Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A86988484DB11F19F0C8512CF1D38B0.roa
File: 4A86988484DB11F19F0C8512CF1D38B0.roa (raw, json)
Hash identifier: nJZEljmu66xjWt8AgKOxf4Hkyf3IYYjndRA+akZoAKc=
Subject key identifier: 17:6E:88:1A:0C:9E:06:15:95:38:B9:D3:A4:BC:0F:ED:C1:38:17:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C69E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A86988484DB11F19F0C8512CF1D38B0.roa
Signing time: Tue 21 Jul 2026 08:08:01 +0000
ROA not before: Tue 21 Jul 2026 08:07:57 +0000
ROA not after: Thu 27 Aug 2026 08:07:57 +0000
asID: 984
IP address blocks: 45.196.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116382 (0x1c69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 08:07:57 2026 GMT
Not After : Aug 27 08:07:57 2026 GMT
Subject: CN=6a5f28e1-3e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:9a:94:80:91:ea:91:c0:ad:bc:d2:40:8f:
42:da:57:2d:38:a0:7a:f0:2c:a0:fd:f0:47:07:21:
eb:91:11:06:59:88:80:02:a3:d9:65:23:4d:b8:10:
42:68:62:84:0a:c3:22:32:c3:43:a1:8e:f6:7f:e3:
30:72:6f:ee:ab:cb:50:04:66:88:f4:c3:6b:8f:a5:
90:08:3c:7f:82:6e:3c:f3:2d:d2:e3:8b:8c:fd:e4:
da:0c:1d:e6:0c:49:0d:fb:ed:c0:30:9e:60:6b:90:
00:9f:ff:88:1c:8f:33:3e:7c:a9:35:31:23:5a:f3:
74:98:7c:ca:12:a3:71:be:13:ab:f7:ac:b8:d8:2c:
b9:59:14:52:cd:e6:04:ba:82:f1:b9:14:9b:1e:23:
fa:0a:16:df:11:90:00:2e:16:f7:77:09:9c:32:85:
ed:7c:1a:c7:0f:68:2d:6e:c3:94:83:3c:ac:5e:91:
8a:66:01:f7:5c:da:b0:5a:b3:d7:fb:f4:57:c2:c8:
2d:85:40:53:6d:86:a4:2f:5e:86:f4:72:71:38:05:
a5:a8:a7:e1:e5:7b:e4:6f:52:1d:99:da:a9:26:e5:
ad:98:6b:d9:7a:85:5a:ab:87:2b:32:cf:66:7b:56:
37:fc:ca:8e:df:56:5e:0b:ea:f7:f2:5c:21:2b:58:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6E:88:1A:0C:9E:06:15:95:38:B9:D3:A4:BC:0F:ED:C1:38:17:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A86988484DB11F19F0C8512CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.165.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3a:cb:df:26:bc:83:f1:af:7b:fc:c4:28:bd:b0:53:a0:5e:
d3:0f:6b:bc:db:83:0b:7b:07:95:ea:af:d3:f2:90:d7:aa:76:
cb:80:e9:1e:17:72:96:8e:50:0a:c4:3b:e2:12:35:b8:52:a7:
44:d2:9c:5a:e8:02:22:22:ce:49:4c:1d:ca:6f:d9:db:2d:cc:
6e:95:83:0d:99:52:c0:98:fb:98:e6:3c:5f:da:79:89:c4:99:
ef:ad:81:22:49:71:65:b5:cf:13:f5:65:9d:eb:7d:6c:f3:d1:
a6:93:18:77:e1:52:ef:32:9a:e3:ad:c0:50:d0:2b:f6:14:68:
4f:7d:ba:7a:11:1b:a5:b1:d8:ba:5d:66:4c:dc:7f:43:c4:a3:
c7:02:b0:2e:55:a1:48:49:bc:d2:fe:3a:a1:91:40:70:b0:1a:
eb:52:7e:53:88:12:06:63:1f:58:1b:05:b6:2e:d6:04:87:90:
0b:ae:cf:67:fe:50:8b:a6:fe:4b:8a:e2:df:4a:ea:f6:29:63:
84:fa:a8:0c:1a:d2:e6:6f:f5:75:d8:af:0d:8d:a4:9e:f9:4f:
a9:ef:f7:62:33:db:34:6c:41:f5:88:63:cd:e4:af:d8:8c:08:
b4:a1:90:4c:a9:13:39:6e:bb:7c:3d:c7:4f:b8:9e:aa:aa:71:
3f:04:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:22 2026 by rpki-client