Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4669947C861111F1B482D8E6CE1D38B0.roa
File: 4669947C861111F1B482D8E6CE1D38B0.roa (raw, json)
Hash identifier: INoiEEZUWJ63Hhh1W+Kbu1sJMqOC2TtmX8gBDINm3Fw=
Subject key identifier: 5A:E2:0A:8F:74:B1:AD:51:8F:8D:DE:7E:1C:29:D2:34:98:8E:56:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4669947C861111F1B482D8E6CE1D38B0.roa
Signing time: Wed 22 Jul 2026 21:06:58 +0000
ROA not before: Wed 22 Jul 2026 21:06:54 +0000
ROA not after: Wed 29 Jul 2026 21:06:54 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116659 (0x1c7b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 21:06:54 2026 GMT
Not After : Jul 29 21:06:54 2026 GMT
Subject: CN=6a6130f2-7a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:19:68:7c:10:7a:b8:95:2a:7c:a2:55:6b:
fd:51:a8:a5:72:50:91:6c:87:02:1c:3b:25:1c:57:
69:b3:ee:ef:ac:04:40:28:51:0c:26:a5:35:ad:c3:
25:d4:ae:a6:75:c4:7b:7d:c4:11:1d:d8:96:88:10:
22:a0:12:50:33:66:50:f6:44:72:4a:cd:98:d7:99:
d3:33:2d:11:a0:48:74:73:29:62:9a:59:85:c9:93:
cc:33:aa:fe:85:2f:46:cf:11:d5:78:b1:90:cc:66:
6a:1d:04:8b:c3:25:db:db:c9:cb:81:bd:fa:68:f2:
26:d5:8d:9d:cf:a2:77:98:cf:01:ae:0c:f8:da:f9:
5a:69:a7:5f:90:ac:79:00:3f:86:0c:7f:a7:16:10:
f9:53:b2:65:12:02:51:77:f9:a9:72:40:67:07:40:
aa:62:c6:47:0f:d2:53:8a:14:c1:cc:87:e2:76:14:
f4:0c:1a:7d:31:56:37:ab:0b:31:e5:c7:0d:c5:0c:
d6:ce:45:ad:37:34:52:ef:e7:95:2c:4d:60:4c:ad:
e1:f7:8e:ee:42:03:5d:aa:4e:be:17:dc:36:d3:06:
69:47:26:ec:27:9b:3d:6e:d6:9e:8f:94:e7:ee:c9:
80:5c:62:f0:4b:56:c1:6a:4c:91:da:24:87:5c:4f:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:0A:8F:74:B1:AD:51:8F:8D:DE:7E:1C:29:D2:34:98:8E:56:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4669947C861111F1B482D8E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
46:44:ce:87:8a:2c:df:79:59:cf:90:59:e2:05:ab:8c:05:b0:
2d:57:d9:2b:fe:93:48:54:df:24:84:a4:f1:f6:9f:2e:8b:e4:
1b:cf:00:28:04:fc:2a:3a:45:f5:ea:75:36:03:9c:ed:c9:0d:
3e:46:f3:f4:4f:e6:e0:0d:1e:58:0a:ff:b7:e2:65:e8:f0:78:
8d:53:1c:81:d4:d3:bd:09:85:e0:c3:70:5c:a7:ea:32:20:53:
79:d6:1e:3d:e0:3d:0c:85:95:3d:5e:fb:0d:0f:fa:c9:af:db:
b0:f2:cd:97:47:c9:26:5d:0f:31:11:83:7b:9f:c5:31:92:6b:
87:64:c5:7c:55:70:59:99:4c:6f:e8:52:10:a6:77:12:86:f8:
28:ef:02:e3:ee:7a:81:ba:fc:b1:f4:1c:74:e8:e0:70:c7:f5:
35:ef:fe:ad:9d:67:db:df:b2:16:31:6d:79:98:14:9d:b2:52:
f9:87:05:1a:71:a8:c2:23:85:ca:4d:ef:fb:0d:75:f3:5c:ff:
9c:21:bc:ab:43:4a:73:82:05:e7:67:d0:51:5a:ab:92:6b:a1:
94:35:94:91:7e:7e:17:ca:b6:09:f0:5d:1b:6e:90:1a:a7:a6:
52:e9:49:4c:89:67:05:41:18:d4:aa:42:e0:c0:4f:14:28:a3:
a1:a0:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:07 2026 by rpki-client