Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6CE43485F711F1940C74CDCE1D38B0.roa
File: AA6CE43485F711F1940C74CDCE1D38B0.roa (raw, json)
Hash identifier: 1ne+Rw1WBW8kGbhKy/koIfFQ0jW4KsxPz26RLEhUL34=
Subject key identifier: CE:CF:B9:3B:AF:7D:9F:12:8D:EC:D1:4A:76:F6:57:3E:78:0F:87:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C789
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6CE43485F711F1940C74CDCE1D38B0.roa
Signing time: Wed 22 Jul 2026 18:03:39 +0000
ROA not before: Wed 22 Jul 2026 18:03:35 +0000
ROA not after: Wed 09 Sep 2026 18:03:35 +0000
asID: 63099
IP address blocks: 45.192.238.0/24 maxlen: 24
45.192.239.0/24 maxlen: 24
45.194.1.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
45.196.195.0/24 maxlen: 24
45.198.183.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
45.198.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116617 (0x1c789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 18:03:35 2026 GMT
Not After : Sep 9 18:03:35 2026 GMT
Subject: CN=6a6105fb-875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:6e:5f:70:c1:73:c9:33:d3:49:3d:76:34:
14:9a:43:97:95:fc:b0:ce:56:f9:98:7e:b5:a3:89:
f7:67:76:24:fa:ea:4c:54:ad:59:2f:a8:be:80:d0:
df:5e:53:69:43:08:8e:f7:3c:62:e2:a4:6d:61:3a:
3b:e3:bb:ce:9c:7b:90:98:f0:74:ad:b4:98:d2:96:
ff:3c:92:e0:07:28:c5:bd:a3:5a:27:60:f9:5f:2c:
24:9a:0b:f0:1f:ed:95:49:8f:23:43:3a:53:c1:7f:
7a:85:05:e7:18:fe:85:48:24:81:9c:4d:94:02:c9:
86:1f:f1:c3:1d:1d:0a:51:f2:3a:a9:b1:36:72:01:
4f:07:3f:02:2c:20:95:57:5f:d5:26:de:af:0d:14:
22:22:56:93:e5:65:8f:c3:31:0f:21:bc:c0:88:f0:
22:7f:b3:f3:47:18:e5:b1:d1:b3:c0:a2:d1:56:f1:
7a:0f:cd:c3:fe:fc:14:26:39:ad:1a:8f:0d:98:1c:
13:ee:19:bd:f4:aa:d3:96:cc:d6:e9:28:4f:bd:6a:
80:5e:9e:a5:c2:0d:78:ed:38:6e:7b:1f:84:23:15:
6c:78:c2:94:37:01:df:c5:f2:11:39:2a:a7:ae:b7:
b5:ae:85:af:f3:9a:14:76:6e:ce:2e:ac:68:10:4f:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:B9:3B:AF:7D:9F:12:8D:EC:D1:4A:76:F6:57:3E:78:0F:87:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6CE43485F711F1940C74CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.238.0/23
45.194.1.0/24
45.194.4.0/24
45.194.24.0/24
45.195.63.0/24
45.196.195.0/24
45.198.183.0-45.198.184.255
45.198.230.0/24
Signature Algorithm: sha256WithRSAEncryption
67:44:e6:ec:59:27:c0:5b:16:b4:5b:d5:c0:54:e4:ec:ce:46:
2f:92:27:90:ad:00:57:65:37:a1:07:22:a1:ee:38:51:90:63:
75:65:86:26:11:b4:a1:b5:8c:fc:0a:28:62:c0:21:db:6d:c6:
41:3a:48:80:04:b8:ab:06:f7:b5:9d:1b:01:7e:66:86:82:5a:
38:26:85:5b:42:5d:d9:0a:38:36:32:c7:9c:f1:d5:63:c2:c2:
0d:7d:1a:cf:c3:65:49:56:d7:29:35:0d:72:bd:56:34:ac:1b:
f7:59:94:67:f9:9d:14:03:46:df:e2:b3:d1:06:f8:3a:29:23:
3e:99:75:e6:1e:1c:6e:0d:a1:84:cc:39:3f:93:9a:18:45:a3:
7c:ef:9a:3a:92:86:fd:55:5f:48:b0:d3:97:11:54:e9:a0:85:
5d:48:a9:92:46:98:d4:7a:44:7e:6c:42:8e:6f:28:9e:65:eb:
27:49:47:dc:7a:4d:ec:5b:06:dc:ea:ab:f2:28:44:54:d3:2c:
b4:49:29:f6:dc:28:9e:12:a1:14:af:b8:f3:39:f6:b2:d5:73:
51:4d:cf:7c:f0:c9:e7:e0:d4:d0:f3:00:3c:cd:bb:aa:db:83:
7e:0a:ba:d7:40:28:0a:dc:8e:43:1b:ea:2a:b5:8e:4b:54:31:
59:0e:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:22 2026 by rpki-client