Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24BD5F3E860C11F190C9C5C6CE1D38B0.roa
File: 24BD5F3E860C11F190C9C5C6CE1D38B0.roa (raw, json)
Hash identifier: mv5XfxRozM+UCk1jIo1c19kw6jSc/Mv3nPVYK4OgTh4=
Subject key identifier: 7D:4D:4C:81:C2:E2:06:C5:A8:CA:77:39:61:45:9A:CE:AD:E0:05:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24BD5F3E860C11F190C9C5C6CE1D38B0.roa
Signing time: Wed 22 Jul 2026 20:30:14 +0000
ROA not before: Wed 22 Jul 2026 20:30:10 +0000
ROA not after: Sun 26 Jul 2026 20:30:10 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116647 (0x1c7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 20:30:10 2026 GMT
Not After : Jul 26 20:30:10 2026 GMT
Subject: CN=6a612856-30d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:f3:d7:0c:8e:08:af:50:b1:5e:ad:c7:68:
2a:c6:a8:c0:c0:16:d4:1e:ff:02:b3:cd:99:22:f8:
4a:a9:7e:a9:8b:47:f6:d8:18:64:9a:c8:f2:ab:a4:
17:9f:0c:ad:1b:af:5c:ad:5f:61:03:11:c7:7d:ee:
17:be:9a:21:ed:76:c0:35:8f:af:f7:c2:40:c9:f7:
ca:4f:28:97:44:50:bd:a4:3c:80:c8:66:06:99:d7:
4f:41:aa:2d:60:27:79:f3:5b:ac:19:11:00:e6:03:
d2:6f:8a:3c:23:3a:81:e3:39:d2:93:4a:d2:ef:1c:
fa:11:81:bb:26:4a:9a:3e:85:71:3c:f2:cc:db:b2:
93:de:84:58:ad:9c:cb:17:85:16:45:1c:2d:a3:12:
4b:21:a3:78:9e:64:77:d9:bb:47:a5:ab:89:4c:66:
5f:f1:2a:eb:8c:91:1d:09:7d:42:01:7d:e4:d1:97:
01:32:f3:9a:16:df:48:2b:66:08:e8:5a:90:63:e3:
56:88:b7:ef:64:3b:03:99:68:44:33:f2:74:23:09:
8e:ff:ad:47:68:d4:f3:81:e4:9c:fb:e4:5d:52:8f:
86:b3:d0:97:05:10:b0:c6:5d:78:d9:00:64:f6:81:
7a:af:30:56:1e:5e:64:6e:43:20:38:ac:0a:9b:92:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:4C:81:C2:E2:06:C5:A8:CA:77:39:61:45:9A:CE:AD:E0:05:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24BD5F3E860C11F190C9C5C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:00:f4:16:64:1d:bc:dd:fc:d9:44:3c:35:4e:13:01:b4:93:
17:b6:b3:84:dd:0a:54:ee:32:4b:e9:46:f0:32:2b:6c:85:ff:
22:56:1e:77:69:28:56:95:45:10:7b:aa:6b:04:4a:55:af:13:
1c:3c:63:1b:6e:ce:8e:69:02:6e:42:0e:0a:45:9b:4a:d7:c2:
19:f5:17:21:40:e8:d8:ae:5e:e2:2d:ff:f8:4f:6f:80:9c:4e:
d8:fb:f5:2a:14:51:17:af:b5:51:fc:32:8f:f9:72:9d:5a:b1:
37:8c:d6:d7:39:a5:a3:8b:56:ef:f3:00:59:d8:74:84:15:ac:
b4:77:7d:16:0e:1d:56:93:d2:fe:b8:ee:52:ec:21:ec:c2:f9:
30:3d:f0:8b:0c:56:6d:fc:31:50:9a:52:24:74:23:43:dd:7a:
76:2c:10:86:69:b7:7f:ae:7a:56:b3:21:34:f0:42:ee:e6:b8:
4b:d9:21:7e:9c:20:58:3e:56:47:27:e8:62:cf:4c:28:8d:48:
2f:96:02:7e:39:35:31:09:82:57:ed:5b:63:2a:39:80:52:de:
0d:13:8d:96:6e:83:cb:78:b2:93:65:aa:8a:0c:59:b0:33:7a:
57:26:04:c4:83:81:43:d4:33:27:9c:6d:87:9b:81:12:28:fb:
05:dc:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:26 2026 by rpki-client