Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A109C646850711F1BF2CED19CF1D38B0.roa
File: A109C646850711F1BF2CED19CF1D38B0.roa (raw, json)
Hash identifier: WS49fEbAvxgp7QbKIYjnHZxCsToifPVD0AtZzTGhsPQ=
Subject key identifier: A4:AC:8A:43:5B:7E:F1:D7:53:C0:89:35:34:AB:C1:89:CE:A9:68:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C724
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A109C646850711F1BF2CED19CF1D38B0.roa
Signing time: Tue 21 Jul 2026 13:25:24 +0000
ROA not before: Tue 21 Jul 2026 13:25:20 +0000
ROA not after: Wed 09 Sep 2026 13:25:20 +0000
asID: 32043
IP address blocks: 45.192.120.0/21 maxlen: 24
45.194.12.0/23 maxlen: 24
45.194.114.0/23 maxlen: 24
45.194.118.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.201.102.0/24 maxlen: 24
45.201.103.0/24 maxlen: 24
45.203.33.0/24 maxlen: 24
45.203.34.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116516 (0x1c724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 13:25:20 2026 GMT
Not After : Sep 9 13:25:20 2026 GMT
Subject: CN=6a5f7344-d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:81:7a:f8:69:7f:4a:54:60:9f:1c:d6:07:
a3:97:f5:1b:ff:02:5e:bd:ab:0b:ae:78:41:bc:d6:
d9:f5:ba:7d:d9:b5:16:7c:9b:43:f5:ab:04:40:3d:
6f:49:24:7b:d2:59:73:84:c9:0f:f5:ce:94:09:a4:
40:2f:94:1a:34:a8:07:f5:92:82:1d:3d:55:fc:17:
1b:d7:62:2a:d3:9f:78:09:5d:fd:0a:ad:31:a9:fa:
fd:0d:ca:36:9d:05:43:02:9c:92:0c:88:42:57:9b:
db:61:1a:f8:80:2b:af:bc:88:e1:8e:9a:0a:3d:10:
e3:7b:41:25:ba:19:7e:bf:e3:fb:45:34:03:5e:84:
44:c9:e8:73:cc:3a:d0:d4:f1:88:9d:56:35:41:9b:
89:56:97:31:a6:58:20:cb:b4:59:9c:4a:fb:bc:56:
6b:69:4e:f5:df:5b:75:d1:60:55:f2:82:ed:0c:b4:
e5:83:ff:90:a3:0c:a0:56:8c:0a:2a:9e:fd:a7:ad:
c1:a0:7f:d7:0f:68:79:08:b1:82:c7:20:84:d2:9c:
38:19:f8:43:05:ed:57:15:a0:59:2c:8e:56:b2:f7:
4f:ba:59:15:ac:1c:71:5d:30:d3:f6:8e:57:7d:d7:
5f:ae:79:4c:57:73:1a:41:01:cd:92:3a:50:bf:ce:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AC:8A:43:5B:7E:F1:D7:53:C0:89:35:34:AB:C1:89:CE:A9:68:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A109C646850711F1BF2CED19CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.120.0/21
45.194.12.0/23
45.194.114.0/23
45.194.118.0/24
45.195.133.0/24
45.195.148.0/23
45.195.202.0/23
45.196.225.0/24
45.196.227.0/24
45.198.228.0/23
45.201.102.0/23
45.203.33.0-45.203.34.255
45.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d8:93:c7:5f:85:45:20:a3:82:ce:69:b9:33:ae:e6:19:6e:
23:1c:12:08:8b:e7:02:af:30:e2:9c:fb:a8:f4:6b:73:1b:17:
03:ae:2d:0a:17:c7:22:f2:92:44:96:ab:25:8a:89:f5:e1:fe:
e5:b2:82:3e:4e:20:57:b5:bb:bd:d8:ea:54:b0:6e:48:46:18:
e7:f5:2a:f3:bb:98:91:52:34:8b:10:43:04:cd:53:da:9c:dd:
55:f9:98:ee:d0:8c:2a:4f:db:b8:a6:ae:20:f2:9e:87:c5:9e:
78:3d:8b:93:4f:96:5a:59:6f:47:f1:57:85:48:fe:dc:9f:e9:
9d:42:c0:ac:97:34:67:32:4f:7c:23:fe:9b:ff:69:81:97:e3:
46:83:c6:99:88:eb:c8:30:cb:e2:e5:5f:e5:88:36:a6:4b:9e:
dc:eb:78:a4:f8:bc:17:7d:6e:67:9f:ea:f1:c7:5c:8e:ee:ec:
0d:1f:6a:54:40:39:e0:19:ad:05:cf:86:e3:8b:2b:2c:82:13:
ad:ff:17:86:90:77:fc:31:de:aa:0d:46:70:dd:a7:18:f0:cc:
78:ac:2f:62:6c:fd:a4:49:b7:70:c2:16:94:7a:b4:c5:bb:48:
44:02:2d:ae:16:9e:5d:cc:75:3c:76:0d:31:66:74:ee:2f:76:
40:51:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:44 2026 by rpki-client