Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/213AD8D2850D11F1AAA8FFBBCE1D38B0.roa
File: 213AD8D2850D11F1AAA8FFBBCE1D38B0.roa (raw, json)
Hash identifier: AhfyKzFKUnQrJLNd79Teoc6ws3kWQpp0885BWpNMELY=
Subject key identifier: BA:4D:FE:66:23:21:EA:61:3F:61:9C:74:B8:69:FB:81:A8:8C:13:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C736
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/213AD8D2850D11F1AAA8FFBBCE1D38B0.roa
Signing time: Tue 21 Jul 2026 14:04:47 +0000
ROA not before: Tue 21 Jul 2026 14:04:43 +0000
ROA not after: Sun 23 Aug 2026 14:04:43 +0000
asID: 149940
IP address blocks: 45.198.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116534 (0x1c736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 14:04:43 2026 GMT
Not After : Aug 23 14:04:43 2026 GMT
Subject: CN=6a5f7c7f-e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:7a:43:5b:43:53:ca:7d:a6:b8:54:9c:82:
b7:8d:98:28:16:28:57:41:69:db:85:c5:fd:94:43:
9a:ef:cf:ae:64:73:43:95:d4:e2:12:72:0d:ce:b5:
c3:a9:31:97:5f:25:5f:06:25:44:e2:de:61:36:ce:
a7:6a:8b:8a:57:2c:f2:c3:7c:1f:9b:1f:77:4d:33:
ea:4b:70:7b:15:07:57:c6:1a:55:7d:a1:c4:09:e2:
93:43:21:a5:13:e9:61:16:60:7b:8a:ef:c2:66:78:
ad:e6:7c:91:db:b5:ff:8c:6b:ce:75:ef:2e:20:b3:
c9:09:19:62:fc:68:f1:c8:41:98:9a:6d:cb:29:21:
a2:6a:00:72:b2:35:25:d8:cb:1f:6b:ec:00:06:76:
fc:ef:de:49:c1:9f:85:35:a0:24:52:70:60:0c:74:
63:68:3c:5e:0d:24:e5:69:a1:c3:5d:e1:8d:80:fc:
83:f4:12:a3:27:a9:dd:92:23:19:fa:0c:c7:b4:e8:
44:fe:14:8a:cb:0d:2f:19:09:39:62:bb:81:e7:fd:
13:43:c1:c3:26:62:a0:67:b1:ea:95:e6:c7:b7:ec:
0f:9d:86:aa:19:05:b3:04:5a:e0:18:17:b4:71:f0:
c2:9d:29:03:a6:28:00:c3:45:1a:75:6e:8c:a3:c0:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:FE:66:23:21:EA:61:3F:61:9C:74:B8:69:FB:81:A8:8C:13:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/213AD8D2850D11F1AAA8FFBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.1.0/24
Signature Algorithm: sha256WithRSAEncryption
90:99:eb:4a:bb:74:31:e2:f6:e8:8e:53:d7:f3:9e:ed:5f:45:
6d:73:54:4b:ef:a3:b7:eb:c4:f3:0b:7c:f6:ba:d1:82:e9:11:
ef:7e:9f:ac:60:a2:c0:3c:9a:b5:d9:70:82:85:9f:b3:19:61:
09:58:5c:d9:f8:54:c3:3f:4b:82:a9:30:5a:27:7e:d0:f7:9d:
76:4b:25:2f:19:b9:92:8e:bb:91:ae:c7:75:68:24:58:b8:44:
29:a7:73:ac:ea:4e:ff:57:3d:c2:bd:68:8e:c9:cf:53:36:0d:
92:cb:23:b5:ea:27:ad:61:78:52:0e:d8:6d:63:a7:ce:f4:34:
68:6b:e1:c1:96:fb:3c:d5:ca:25:cc:3d:87:d3:99:87:ea:9d:
ee:8b:8f:57:a3:24:26:45:1b:1b:de:f7:57:90:76:b2:ce:ac:
4d:ec:a6:8c:1b:89:ce:48:f0:ec:1b:ef:ad:a5:b2:82:71:a4:
0d:11:17:d1:91:8d:45:55:21:b7:8d:f6:56:69:36:26:32:d0:
e1:ec:c9:21:77:44:04:20:2e:07:14:5b:b6:f6:01:63:af:75:
11:f0:96:64:89:d0:c8:3b:47:53:46:af:d6:5e:4e:60:43:9b:
64:00:88:9f:79:a7:d6:c4:db:07:4f:7f:d1:8d:9e:38:92:57:
01:0a:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:35 2026 by rpki-client