Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0401346850211F1B0FC09FCCE1D38B0.roa
File: A0401346850211F1B0FC09FCCE1D38B0.roa (raw, json)
Hash identifier: ulFiy+63WT6bXiGGcsdMqbMfxkVO5KIfxFKIssKnzys=
Subject key identifier: 68:AE:A7:C8:C3:A9:14:AD:38:1A:2B:82:19:8A:F1:7C:A7:E0:2D:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C71A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0401346850211F1B0FC09FCCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:49:35 +0000
ROA not before: Tue 21 Jul 2026 12:49:31 +0000
ROA not after: Fri 21 Aug 2026 12:49:31 +0000
asID: 63199
IP address blocks: 45.195.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116506 (0x1c71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 12:49:31 2026 GMT
Not After : Aug 21 12:49:31 2026 GMT
Subject: CN=6a5f6adf-1dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:93:b9:32:b7:af:8f:42:85:75:1d:54:79:
5a:4c:2a:6d:3e:20:41:08:a2:5a:9b:07:0f:32:6d:
da:ff:1a:4d:6f:76:a3:94:c4:e9:17:60:59:da:7c:
bb:7d:ac:6e:cc:b7:db:d7:f2:2b:c0:58:8e:23:20:
30:85:b5:a8:b9:e9:d3:9d:06:73:e9:29:1f:d2:f8:
40:86:68:65:f6:51:55:91:21:ec:f9:0f:37:5a:68:
15:04:a0:29:7c:3b:ca:5c:33:31:d2:62:c4:80:e6:
d9:59:20:42:90:e5:21:06:55:6b:5c:46:28:61:29:
08:4e:eb:bf:d5:31:5b:6f:20:e3:86:89:cf:ca:ee:
22:35:13:1a:09:4a:62:2a:9c:4c:ee:2c:b7:99:e7:
99:df:e1:63:98:37:6a:3b:07:38:e2:4f:f5:e8:24:
d0:34:34:fc:09:33:e9:bc:bc:44:fe:97:31:44:6d:
1d:83:3f:8e:af:f6:7b:7b:9e:a1:53:bf:f8:2b:4d:
d2:c2:4a:3d:32:b9:59:52:03:2e:69:b3:39:85:fa:
6d:2a:4b:61:b6:66:44:1f:51:a0:52:07:10:8b:3f:
5d:30:77:ef:b3:46:76:39:ef:dd:d0:51:a6:3a:72:
62:2a:4b:14:f5:2d:6c:95:49:8c:0a:2e:c9:76:28:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:A7:C8:C3:A9:14:AD:38:1A:2B:82:19:8A:F1:7C:A7:E0:2D:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0401346850211F1B0FC09FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.78.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ed:76:30:f7:0b:03:1b:ab:5d:8c:70:7b:c8:30:7a:14:33:
b2:1b:4b:07:85:04:6f:7e:88:55:7c:42:94:3b:a5:78:c6:27:
36:07:29:16:ec:ed:41:f5:85:e2:b2:ad:5a:5d:f3:fc:ca:80:
2e:9e:3a:36:6c:4c:a7:7f:cc:de:f0:37:0e:0e:ef:1d:4a:f7:
92:98:b1:cc:b9:7e:bb:2e:61:90:a9:96:a4:7c:c9:5c:2e:eb:
65:1d:fa:93:10:9d:46:9a:28:c6:8b:67:6d:8f:30:d6:53:f8:
71:7e:e2:17:b2:a1:5f:3f:9f:c9:aa:9c:e4:13:03:d1:c9:fc:
bc:ab:82:26:1a:24:66:08:e2:97:91:45:3e:63:24:a7:31:ad:
dc:5c:2a:65:cc:39:78:b7:b7:ed:4a:0d:1d:2c:15:8f:36:4e:
9c:82:73:ae:33:73:00:58:6d:2d:c0:1c:9d:77:c8:b4:0e:f9:
81:b1:cb:93:d1:10:b1:de:c3:2f:f3:4a:54:ed:cd:13:58:f2:
79:19:a2:f0:24:66:53:d1:6f:b7:50:51:62:5c:30:2e:0a:c0:
21:96:0a:a9:a9:c0:a4:b7:57:a7:7e:69:77:5f:f8:dc:d4:db:
5e:23:1f:dc:a5:a6:67:16:c4:84:ee:fa:9a:eb:95:89:63:0d:
9c:26:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:15 2026 by rpki-client