Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/124E1EE885E811F18177CFF0CE1D38B0.roa
File: 124E1EE885E811F18177CFF0CE1D38B0.roa (raw, json)
Hash identifier: 6+jX10BaaNH8gZgdObdG7z2dDKEm7dRBs7W0Y7825O0=
Subject key identifier: 4C:3F:13:4B:39:EF:07:EF:80:80:43:81:CB:D9:8C:95:2E:39:3C:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C773
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/124E1EE885E811F18177CFF0CE1D38B0.roa
Signing time: Wed 22 Jul 2026 16:12:01 +0000
ROA not before: Wed 22 Jul 2026 16:11:57 +0000
ROA not after: Wed 09 Sep 2026 16:11:57 +0000
asID: 395793
IP address blocks: 45.192.227.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.5.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
45.196.194.0/23 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116595 (0x1c773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 16:11:57 2026 GMT
Not After : Sep 9 16:11:57 2026 GMT
Subject: CN=6a60ebd1-a84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:fa:a1:43:84:4d:3b:39:67:e6:86:af:6e:
68:e2:a5:2a:6a:0c:ac:8a:18:f3:19:09:1f:a5:f0:
5c:01:be:25:d2:ee:e0:e7:8c:69:5b:a6:3e:d1:60:
d0:2e:58:82:ec:a3:8f:db:66:45:57:6b:ed:70:2d:
9c:e6:e3:9a:87:1f:61:42:3f:03:74:89:17:dc:50:
58:88:13:cc:d4:84:6c:1e:9a:59:cb:90:54:76:07:
fa:1b:50:6c:0b:9a:16:62:a5:66:ce:95:9e:d4:17:
cf:ca:b9:b6:50:70:d8:c5:da:3d:62:fc:c3:59:e8:
46:c4:28:c9:32:ec:83:75:ba:8c:2c:d0:dc:fe:b7:
19:ae:29:dc:e0:b8:82:a7:b1:d7:25:b9:fd:cf:86:
59:f4:38:62:bb:13:f9:73:b0:29:05:b8:79:5d:a9:
bc:53:e8:d4:e0:d1:e2:b6:c1:c7:c9:ea:b1:e4:8a:
46:b8:c7:80:b5:40:8c:3f:bf:e9:3e:06:68:0a:be:
d8:59:c8:3b:18:5f:cd:a4:c1:d7:a8:3a:96:e1:50:
ca:64:79:53:d9:74:aa:58:7f:78:57:09:24:e0:13:
dc:5e:54:6e:65:50:73:fb:9c:9b:01:27:01:c8:69:
e6:98:6f:7c:cd:bd:45:3a:9f:b1:9c:47:4c:32:74:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3F:13:4B:39:EF:07:EF:80:80:43:81:CB:D9:8C:95:2E:39:3C:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/124E1EE885E811F18177CFF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.227.0/24
45.194.4.0/23
45.195.63.0/24
45.196.194.0/23
45.196.225.0-45.196.227.255
45.201.32.0/24
45.204.147.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d9:64:e3:9f:b2:65:27:18:b5:bc:ec:25:6d:e8:3a:82:7e:
fc:59:85:df:9a:89:a1:6d:e6:c8:bb:24:9c:3d:81:c7:d3:89:
b9:49:70:f0:ff:fc:9a:37:d3:0f:5a:42:1f:fb:3e:fd:c0:8a:
11:ef:8a:74:e5:78:d2:5a:9c:47:b7:a2:26:f4:c7:c4:5d:6b:
5f:ce:87:94:01:2a:eb:bc:8b:4d:e5:71:6a:05:e1:32:ce:83:
70:67:cd:5d:c8:61:e1:dd:4c:c9:55:c2:c2:e1:d2:86:35:5c:
e8:34:fa:9b:c5:70:7c:23:5a:82:96:04:6c:db:03:85:98:24:
3d:0c:8b:62:e4:6f:e2:58:a0:35:4e:47:16:5b:83:2a:ac:2f:
27:f3:75:8c:42:8b:4f:fe:7b:7f:9d:7c:4a:3e:2d:f7:99:de:
1b:bc:d0:e4:a1:6c:d4:6f:9d:2f:99:94:81:72:20:ee:b5:f5:
6c:de:e5:f7:f6:03:ac:b0:75:5c:5b:2f:43:c9:57:92:e5:48:
5e:d4:6b:8d:38:8f:13:d2:0a:5c:71:86:95:85:47:09:e8:4c:
07:f4:d5:32:15:d0:db:c1:b9:8d:70:32:04:f1:26:c2:62:4e:
38:a7:72:66:f7:13:cc:66:24:d6:69:8a:77:70:16:5a:92:85:
2c:18:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:39 2026 by rpki-client