Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5BBF6484A411F1A21FF3B3CE1D38B0.roa
File: 9B5BBF6484A411F1A21FF3B3CE1D38B0.roa (raw, json)
Hash identifier: BV403d9/Jc/WoJGPSItZzpUPpAy+wIdrAV52yKcdfFM=
Subject key identifier: 1D:13:DE:0C:13:75:00:C0:C4:F6:72:0B:21:5A:E3:54:79:2C:54:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5BBF6484A411F1A21FF3B3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 01:36:34 +0000
ROA not before: Tue 21 Jul 2026 01:36:30 +0000
ROA not after: Mon 17 Aug 2026 01:36:30 +0000
asID: 273824
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116370 (0x1c692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 01:36:30 2026 GMT
Not After : Aug 17 01:36:30 2026 GMT
Subject: CN=6a5ecd22-c572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:a7:95:32:33:23:98:b2:a9:98:ea:f0:46:
bd:e6:2f:cc:af:f6:44:8c:74:bf:1e:b2:00:fa:f8:
e0:6b:f3:02:ac:ec:04:8d:4f:11:04:bf:3f:78:61:
19:2f:2d:f2:51:43:f3:15:ff:ec:41:aa:6b:af:11:
ab:ea:ba:d7:e6:5a:ed:53:76:c1:50:f1:4f:65:a3:
0b:e4:eb:0d:3f:48:b7:05:55:87:c8:f1:e7:f5:1f:
dc:9d:4c:58:c5:4f:e9:00:75:a1:55:d0:63:f2:41:
40:2c:c3:58:3c:71:e6:21:53:db:54:84:6a:70:d8:
69:90:e9:34:bf:7e:36:10:3a:0b:d7:25:24:3d:5f:
ea:04:96:f8:70:f4:2e:be:4c:b0:8a:77:53:cb:6e:
93:ec:09:8b:89:3c:ae:34:bf:73:81:c1:3e:37:0f:
ba:14:0b:a3:37:7c:84:6a:c3:f6:c9:2f:99:20:de:
e3:f1:43:b3:7c:c9:42:09:99:04:61:dd:9e:8f:2e:
dd:42:a1:45:64:6b:17:24:a1:fe:cb:3f:04:bb:6c:
73:cb:ef:39:9d:71:8c:a2:99:2a:b0:ef:bd:e7:3e:
c1:0c:23:da:e8:2d:e9:cc:6c:75:0a:46:e2:22:d4:
ce:95:55:ab:e7:c3:74:90:c1:b4:2e:24:ac:12:14:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:DE:0C:13:75:00:C0:C4:F6:72:0B:21:5A:E3:54:79:2C:54:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5BBF6484A411F1A21FF3B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
18:72:cf:1a:c3:0b:74:e1:ab:4f:71:5b:54:17:99:06:48:f1:
86:99:5f:e2:8d:a5:6e:30:9d:fe:e5:eb:0a:4d:7c:29:0e:a4:
11:dc:5b:f3:07:bd:3d:48:88:39:9a:c4:cc:39:52:ec:8c:c4:
09:aa:af:2b:99:80:10:b1:24:6c:9e:36:20:95:01:4a:5b:3b:
bb:fa:f0:34:84:5c:cd:c7:bc:b0:c2:b0:30:e8:cf:46:7d:7d:
40:e8:39:b7:f4:e2:02:90:7a:04:53:77:d4:a3:fe:10:3b:74:
ac:0f:04:57:e7:17:50:b4:b7:01:0b:ed:bf:b3:ab:e4:19:d9:
12:41:c4:08:02:ef:e0:13:fc:f7:09:fe:26:0f:27:65:d6:ac:
a2:3a:7d:e3:7e:53:12:8a:72:00:2b:09:47:d9:36:01:84:dd:
cb:39:d5:d6:ec:7b:2f:6b:ae:89:90:95:82:16:08:be:d2:8d:
72:bf:24:9d:f8:ba:bc:12:da:97:41:19:b0:ea:85:3c:cf:e5:
af:bf:4f:76:3b:4b:af:f7:73:67:5d:cb:5e:3b:8f:3c:4e:26:
93:60:53:ac:1b:01:c9:5e:9f:77:83:e6:75:6d:02:fd:26:f4:
b0:70:e9:bc:7e:b0:63:47:ae:7d:39:15:49:90:55:1f:cd:c3:
52:5a:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:42:29 2026 by rpki-client