Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25472526842B11F1970DE6DBCE1D38B0.roa
File: 25472526842B11F1970DE6DBCE1D38B0.roa (raw, json)
Hash identifier: 0PTeEDA4MvDQyH8Jt8muss+9DBlggHIsnGdqj6CjJko=
Subject key identifier: EC:FF:4A:F9:87:2A:AE:76:C1:73:15:AC:75:65:8C:27:F5:14:48:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C677
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25472526842B11F1970DE6DBCE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:07:07 +0000
ROA not before: Mon 20 Jul 2026 11:07:03 +0000
ROA not after: Thu 27 Aug 2026 11:07:03 +0000
asID: 63023
IP address blocks: 45.206.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116343 (0x1c677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 11:07:03 2026 GMT
Not After : Aug 27 11:07:03 2026 GMT
Subject: CN=6a5e015b-b0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:31:e2:55:04:c0:6e:21:9a:3b:59:dd:cb:
e5:a6:ff:9c:ad:72:a7:6d:21:49:67:2f:d0:be:8e:
9d:ec:cc:ac:65:4b:76:f2:c2:1c:f4:48:0b:ad:ca:
4f:66:e0:2c:29:60:f8:15:4a:f8:96:cb:eb:c5:58:
24:ba:b5:7e:47:ba:21:7f:06:5e:0f:94:1f:9f:bc:
88:cc:97:bf:5a:fd:c9:60:f7:14:ac:b0:3a:23:32:
30:13:de:51:d7:6d:b9:1b:eb:fe:f8:e6:f2:c4:92:
ab:d5:36:eb:8b:5e:fe:19:14:4c:0a:33:c3:24:65:
be:1c:98:94:b1:ce:ab:bb:73:21:e6:ce:80:84:cf:
60:2c:a4:ee:6c:2b:b0:44:14:6a:5d:90:f8:7d:3c:
d5:a2:57:9b:3d:3b:f4:25:32:7b:b9:01:db:75:64:
08:d3:6b:f1:ab:46:1b:51:3b:7b:16:29:7a:89:bf:
12:da:99:5f:6f:e1:b2:6e:fb:9f:60:08:32:6f:81:
66:75:c8:f0:99:32:ba:da:53:4e:7a:0b:1d:4f:e6:
fb:66:90:90:2d:6e:20:b2:82:76:a1:c4:07:35:44:
37:d6:65:81:2e:62:92:85:14:18:86:79:9d:63:65:
af:f0:ec:86:9c:62:2d:56:a1:3c:59:fd:9c:11:59:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:4A:F9:87:2A:AE:76:C1:73:15:AC:75:65:8C:27:F5:14:48:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25472526842B11F1970DE6DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.3.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c3:98:b6:82:41:cf:ec:ac:40:17:20:ce:59:38:4e:27:a6:
5d:7a:37:96:e7:3f:01:d5:85:b5:f0:d1:2c:0e:2b:b3:7b:7e:
c5:e7:ce:38:ea:a4:08:29:8c:04:02:2e:42:51:0f:c9:90:f9:
3d:64:d1:27:ac:f7:cb:f7:e1:d7:53:19:15:b5:a8:1c:14:04:
f7:57:16:5e:1f:f4:13:27:57:35:86:62:60:70:cf:71:cf:33:
d0:cd:cc:3d:25:f4:49:a8:00:fd:d0:8c:8f:e5:0a:1d:ed:1a:
a1:00:ff:5a:bd:1d:e8:e5:fd:d2:95:ef:e3:45:ea:c9:cf:e4:
1e:12:9c:e7:03:60:3e:31:cb:37:7b:17:da:1c:85:5b:ac:40:
98:df:bd:9c:dd:d7:0d:23:7c:d5:64:5e:76:a4:09:70:15:5a:
66:9a:27:62:88:7c:2b:16:d8:50:4c:08:0c:93:e4:b3:4b:c6:
b6:a1:ec:94:bb:a1:6b:84:48:3b:d9:24:af:19:46:25:75:38:
db:bc:0b:a1:3b:5e:38:a9:46:cf:40:71:d6:08:61:69:2a:7d:
f4:af:20:83:2f:fb:82:a5:a6:f3:47:29:e9:da:f8:5c:90:80:
ce:ff:32:9e:c3:6d:d5:98:fb:fa:71:05:f2:11:1c:2c:40:f3:
d6:ae:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:45:29 2026 by rpki-client