Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DFE721A842211F1AFA4A2A6CE1D38B0.roa
File: 0DFE721A842211F1AFA4A2A6CE1D38B0.roa (raw, json)
Hash identifier: iVzV08H1lKZbWIsJ1tLK/BjADDx0sKPACYeJG113fCc=
Subject key identifier: AE:9B:4A:19:C7:8D:1F:12:03:26:A0:4E:46:5E:98:41:D1:39:F6:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C656
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DFE721A842211F1AFA4A2A6CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:02:03 +0000
ROA not before: Mon 20 Jul 2026 10:01:59 +0000
ROA not after: Sun 23 Aug 2026 10:01:59 +0000
asID: 17497
IP address blocks: 45.192.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116310 (0x1c656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 10:01:59 2026 GMT
Not After : Aug 23 10:01:59 2026 GMT
Subject: CN=6a5df21b-1a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:1b:e8:8f:b9:7f:c3:ed:1d:61:83:41:8e:
40:83:0c:36:14:ca:44:96:18:f8:8a:40:9d:0b:47:
1f:24:ac:cc:a6:35:a4:06:b1:55:6f:8f:4b:2b:51:
c6:4f:c2:42:d0:a9:d9:7f:a8:7d:5a:b3:33:2a:0e:
37:d4:40:18:b5:b2:ae:62:bf:df:86:5a:67:83:72:
49:5d:55:35:ea:04:4e:98:5d:f8:7c:3c:4f:3a:6e:
77:8a:63:47:f2:d7:20:22:f0:50:9c:1c:f3:16:d3:
0a:9b:ac:a9:49:44:d9:fd:32:dc:86:24:35:1b:1e:
5b:07:6a:71:71:78:e0:46:d8:75:04:14:12:62:1f:
b5:58:8a:51:5b:d4:c1:50:b6:0f:62:63:9c:89:3f:
8f:92:bc:f2:81:4f:42:90:f3:2c:83:d6:60:0f:fd:
f0:f3:82:00:bc:4f:58:8c:9e:23:83:67:e4:8c:fb:
45:71:a8:6e:c8:43:89:fe:5d:53:96:d4:8c:aa:35:
4f:e8:e1:1d:d5:2c:ad:cc:b6:89:b9:eb:ca:60:6f:
14:be:f8:07:92:45:c6:88:45:49:4d:ce:c1:b9:4f:
a7:68:f7:16:33:85:45:2b:f1:c7:43:85:32:61:59:
3a:58:98:22:a2:43:e3:86:60:3e:b0:83:58:f3:b6:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:4A:19:C7:8D:1F:12:03:26:A0:4E:46:5E:98:41:D1:39:F6:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DFE721A842211F1AFA4A2A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.132.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b1:68:6c:b0:55:c2:48:fe:4c:19:99:f4:48:8d:a1:97:be:
91:c3:d3:71:7b:25:8f:6b:74:3b:ac:03:a4:86:83:c4:7c:d3:
79:bc:71:95:6e:5a:3f:b4:39:33:5b:ef:33:5f:76:80:5d:07:
b8:86:7a:1f:ce:0d:68:0e:11:34:79:7f:56:74:e9:ae:cf:cf:
4e:a5:28:52:2b:44:fd:0c:e9:df:e5:c4:3e:33:b3:5d:f6:f2:
a3:a8:03:79:96:1c:74:94:cd:1f:88:2b:59:cf:9e:54:3b:5d:
ef:81:b4:ae:f0:65:72:4c:e0:3c:53:b4:fb:65:f4:5c:9b:c7:
20:2c:ca:b4:27:e5:db:f4:59:d5:42:08:93:10:83:61:d8:9d:
d4:0e:17:07:3e:11:95:0e:13:3e:2e:7c:e2:82:c4:a1:d4:10:
1b:f3:95:58:ec:37:46:e4:af:d2:3f:f8:83:ad:8e:df:4e:b2:
6b:65:a9:af:46:fb:ab:ab:f3:0e:62:30:e9:ec:85:9f:87:08:
eb:1b:b0:a5:fa:91:e0:d1:59:cf:b1:81:ae:5d:b6:1b:47:e9:
d5:6d:bc:ca:f4:eb:fa:08:f6:f1:26:9d:c0:35:05:dc:c8:f6:
10:94:e5:c3:9a:57:fd:91:aa:22:dd:a3:6c:e6:19:a2:7d:0a:
7c:6a:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:11 2026 by rpki-client