Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E930A90E850111F18DAEF5F7CE1D38B0.roa
File: E930A90E850111F18DAEF5F7CE1D38B0.roa (raw, json)
Hash identifier: 0jaG5mQP2ZPfT3OvJygfSs4ChHvv/vM392turaIUe1w=
Subject key identifier: C4:14:58:E9:E1:27:F3:1D:0A:66:55:66:B2:49:B8:98:FF:99:C7:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C718
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E930A90E850111F18DAEF5F7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:44:28 +0000
ROA not before: Tue 21 Jul 2026 12:44:24 +0000
ROA not after: Fri 21 Aug 2026 12:44:24 +0000
asID: 271875
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116504 (0x1c718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 12:44:24 2026 GMT
Not After : Aug 21 12:44:24 2026 GMT
Subject: CN=6a5f69ac-124d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:e0:c6:d6:af:39:a6:6c:64:de:d8:50:51:
db:b9:de:ef:b1:39:9f:77:5d:25:37:4c:8a:dc:36:
fd:86:02:9a:d0:4c:e7:d4:70:37:e2:75:35:9a:b1:
49:2a:72:d0:4b:bb:db:23:1f:15:3e:6f:9a:76:04:
0f:e9:07:ed:a2:db:b9:d2:c2:59:72:29:55:bf:a1:
d1:69:58:8d:08:e9:3c:c1:ef:c3:14:b3:2a:57:b9:
e9:a2:ae:ba:c9:09:2c:21:12:ab:c0:3b:f0:73:5f:
0a:8d:de:02:19:43:b7:d7:40:ce:50:43:34:a8:20:
ce:70:07:b1:72:b3:4a:f7:08:35:10:e2:13:03:7e:
73:7f:50:77:e3:ba:d0:8f:11:69:0c:a2:2b:4c:08:
1f:99:7c:3f:b1:ff:3a:3d:d0:a9:fc:18:df:02:fe:
c2:02:ff:1b:36:bc:ad:61:0a:1b:01:ac:26:31:e5:
cf:5a:bd:6e:ca:46:83:c8:32:bc:d8:bb:d9:3a:6a:
21:77:00:65:40:9c:83:0e:67:e0:db:74:79:e6:e8:
a6:e3:04:52:11:d0:2a:b2:fe:49:1e:59:c1:05:33:
0e:59:af:b1:df:51:39:26:ff:13:a9:50:b7:aa:61:
17:af:ab:31:45:39:e7:ce:b0:2c:d2:7c:f1:a1:ea:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:58:E9:E1:27:F3:1D:0A:66:55:66:B2:49:B8:98:FF:99:C7:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E930A90E850111F18DAEF5F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
77:61:82:a5:5d:7d:0e:d5:a5:17:e6:af:40:38:b6:31:ca:60:
2c:b7:c2:e2:25:2c:b8:54:fe:0d:36:35:32:41:ae:a8:6c:92:
04:f0:d7:c5:fe:e5:27:e0:89:34:20:ef:ef:8a:c3:77:50:27:
dd:f8:dc:4e:63:0f:89:71:2e:fd:bf:fd:84:18:b0:14:c9:c7:
3d:8a:a8:4b:40:9d:27:13:71:ff:9d:0f:85:53:9a:46:a4:c3:
37:8a:7b:87:ec:fb:aa:4e:98:da:db:c7:d0:04:47:d9:e5:4f:
ed:c8:83:3f:74:aa:cc:3c:d3:fd:bf:a4:b4:4d:d7:7e:4a:9d:
56:79:8e:c9:32:e2:60:36:81:e0:ef:7c:b5:21:10:2c:ff:94:
de:d5:ec:19:60:6c:c4:38:96:bc:ec:d1:12:72:7f:0b:17:bf:
a3:51:9c:d5:43:e8:40:50:5a:0d:b7:0a:dd:27:19:5c:b4:73:
61:fb:af:9e:8f:85:20:3a:fe:34:7a:1c:31:42:62:ce:17:d2:
38:0d:05:b9:19:cf:d9:ce:68:ae:6c:1d:04:e0:bd:bd:cb:19:
df:49:1a:90:3e:3f:7b:d6:ed:7d:53:5c:e5:06:67:9f:b1:05:
01:3d:7f:9a:77:d1:01:76:63:36:85:e9:93:98:56:40:76:23:
a8:0e:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:44 2026 by rpki-client