D38B0.roa
Signing time: Mon 20 Jul 2026 08:36:00 +0000
ROA not before: Mon 20 Jul 2026 08:35:56 +0000
ROA not after: Thu 19 Jul 2029 08:35:56 +0000
asID: 17561
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116296 (0x1c648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 08:35:56 2026 GMT
Not After : Jul 19 08:35:56 2029 GMT
Subject: CN=6a5dddf0-1a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:3f:30:ef:6a:92:e8:8c:28:4f:3d:40:68:
a0:31:86:c0:ef:3d:f3:09:6c:e3:ff:f3:5c:4d:f9:
92:31:c0:9a:e9:f4:49:60:81:55:99:2a:d4:e0:44:
c5:46:ef:be:5f:bb:6e:1d:d1:4e:2e:68:b5:46:0f:
a7:11:58:4e:42:1e:b3:1e:7b:8e:43:b2:2d:bb:75:
68:73:d1:54:6f:1b:0c:b3:01:56:d7:89:c4:dd:34:
7c:a9:b9:91:0c:d9:2d:74:c6:c2:3b:a1:43:52:62:
cf:38:55:cb:dc:ac:0c:55:3e:11:c5:fe:dd:c2:49:
e1:f0:54:d2:89:fd:3a:15:6e:6f:3e:d9:4e:dd:15:
8e:ea:f1:83:53:d2:13:0a:f7:4a:7e:6a:70:35:89:
55:09:37:70:7b:b1:a8:fb:77:53:ca:28:21:5f:7a:
00:d7:38:e7:bb:d2:ae:a8:24:2e:4a:50:94:5a:dd:
46:db:42:88:e2:9e:80:ed:e7:d0:00:ba:93:68:64:
d1:b4:ff:ef:f9:c2:66:8d:df:fb:3d:0e:83:26:20:
e1:25:55:eb:df:04:38:9d:65:68:4e:1f:3a:aa:1a:
e0:6f:e5:af:db:b2:97:b2:c8:ac:4a:81:31:37:a3:
2a:87:91:b2:76:03:b4:fe:b4:51:be:bd:3a:f0:d2:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:AD:14:AE:F1:0C:2A:28:CA:55:6D:B3:B5:D6:01:83:68:D4:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091629D4841611F19F2610DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e9:f5:ed:26:fc:b3:d0:98:36:cb:d9:31:14:8c:c5:f9:75:
e5:ac:f9:ac:d0:7f:5d:93:b0:32:43:fd:81:06:20:22:e7:06:
dc:e6:b7:13:91:9a:04:8b:78:dd:fb:1a:7b:05:39:58:39:24:
17:dc:c5:00:94:35:8c:f6:e4:c8:4c:00:bc:3c:9e:b1:15:de:
73:5d:cd:61:5a:2d:37:50:72:85:96:03:f4:43:c1:c2:1f:de:
0b:1a:4b:bd:3d:dc:97:63:97:4d:25:7c:70:a0:ab:14:da:67:
57:15:24:13:aa:29:a2:9e:c8:48:12:ef:43:8c:b9:36:1c:ed:
5a:a5:48:d4:03:1d:a6:2d:0d:6e:1d:e1:52:51:a6:a2:2c:91:
57:ab:13:44:83:b1:7e:69:55:9a:cf:fd:8c:07:7f:84:c7:94:
86:a6:b4:97:31:c4:22:44:ce:4a:c0:09:ca:10:9e:7c:0b:2a:
10:ea:60:df:af:22:48:13:82:07:9e:8b:16:52:6f:71:27:58:
51:f5:4c:00:5b:ac:5a:76:97:35:8b:ee:95:24:1b:50:ea:77:
cf:2e:b0:82:27:ac:43:b1:28:5c:e4:59:ea:0e:63:aa:08:c1:
83:8c:ec:a2:7c:bb:8e:f7:59:a7:6d:79:d2:57:a3:e5:56:7d:
b3:36:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:39:01 2026 by rpki-client