Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312F71EE835511F195EDBBC6CE1D38B0.roa
File: 312F71EE835511F195EDBBC6CE1D38B0.roa (raw, json)
Hash identifier: e0LwXtNOgLCtuCz9vAJharSXEX7UopmmYi+BnYmGaq8=
Subject key identifier: 0F:8C:51:5C:AA:41:97:55:DA:B7:13:A3:0F:47:8D:AB:AF:81:AB:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C623
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312F71EE835511F195EDBBC6CE1D38B0.roa
Signing time: Sun 19 Jul 2026 09:35:35 +0000
ROA not before: Sun 19 Jul 2026 09:35:31 +0000
ROA not after: Sun 23 Aug 2026 09:35:31 +0000
asID: 149940
IP address blocks: 45.198.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116259 (0x1c623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:35:31 2026 GMT
Not After : Aug 23 09:35:31 2026 GMT
Subject: CN=6a5c9a67-c0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:3e:b1:fb:ea:40:38:c0:42:ab:a4:40:ba:
8d:95:f3:a8:f9:ff:8a:51:d5:0c:92:24:00:ad:7c:
df:ae:1e:8d:4b:b8:50:47:0f:ec:0c:b3:d5:86:85:
df:00:96:a0:f2:11:06:0d:70:1b:95:97:d7:1b:c0:
fa:c3:a3:72:3f:44:42:f4:f0:5b:05:d1:4d:69:00:
f9:f3:cc:df:75:6f:92:f4:08:c1:8c:63:5f:f4:ab:
36:d4:79:66:76:cb:0e:e5:74:2f:a6:36:8c:7b:85:
7b:22:b7:10:c0:06:83:86:4a:2c:ac:ba:94:d0:43:
49:7c:df:bd:96:d1:5e:9c:28:07:15:ed:ff:6b:47:
70:a7:20:eb:e1:6a:31:81:d6:cd:31:2e:98:c4:fe:
d5:5f:10:42:09:c7:cc:3b:4a:c5:8f:e6:a3:96:b2:
da:7e:74:92:dc:ae:0b:ab:ae:cb:02:ca:15:84:4c:
a2:d1:a1:38:f7:2f:ec:53:65:31:51:bf:52:7c:7e:
48:a8:f6:bf:c5:bc:c3:2f:42:ea:0a:9c:c2:f6:cb:
1c:bd:5e:24:e4:01:60:cc:44:30:af:13:06:0d:71:
35:39:00:ef:e0:27:09:2f:37:8d:7b:ce:e5:34:12:
af:49:65:7f:a3:79:40:11:55:f8:91:e9:4f:32:49:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:51:5C:AA:41:97:55:DA:B7:13:A3:0F:47:8D:AB:AF:81:AB:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312F71EE835511F195EDBBC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b2:c3:91:7f:1b:9f:9a:19:2e:2a:fd:cf:02:cb:8f:45:ae:
a5:08:97:98:0f:b7:50:01:25:07:5b:c8:cf:6f:35:4d:b5:fa:
71:71:61:f4:34:d0:69:b0:6f:0f:88:55:bc:ff:cc:08:da:e5:
20:e5:82:c6:9d:d2:1a:31:46:dc:4c:5d:95:37:40:70:35:a9:
49:86:8f:ff:1e:81:b5:d5:fc:b1:0b:12:15:c5:9f:5a:e8:45:
80:a0:f4:fe:01:cf:b9:be:77:0c:05:d8:0b:f3:7d:af:7c:80:
de:ab:0a:8d:d6:c4:c9:18:8f:41:87:1d:7b:77:c7:5b:f8:3f:
61:37:ff:0e:71:e9:2e:40:90:9e:56:b9:b6:f0:eb:7a:e6:01:
ad:d9:20:88:7b:65:79:13:0d:f4:f0:42:43:da:6e:5d:e1:cf:
b4:5a:36:92:95:51:bd:ca:32:7e:d6:11:fe:95:38:d9:96:11:
5b:b2:8e:67:9c:72:18:42:b0:cd:86:54:20:e6:31:ce:0d:2a:
f0:0b:d1:39:ee:4d:dd:72:5e:2b:d3:41:1b:3d:d6:48:e3:aa:
f3:e0:12:7b:35:2e:cb:b6:1b:68:c0:6b:09:a6:79:a9:52:ae:
ff:df:11:27:60:71:08:b2:ef:e0:7d:7a:9c:1f:45:9e:48:b7:
1e:12:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:03 2026 by rpki-client