Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD1F41D684DF11F18F5DEEB0CE1D38B0.roa
File: FD1F41D684DF11F18F5DEEB0CE1D38B0.roa (raw, json)
Hash identifier: IwhV8JnLTVjMj0N86BKgGqf5gUuQb3FnzWXCVgVooR4=
Subject key identifier: 42:98:3D:75:DD:28:E2:FA:1F:F3:B0:F0:11:EA:03:D1:D5:C0:51:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD1F41D684DF11F18F5DEEB0CE1D38B0.roa
Signing time: Tue 21 Jul 2026 08:41:39 +0000
ROA not before: Tue 21 Jul 2026 08:41:35 +0000
ROA not after: Thu 27 Aug 2026 08:41:35 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
45.197.240.0/20 maxlen: 24
45.198.185.0/24 maxlen: 24
45.198.186.0/23 maxlen: 24
45.198.192.0/24 maxlen: 24
45.203.139.0/24 maxlen: 24
45.203.196.0/23 maxlen: 24
45.203.198.0/24 maxlen: 24
45.203.210.0/24 maxlen: 24
45.203.221.0/24 maxlen: 24
45.203.222.0/23 maxlen: 24
45.203.244.0/24 maxlen: 24
45.205.85.0/24 maxlen: 24
45.205.110.0/23 maxlen: 24
45.205.132.0/24 maxlen: 24
45.205.151.0/24 maxlen: 24
45.205.154.0/24 maxlen: 24
45.205.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116394 (0x1c6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 08:41:35 2026 GMT
Not After : Aug 27 08:41:35 2026 GMT
Subject: CN=6a5f30c3-9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:89:98:e6:dd:59:6a:aa:16:86:ca:62:c2:
cb:ae:ca:8c:02:22:1f:93:92:ae:93:a6:38:fe:89:
e1:9c:2d:f1:b2:3d:53:ec:6c:a5:f5:71:8e:bd:60:
33:62:71:7f:d6:6b:e0:9c:15:0c:79:9c:e1:4b:10:
cb:ce:dc:f9:52:ed:ec:02:57:90:19:e4:50:c7:5a:
3e:31:78:de:b7:fc:8b:be:c0:86:0d:ea:56:50:b1:
94:7e:98:c0:f4:f9:8b:4e:2f:f6:41:42:e3:56:8c:
fe:4a:02:3c:24:88:31:6f:68:51:f7:ba:8d:2e:d0:
5a:ec:7a:bc:ae:d0:0e:bc:5a:6f:bd:cb:c3:82:e4:
df:e1:27:1f:fa:68:9b:45:df:77:9c:eb:4c:80:36:
e0:81:fe:3a:5a:e1:5c:e0:7f:7d:fe:dc:1c:d2:41:
34:16:41:13:0f:33:bf:75:6d:2d:55:7a:0b:38:39:
ef:85:6e:c3:e2:fb:19:27:2c:69:2d:9b:8c:35:6f:
6d:b7:08:ac:29:fc:9e:a8:a2:75:df:5e:58:f6:fb:
14:4d:b8:87:b8:28:08:3e:e8:94:d0:ae:34:ad:82:
8a:2a:59:f2:a6:e9:af:f8:40:d0:ab:0b:9a:0e:ff:
23:eb:46:c7:c0:e4:af:ce:2f:35:a1:06:44:e5:1f:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:3D:75:DD:28:E2:FA:1F:F3:B0:F0:11:EA:03:D1:D5:C0:51:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD1F41D684DF11F18F5DEEB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
45.197.240.0/20
45.198.185.0-45.198.187.255
45.198.192.0/24
45.203.139.0/24
45.203.196.0-45.203.198.255
45.203.210.0/24
45.203.221.0-45.203.223.255
45.203.244.0/24
45.205.85.0/24
45.205.110.0/23
45.205.132.0/24
45.205.151.0/24
45.205.154.0/24
45.205.172.0/23
Signature Algorithm: sha256WithRSAEncryption
24:d7:6e:7b:17:6a:aa:45:af:a9:2f:d2:9b:52:43:96:00:ea:
f9:9b:60:39:4e:71:c9:e9:24:49:07:09:b5:79:35:17:c4:67:
a2:fe:44:e0:7e:3b:2d:6c:e7:09:1a:69:4a:f3:2f:79:34:ed:
16:e0:c2:cf:a9:92:dd:72:37:23:ea:1a:ea:45:28:3f:e8:74:
65:db:83:6a:40:59:82:e0:09:02:d1:53:12:4a:0d:24:11:8b:
36:57:55:96:f1:d4:fa:d9:8d:b1:88:59:d0:e2:8a:12:1c:33:
b2:00:d9:f1:60:00:4e:ca:4e:90:e4:cf:d7:d6:b2:10:ba:83:
70:43:45:98:54:d5:bb:fd:85:f6:d4:74:3d:21:8d:dd:b7:68:
0d:29:0d:d3:cc:ec:8c:66:b3:c0:ce:04:d0:a8:37:3f:aa:a0:
9d:59:6c:cf:1b:8f:88:df:d5:a9:5e:08:62:33:15:f4:0e:8e:
4e:04:3c:fb:8f:2d:6f:20:89:39:c6:f2:d5:df:f0:b2:8f:a8:
f0:56:4e:d4:c1:db:b3:f9:6e:e6:e3:86:bd:2e:48:86:48:95:
86:88:06:80:2f:64:89:2a:02:5a:ce:37:93:6a:6a:13:34:5b:
34:0d:c9:b3:99:59:d9:19:7d:49:f1:9c:6d:2e:81:e9:40:ee:
85:12:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:51 2026 by rpki-client