Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6817AF84842511F198284FB9CE1D38B0.roa
File: 6817AF84842511F198284FB9CE1D38B0.roa (raw, json)
Hash identifier: DYEKesNcg754pe3NYHnesrEKeJVbsCjohHHioYnUaKg=
Subject key identifier: 93:8C:3F:D1:D3:FC:94:6F:6C:85:A3:F3:02:4F:8C:61:1A:BF:7A:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C665
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6817AF84842511F198284FB9CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:26:02 +0000
ROA not before: Mon 20 Jul 2026 10:25:58 +0000
ROA not after: Tue 25 Aug 2026 10:25:58 +0000
asID: 200758
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116325 (0x1c665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 10:25:58 2026 GMT
Not After : Aug 25 10:25:58 2026 GMT
Subject: CN=6a5df7ba-f5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:fa:eb:1c:40:69:b3:52:70:03:15:8a:22:
d1:f5:bd:d2:19:db:2a:e2:61:0b:6c:ff:27:4c:92:
11:e5:2e:c1:68:c0:04:33:ba:47:94:b4:ac:fe:b9:
b9:25:79:82:bd:47:d7:cb:8a:55:1f:8c:99:b6:1f:
a1:a8:0b:fe:11:60:0f:47:ba:4a:ad:8b:e3:43:21:
79:3c:f4:b1:31:33:68:ff:15:6c:0a:41:14:40:bb:
3f:07:58:c8:9c:c8:d9:13:90:3c:28:be:58:c5:7d:
64:63:21:96:b0:45:04:2a:42:2b:60:44:cc:a1:ff:
78:19:f3:5e:54:03:bb:59:73:42:23:03:0f:e6:9a:
e0:7d:ca:5f:a7:4c:78:6f:c2:9d:f7:0f:e4:2b:62:
c8:d8:52:e3:d3:b1:50:d8:3c:8c:e4:f0:5b:37:f6:
ac:16:1b:55:ae:45:8b:79:3c:a1:78:b0:11:33:6a:
99:74:64:ae:71:52:78:cf:33:fa:46:2d:4d:3b:45:
99:0c:8b:76:e4:b4:73:f5:1b:26:22:40:13:1c:d9:
9c:bb:4b:de:ac:dc:d7:05:67:c5:2e:6f:83:7e:a5:
f0:7f:1d:ef:d0:cf:4d:8f:f8:24:2d:79:fc:45:ac:
8a:a9:60:cc:00:89:37:2e:53:48:15:81:2c:a5:3a:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8C:3F:D1:D3:FC:94:6F:6C:85:A3:F3:02:4F:8C:61:1A:BF:7A:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6817AF84842511F198284FB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d5:ee:50:55:7c:63:d0:cb:d7:29:f1:89:d9:6c:39:f6:40:
37:03:47:b9:18:b8:3b:8f:03:4d:01:cb:4d:1b:c2:be:b5:4c:
3e:25:7c:0e:e5:df:e5:14:e4:7f:bb:fb:e3:38:4b:51:01:78:
c3:b0:2b:0f:94:43:b0:56:89:da:cc:39:37:98:05:2a:89:5f:
02:b3:8d:b3:8f:db:5f:3e:f5:f4:1e:ef:a9:b2:16:c9:a2:8c:
6c:41:90:15:3a:2f:6f:4e:d8:da:78:a3:05:80:0d:bb:2f:d5:
f4:42:db:bc:12:ef:3b:57:72:f0:23:55:e9:f3:a6:9f:b1:cd:
cf:c5:bf:e5:bc:e4:d6:00:cd:e1:35:9c:15:d3:72:bf:d8:ae:
9b:4b:fc:c8:d9:c4:5d:7b:4d:72:97:3d:81:54:81:46:8f:fb:
1e:2b:4f:93:e8:d1:d6:49:36:5f:b9:7e:82:17:84:13:d8:dc:
be:7a:4b:53:17:79:9d:aa:b5:b3:ae:06:36:b0:c7:7f:06:31:
dd:bd:e0:05:5a:c7:e1:69:a1:99:2f:59:3e:8b:5b:14:04:01:
fc:75:a1:ac:76:30:df:fc:02:e5:20:49:fb:4e:f3:e0:a4:e3:
ed:14:b0:99:26:ea:21:35:9d:b2:e9:9e:4d:33:c6:d6:fb:4a:
55:b7:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:24 2026 by rpki-client