Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ED91C98866D11F1BC84D2A7CE1D38B0.roa
File: 4ED91C98866D11F1BC84D2A7CE1D38B0.roa (raw, json)
Hash identifier: c7RbMlFWiZJjvXkha7OnRUueOjVQNtQk0nXv1pLR6nw=
Subject key identifier: F3:26:15:CB:F9:B5:4B:EB:87:93:9F:90:14:7F:07:C0:66:D2:7D:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ED91C98866D11F1BC84D2A7CE1D38B0.roa
Signing time: Thu 23 Jul 2026 08:05:46 +0000
ROA not before: Thu 23 Jul 2026 08:05:42 +0000
ROA not after: Fri 11 Sep 2026 08:05:42 +0000
asID: 209750
IP address blocks: 45.207.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116676 (0x1c7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 08:05:42 2026 GMT
Not After : Sep 11 08:05:42 2026 GMT
Subject: CN=6a61cb5a-8d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:9f:d6:c6:2b:95:8a:86:af:71:aa:18:0e:
22:e4:5c:9c:7e:dd:71:fd:4b:e2:57:dc:08:b2:f4:
87:48:81:02:33:dd:e1:08:4d:c3:79:14:f2:34:5b:
e8:55:ea:15:cc:96:13:66:40:14:aa:de:4a:94:f9:
39:cc:7f:e3:61:f8:b9:51:49:c1:8c:36:da:90:ef:
71:96:53:41:c5:77:f4:b9:87:31:32:ff:7c:a4:60:
12:62:8c:86:bc:c6:6b:0b:a9:ad:ad:e0:e7:9b:7e:
80:3c:d2:6e:03:66:40:0d:65:27:b0:5f:8c:87:ed:
ee:20:8b:34:44:b1:a3:23:d6:25:1e:69:b6:74:14:
18:35:f1:5e:fe:af:5a:e6:f6:10:98:67:8b:fd:19:
ce:c6:4c:a7:04:70:af:ff:58:0a:f9:49:f3:e8:af:
9c:e1:c0:1e:9a:08:1d:95:58:d1:64:7e:a0:db:37:
e6:34:10:92:b4:14:cb:8a:48:f0:4a:c2:8b:ac:e1:
ea:e6:ca:26:c8:e5:3e:d4:28:7b:5b:98:72:3b:d4:
dc:7b:8c:48:83:70:aa:d5:ac:e2:a5:3c:c6:49:74:
43:a8:b6:95:0e:81:e1:df:70:ac:00:95:08:18:e6:
68:6a:2c:2b:04:cc:fc:1d:80:b4:31:76:c6:ca:f7:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:26:15:CB:F9:B5:4B:EB:87:93:9F:90:14:7F:07:C0:66:D2:7D:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ED91C98866D11F1BC84D2A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.21.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0c:80:ad:f9:f9:3c:2c:d0:08:10:75:ba:96:91:0e:49:b3:
16:e2:f9:c7:82:05:3c:b6:93:87:da:b0:2f:3b:42:27:a6:2d:
ca:7d:a6:8d:39:37:71:f2:a5:23:ab:4c:35:70:99:d5:f7:79:
7e:11:9a:5f:b2:5e:4c:53:1b:dd:a9:8c:2b:63:2e:0e:a5:10:
c1:5b:c8:9b:58:13:5e:ce:31:b2:47:95:66:1d:31:58:48:09:
66:96:9f:46:ce:42:70:fe:07:3c:ea:e5:a4:5b:fe:f8:57:a1:
47:11:14:48:17:e5:17:9e:70:f7:58:19:f2:e6:d1:ca:4c:ec:
dd:fe:b1:1e:92:a6:17:55:2d:7d:91:73:04:9d:15:81:65:c3:
1d:60:76:19:0b:0b:0e:32:23:fd:6a:91:ac:73:c2:e9:54:df:
d0:f4:32:4c:a1:c4:be:90:29:e6:59:ae:57:4a:9d:71:50:38:
ad:e3:e0:a5:5d:17:bb:36:e5:5f:50:6e:78:c3:1b:0c:e6:9b:
3c:75:09:d4:6d:e0:a2:02:df:54:67:a2:59:5d:d3:6f:35:ef:
7e:2a:91:87:ca:8a:8b:ee:53:c3:65:5f:86:5b:cb:3f:81:c4:
67:63:8f:a1:fc:f6:2b:f1:8e:9a:3e:5d:c7:c9:0c:4c:2d:ed:
be:25:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:51 2026 by rpki-client