Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/436A7098854411F1BE9BB902CF1D38B0.roa
File: 436A7098854411F1BE9BB902CF1D38B0.roa (raw, json)
Hash identifier: PnkAqdKT6cXMl9QpBH9WuJ3Qwe12O87Mt8V91LeN2ng=
Subject key identifier: 96:6B:69:54:18:8A:FC:22:C4:D6:E6:69:3C:D8:1C:E0:F2:B9:82:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C740
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/436A7098854411F1BE9BB902CF1D38B0.roa
Signing time: Tue 21 Jul 2026 20:39:26 +0000
ROA not before: Tue 21 Jul 2026 20:39:22 +0000
ROA not after: Wed 26 Aug 2026 20:39:22 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116544 (0x1c740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 20:39:22 2026 GMT
Not After : Aug 26 20:39:22 2026 GMT
Subject: CN=6a5fd8fe-0ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:cd:a6:82:0c:0b:52:f8:95:40:d0:c5:41:
71:26:4f:a1:c2:88:39:0c:b5:62:ee:05:96:f9:cf:
49:62:d9:a7:14:6e:67:96:9e:30:20:fe:c7:ab:ff:
9e:90:08:78:b8:28:04:0d:c1:b3:3c:7b:2e:64:bb:
ea:b7:57:94:1c:7f:8f:b8:bf:30:99:b0:00:08:e0:
f3:9e:d4:3b:e6:ad:bd:fe:4e:ad:d8:b5:b1:d5:9e:
70:b3:bf:4c:44:ae:7c:f1:df:f5:d5:66:61:69:53:
da:fd:45:d9:8a:08:fb:4c:49:94:c7:ac:96:36:f7:
5f:6b:d2:90:1e:96:f9:c0:cd:74:ea:14:96:78:ab:
37:76:8e:46:e0:41:c3:66:00:25:ca:92:6f:fd:30:
1b:57:82:8d:47:59:89:48:9f:64:be:a7:d7:c8:0d:
2c:55:62:60:79:a1:d7:ec:45:dc:04:9e:2b:bb:cb:
dc:eb:83:0d:00:3e:45:5a:2e:c0:69:49:cc:6e:ba:
6c:f1:3d:30:28:ac:e0:f6:3c:05:18:b0:da:ca:3c:
49:41:83:51:18:24:94:d8:ff:fa:b0:d6:b8:29:95:
6d:1f:a9:dd:04:e7:76:26:22:2c:b7:22:93:1d:b3:
10:03:9d:54:8e:65:bd:c4:54:b1:7c:3b:72:e4:df:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:69:54:18:8A:FC:22:C4:D6:E6:69:3C:D8:1C:E0:F2:B9:82:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/436A7098854411F1BE9BB902CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
79:01:9d:7d:7e:e2:80:72:76:ff:b3:05:53:51:61:6a:27:fa:
3c:0a:32:f7:c5:68:43:78:84:d0:4f:42:68:01:d3:6a:63:9d:
1b:a5:34:82:28:58:2c:ae:9c:9e:6a:5d:b3:62:54:af:0f:67:
e4:8e:ed:24:9d:0a:7b:f7:ed:2c:d0:66:2e:4b:51:80:f6:7e:
e8:a5:59:5d:98:82:15:3d:00:4f:2f:3e:4b:cc:09:dc:8f:1e:
c3:c2:71:c0:33:ab:63:b4:4d:20:93:5d:99:52:14:92:98:56:
ac:68:fd:63:8b:d3:1f:c6:fd:0d:4f:4f:d7:7e:ef:16:f7:9b:
30:5a:3d:a5:b2:63:fb:fe:e6:f7:3a:79:e5:e3:90:ff:59:af:
08:21:87:32:4f:0b:dc:79:be:98:43:05:92:5b:78:f4:44:17:
4f:47:1d:62:b5:0f:11:b1:bc:2c:7a:bc:d2:c7:70:36:b5:cd:
01:22:38:ba:b6:a4:43:ae:83:d8:ca:31:b8:7f:dd:43:69:d6:
64:0f:df:0a:fb:cb:2e:77:2d:fd:18:6c:77:ad:30:56:f4:30:
a3:9e:75:36:4f:f8:ec:f1:86:75:7b:a9:b0:83:eb:2a:f5:6a:
3a:c5:8e:7b:97:19:9e:90:2c:b3:98:65:45:6b:19:07:cf:49:
ff:19:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:21:32 2026 by rpki-client