Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B78260BC842211F18FB9DDAACE1D38B0.roa
File: B78260BC842211F18FB9DDAACE1D38B0.roa (raw, json)
Hash identifier: cK2xzO4ppnlu+BKo9H4wnV70TV0TnEWMO57YXNEkIak=
Subject key identifier: B3:67:F9:D3:25:D7:38:A9:5A:79:2E:30:3D:E1:F9:B2:D3:C8:21:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C658
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B78260BC842211F18FB9DDAACE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:06:47 +0000
ROA not before: Mon 20 Jul 2026 10:06:43 +0000
ROA not after: Thu 27 Aug 2026 10:06:43 +0000
asID: 212238
IP address blocks: 45.195.150.0/24 maxlen: 24
45.196.160.0/24 maxlen: 24
45.196.163.0/24 maxlen: 24
45.196.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116312 (0x1c658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 10:06:43 2026 GMT
Not After : Aug 27 10:06:43 2026 GMT
Subject: CN=6a5df337-8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d9:ec:81:c6:21:6b:2b:6f:72:13:07:b3:89:
3f:b7:82:9f:9c:97:07:21:85:f9:90:68:c0:2a:46:
7c:b4:3d:f2:3d:f1:cd:f4:ef:68:c7:96:96:7c:0c:
33:11:67:60:61:41:01:7e:aa:2a:25:c3:17:f4:57:
7c:13:3b:8c:27:e3:27:4c:c8:ad:e3:10:14:21:91:
b1:e7:41:2a:8d:c8:3b:d9:ab:5f:f0:e3:d1:68:90:
a0:99:29:10:cb:67:a8:f3:aa:5c:20:6d:dc:ba:9f:
94:f4:be:48:4d:78:8e:fe:5c:a9:e1:8d:a0:a8:37:
55:58:97:22:93:82:49:2e:75:a5:36:d9:db:36:8d:
50:d9:3a:47:6d:f1:76:c9:23:c2:f8:c4:15:e2:36:
c8:7f:87:29:94:53:c5:c4:d6:97:1e:45:25:14:05:
33:de:04:12:98:a6:16:3b:ea:29:06:09:1c:40:ae:
50:aa:da:2b:5d:a9:1e:71:af:8a:cd:28:bf:14:0c:
8b:4f:dd:73:5b:41:f5:c0:00:d6:a7:30:7f:38:fb:
ae:d7:bc:08:95:54:03:39:1f:af:52:c0:7c:26:8e:
9e:96:fb:d4:9f:e5:07:40:e7:a4:8c:98:0b:f1:6c:
26:30:ff:4d:1b:06:0a:5b:70:a5:cd:69:7d:8b:a5:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:67:F9:D3:25:D7:38:A9:5A:79:2E:30:3D:E1:F9:B2:D3:C8:21:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B78260BC842211F18FB9DDAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.150.0/24
45.196.160.0/24
45.196.163.0/24
45.196.169.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4c:8d:c8:ca:4e:00:7d:77:f8:26:b9:ad:d2:9f:4f:fb:e3:
ff:dd:de:d0:6a:7a:9a:44:7d:25:eb:8d:c0:43:46:28:81:5f:
f9:28:5c:54:95:07:f6:69:a2:36:38:2d:fc:54:83:da:82:6a:
74:23:79:d2:40:80:0a:19:e7:c5:71:7a:d9:0f:04:09:df:fe:
28:7b:8f:fc:ed:72:0f:32:33:64:6c:ea:04:fd:d7:83:39:db:
85:54:a0:a5:e9:19:ed:44:7c:65:3f:ea:88:e2:00:da:92:eb:
2c:19:ad:94:1e:e8:f5:7c:e9:55:94:10:f2:8a:ff:50:45:9b:
7a:66:8f:82:b3:d6:5a:ec:29:56:22:c6:e8:6a:46:3c:cd:46:
d1:30:29:25:2e:88:9b:08:c8:32:99:22:89:0f:f3:9c:bd:4e:
85:b7:67:44:0e:a4:3f:ca:d5:53:80:fb:1e:87:b1:e2:1f:63:
0b:16:3f:c8:ca:29:bc:85:88:f5:88:4f:86:c0:29:b5:cc:9d:
a1:48:06:9c:67:8e:f0:17:71:cd:63:1a:ca:82:2d:22:72:be:
21:bb:f0:e6:74:9b:9a:4a:1a:c8:9c:74:b8:22:5f:70:fe:60:
0f:1d:64:a6:6c:26:0b:0f:e8:fc:d7:eb:7e:59:3b:eb:33:94:
26:85:cc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:50 2026 by rpki-client