Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/688654B0866F11F1B1A729B4CE1D38B0.roa
File: 688654B0866F11F1B1A729B4CE1D38B0.roa (raw, json)
Hash identifier: 6aH6oSaHcCxcmVbUNk02zEMTd+VSctwX8LAMAs/Abrc=
Subject key identifier: ED:AA:D4:D9:6F:8A:DA:85:0B:2C:CE:5C:DD:14:69:EF:3D:82:80:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/688654B0866F11F1B1A729B4CE1D38B0.roa
Signing time: Thu 23 Jul 2026 08:20:48 +0000
ROA not before: Thu 23 Jul 2026 08:20:44 +0000
ROA not after: Wed 23 Sep 2026 08:20:44 +0000
asID: 140925
IP address blocks: 45.195.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116680 (0x1c7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 08:20:44 2026 GMT
Not After : Sep 23 08:20:44 2026 GMT
Subject: CN=6a61cee0-0f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:78:e2:6d:08:cf:f8:00:52:2f:79:a0:04:ab:
b0:fa:b2:9b:dc:93:0c:0d:cc:e7:97:0a:6b:59:be:
c1:81:6b:9f:e3:f8:3e:b1:f9:96:e0:4c:16:d8:e2:
b9:99:06:93:25:e2:35:7d:c8:07:bb:2c:96:f8:2f:
c6:98:34:52:c9:46:3d:7a:33:21:a9:99:4d:b9:a9:
e6:36:78:a6:9b:e1:d0:7b:5b:c3:20:43:76:e6:35:
eb:49:91:ad:53:c7:68:24:c0:b2:7d:16:d2:8c:3d:
e7:ef:0d:eb:6b:8b:fa:74:4f:c4:66:68:5e:6a:ac:
d4:e3:16:84:2e:95:a9:36:f8:01:56:17:2b:e2:7e:
ca:52:2a:db:e5:d1:0c:ee:cb:1c:dc:83:01:5e:d4:
cd:94:2f:d6:89:1a:76:e6:55:5e:34:7b:6f:30:92:
97:3d:9a:87:11:02:58:6b:6a:56:6c:04:13:3f:2d:
5e:dd:b9:58:89:87:ce:02:a4:79:eb:98:f8:d9:19:
71:06:be:84:be:b2:08:0b:b1:f8:26:fb:98:1a:f6:
92:27:89:e3:13:81:b7:83:ad:96:6a:51:61:75:c7:
73:0d:19:1b:05:21:44:06:b6:a7:90:c3:17:d7:d3:
21:f5:90:b5:cc:cc:7b:9c:19:b1:c1:5b:ea:16:c9:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:D4:D9:6F:8A:DA:85:0B:2C:CE:5C:DD:14:69:EF:3D:82:80:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/688654B0866F11F1B1A729B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2b:71:61:64:25:90:f2:d6:b7:1c:b8:0a:99:7b:0c:2c:0e:
15:08:42:68:fc:ed:ff:5c:a1:ad:e5:d8:5d:92:93:fc:a6:68:
a2:e8:6b:59:a8:05:0c:8e:24:95:7d:88:57:5f:3d:82:49:ad:
32:0c:20:21:05:65:5e:ae:91:af:93:c8:61:8b:49:00:0b:6f:
51:d1:28:cd:c7:16:f5:6e:93:f9:6a:39:12:2a:2e:29:0a:b2:
7b:38:c7:c1:5d:25:76:c7:b7:01:8b:b5:63:0c:a6:4a:1c:cd:
30:5a:86:1e:49:95:f9:3b:50:d0:7b:56:19:cd:75:a0:c1:74:
26:73:79:83:07:f5:c7:fa:ac:15:18:5c:bd:e5:fe:45:72:81:
4d:98:9e:92:6c:f4:8f:ef:4b:c3:96:f5:57:f1:cb:d4:a8:2e:
32:d3:db:22:37:a5:c6:42:16:7e:bb:28:9b:ee:b2:eb:26:11:
5c:63:30:4e:48:50:35:3c:cf:b9:52:0a:df:0f:29:1f:8c:9e:
9c:2a:3e:92:20:22:a0:59:db:3a:7d:8b:19:22:d0:d1:15:ae:
19:91:0f:ba:06:a8:11:85:92:a8:56:71:72:ed:79:4d:c5:03:
9d:13:68:2e:3b:1a:08:55:1f:00:ab:93:7a:01:22:f2:21:55:
b4:ba:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:44:21 2026 by rpki-client