Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A96FE31E84F911F1B8E75BC7CE1D38B0.roa
File: A96FE31E84F911F1B8E75BC7CE1D38B0.roa (raw, json)
Hash identifier: qyxBN4tw5fuLwlgQxvfXutN952aVKXRDTtLwQwkvdxU=
Subject key identifier: D3:78:E3:C9:F7:B0:4F:5A:B1:EC:69:86:E2:69:C2:FF:6E:F3:6D:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C704
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A96FE31E84F911F1B8E75BC7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 11:45:25 +0000
ROA not before: Tue 21 Jul 2026 11:45:21 +0000
ROA not after: Wed 09 Sep 2026 11:45:21 +0000
asID: 401783
IP address blocks: 45.192.236.0/24 maxlen: 24
45.196.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116484 (0x1c704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 11:45:21 2026 GMT
Not After : Sep 9 11:45:21 2026 GMT
Subject: CN=6a5f5bd5-d526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:41:cd:00:9d:e6:3d:5c:ce:dd:ac:55:5c:
64:44:39:0e:15:dd:24:7b:42:d7:33:cb:02:10:f6:
63:e2:46:fb:ce:cd:3e:98:13:46:05:13:f7:54:8d:
ba:5f:0c:8f:85:e6:b2:f2:c9:8e:23:f7:39:1c:be:
bc:20:87:6e:d2:a0:70:52:dc:38:b4:bc:5f:f3:1d:
31:17:a9:ee:1b:26:2c:fb:a3:61:f6:27:06:3d:75:
f9:8e:ac:5f:b4:1a:24:d9:43:ff:ba:af:8a:9b:3f:
df:60:4c:99:c6:fe:93:c1:14:90:aa:97:c5:1e:68:
5e:2d:15:5c:1a:f9:4b:10:02:69:be:fc:62:c7:31:
c1:0c:dc:5a:b9:cc:c5:69:20:05:db:df:fe:2c:a1:
38:a5:33:be:bf:b6:5b:a2:0e:35:73:32:ff:cf:4b:
9d:0b:72:b4:d9:bf:b7:b5:db:3b:3d:49:0f:53:8c:
f6:e0:31:f7:1e:32:3f:72:a0:eb:69:f0:08:11:52:
90:cc:ba:1e:27:6a:34:24:9e:b1:21:bb:90:58:99:
28:fe:47:ef:f7:62:a1:28:9d:c3:9a:3f:ad:23:04:
84:88:31:5a:18:32:4d:dc:41:fe:69:f9:fa:19:53:
5a:4d:3e:96:94:d4:95:f1:e4:cc:71:92:67:99:35:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:E3:C9:F7:B0:4F:5A:B1:EC:69:86:E2:69:C2:FF:6E:F3:6D:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A96FE31E84F911F1B8E75BC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
45.196.194.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a4:0f:ac:7b:2c:ae:25:74:96:ac:7a:52:af:60:42:d5:34:
86:bf:a9:8f:e0:09:a0:88:17:18:f6:e2:5c:99:8b:f0:c8:f0:
47:cd:6e:05:86:98:75:e7:63:dd:26:bf:f0:d9:25:13:96:10:
da:73:ec:6d:15:65:0c:57:69:5a:7f:75:e4:e0:64:8a:44:e7:
aa:6f:58:c4:20:89:dd:70:25:66:ce:2d:f6:2e:19:3e:0e:ee:
f2:5b:1f:64:fd:61:c4:c1:be:e6:86:5a:9a:5d:63:fb:9e:7d:
36:71:26:6e:69:e3:26:d5:7a:dd:58:f1:09:2a:fa:02:87:29:
31:7b:8f:1b:aa:a9:61:b7:83:d1:ab:c4:1a:8b:f5:bd:c9:2e:
0b:9c:1c:49:0b:8e:0c:1b:bf:98:f6:5c:a5:de:a1:a6:76:ed:
e1:08:e9:1c:e8:be:de:02:66:15:72:9f:4c:b1:a0:ad:8b:68:
4c:e8:a3:8d:fc:2a:28:6b:24:68:d5:2d:24:c1:77:2c:af:a1:
00:d9:f0:84:33:66:9b:2a:21:4c:2e:09:0f:4b:2f:22:ec:12:
57:98:25:b8:8a:c2:67:2f:59:4e:74:7c:e6:64:7f:c3:c5:0f:
6d:69:64:5a:ce:85:17:f6:c6:8a:c1:6d:cb:69:a9:35:53:e8:
8b:f0:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:14:09 2026 by rpki-client