Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0C015E850F11F186173AC8CE1D38B0.roa
File: 3A0C015E850F11F186173AC8CE1D38B0.roa (raw, json)
Hash identifier: I489JfE99G0Wlv/uD+TlWh3isCW7qg4SvQrrNLlzdj0=
Subject key identifier: D9:71:06:21:79:53:46:3A:70:C9:F6:C6:EA:B9:21:E8:26:6E:65:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C73E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0C015E850F11F186173AC8CE1D38B0.roa
Signing time: Tue 21 Jul 2026 14:19:47 +0000
ROA not before: Tue 21 Jul 2026 14:19:43 +0000
ROA not after: Tue 25 Aug 2026 14:19:43 +0000
asID: 200758
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116542 (0x1c73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 14:19:43 2026 GMT
Not After : Aug 25 14:19:43 2026 GMT
Subject: CN=6a5f8003-a9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:47:d0:5a:a8:08:f1:13:a3:8f:18:f1:59:
81:28:f1:a1:49:a1:6f:97:17:2c:68:99:e9:e7:04:
64:3a:3d:6c:8a:d8:95:22:91:66:2f:4a:a4:6f:2f:
86:b2:e0:84:38:c7:88:d6:b3:c8:56:2f:fe:02:aa:
88:df:af:07:d0:b1:18:99:31:0f:6b:be:d0:96:3e:
12:f1:10:7c:e3:7d:0b:90:d5:e4:ea:f0:48:b7:ee:
7f:94:7d:81:d4:bb:32:b3:92:22:90:71:d6:01:ee:
04:d5:fa:a4:9f:54:c0:12:15:3b:23:0c:d2:4e:4b:
8c:8d:8f:84:fa:42:31:8d:f0:44:bf:5f:79:38:d2:
21:13:47:9a:3d:73:70:18:dd:be:6f:77:b2:24:3f:
a5:88:2a:4e:cf:7f:c1:b5:23:90:43:06:0f:12:c1:
26:e9:54:b2:63:14:b0:c4:66:63:93:ff:d6:89:64:
57:17:05:81:10:57:eb:b0:4e:f4:e0:3a:6c:82:ae:
f1:a8:df:d3:b7:84:19:d3:cb:81:9f:45:9f:a8:b6:
dc:72:ca:72:17:b8:71:87:70:1f:d0:c6:97:4c:6b:
a5:8f:d3:cb:bc:8a:52:c3:f0:b2:09:f8:80:8f:9c:
61:11:e4:73:b5:0b:ba:3d:fc:7a:04:98:86:95:5d:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:06:21:79:53:46:3A:70:C9:F6:C6:EA:B9:21:E8:26:6E:65:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0C015E850F11F186173AC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:71:5a:a6:16:9b:d7:fd:06:cd:89:84:56:25:ac:c1:77:e3:
33:35:e1:11:0c:d3:ab:95:03:d2:99:f8:fb:18:6d:10:6d:af:
8b:44:61:40:37:0a:06:44:92:23:27:51:34:78:72:b5:32:2c:
80:d4:38:f8:da:39:dc:04:2e:4b:55:ca:a4:8d:91:2f:f0:56:
4f:ce:7a:b9:e1:01:14:3e:33:e8:0f:dd:e9:3d:de:f7:6c:c8:
a9:c4:8b:4f:d7:07:c2:cb:fb:6e:4f:5b:c6:10:e1:da:6e:3d:
b9:a0:5a:c1:f5:9e:4f:b6:00:5e:68:2c:33:5b:e1:ee:87:f0:
a8:29:06:3d:ea:f6:76:60:f6:d6:7f:96:72:a0:75:0d:3e:57:
bf:51:60:5b:3b:5b:7c:8f:27:48:b5:b5:26:d1:ae:b6:fa:5f:
0e:51:bd:71:30:2d:ad:69:1b:3a:96:cf:c0:b6:b0:87:c2:e1:
bc:a8:44:89:2a:da:56:72:f8:04:4f:bc:46:68:f1:55:e2:61:
8d:3c:c1:a9:bd:25:54:5b:48:5c:6c:90:4d:33:aa:9a:ac:63:
12:8d:70:17:78:16:fd:12:b6:57:42:90:72:f3:01:c8:bc:3c:
ad:ce:2e:a0:88:ce:2b:f9:2b:f8:a7:c4:e8:26:11:05:0e:78:
23:1d:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:51 2026 by rpki-client