Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D67AC02A845111F19BFF04C2CE1D38B0.roa
File: D67AC02A845111F19BFF04C2CE1D38B0.roa (raw, json)
Hash identifier: VykTonPFVK940EwGVpzBh1wtLdezaPnPUFsOViScFFI=
Subject key identifier: 86:69:E6:66:B0:79:8B:DD:44:F2:26:25:6B:74:CC:05:DC:72:CA:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C68B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D67AC02A845111F19BFF04C2CE1D38B0.roa
Signing time: Mon 20 Jul 2026 15:44:05 +0000
ROA not before: Mon 20 Jul 2026 15:44:01 +0000
ROA not after: Sat 23 Jan 2027 15:44:01 +0000
asID: 149430
IP address blocks: 45.192.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116363 (0x1c68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 15:44:01 2026 GMT
Not After : Jan 23 15:44:01 2027 GMT
Subject: CN=6a5e4245-5c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:02:45:30:07:c2:04:8a:ed:72:cb:5d:6e:
26:c5:28:9a:7f:2b:e7:27:84:2e:5b:fb:a3:83:4e:
a0:6f:5c:db:fa:31:e0:c7:0b:4f:ac:c1:88:af:d8:
05:f3:8d:07:f9:d2:d2:57:ff:f8:f3:e4:12:b8:c2:
a2:34:8e:e1:fe:4c:aa:89:18:cc:09:86:ac:73:85:
13:86:80:cb:15:60:9d:48:92:27:c7:59:b3:3c:71:
f1:00:a3:17:30:58:a1:17:89:10:be:54:90:17:a4:
8c:55:e8:f4:0e:01:73:35:d3:c8:e7:0f:41:1b:a4:
14:2e:5c:76:b1:d5:d5:64:7c:e5:94:03:66:0b:8e:
cb:ac:11:c5:be:8e:36:16:b3:7b:7a:56:86:a6:33:
16:62:87:41:67:fd:d4:52:4f:e6:a4:b1:3f:56:b9:
03:a7:a6:65:aa:4f:cd:3d:18:fc:4d:4f:aa:22:ad:
e2:98:b3:bb:a6:e8:06:68:f5:57:4d:b6:d5:7f:75:
f6:13:97:34:b2:72:70:e2:b5:02:97:6a:ca:bb:1c:
f7:69:01:89:6d:83:85:50:d4:cf:59:1a:71:56:a5:
96:ea:95:c6:09:82:fa:a8:b2:36:1a:34:72:3a:dc:
bd:6f:f4:07:9d:17:0b:6b:01:f3:28:c7:3f:2f:3f:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:E6:66:B0:79:8B:DD:44:F2:26:25:6B:74:CC:05:DC:72:CA:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D67AC02A845111F19BFF04C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.134.0/23
Signature Algorithm: sha256WithRSAEncryption
35:2e:77:a4:e9:71:4e:7e:f6:79:7b:47:e3:7d:8e:47:ed:82:
91:0e:b7:43:ee:e7:5d:85:01:47:fb:e2:17:47:bd:36:80:f9:
fe:29:43:65:30:e5:f7:d7:f6:79:d2:64:8a:ba:5a:00:f3:76:
64:90:f4:5d:2c:ca:b1:45:95:0e:97:78:85:61:37:02:8f:80:
73:a1:07:ed:7d:65:e8:3e:bf:7d:6d:14:50:fa:d1:4a:c9:dd:
0d:5a:78:ed:55:65:a5:c9:13:c8:2c:80:cd:62:e0:a5:cf:38:
84:1f:a1:74:4d:9d:01:16:e7:f4:66:d9:7c:67:60:cc:b1:11:
cd:8b:6e:97:78:61:b1:7e:29:5b:2e:a3:11:dd:9e:ff:11:50:
2b:f1:92:a2:c0:9a:69:d9:df:06:f8:49:e2:7d:53:a5:ed:f2:
fe:3d:89:b6:69:37:d1:33:9b:a8:d9:22:19:04:f8:a4:5f:dd:
18:56:be:cb:26:53:50:d1:80:77:8c:e9:b2:b9:bb:eb:5c:97:
76:ec:d0:29:e9:76:f0:fe:e2:ad:6b:65:90:f9:a6:05:c3:87:
05:de:57:f5:7a:b1:07:5a:2a:84:24:90:0c:aa:9b:aa:a6:21:
53:c3:f8:c7:e5:5e:52:8e:b7:73:9b:0c:16:89:6b:14:91:ff:
76:f1:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:47 2026 by rpki-client