Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02CCAEB48A6E11F1865B8014CF1D38B0.roa
File: 02CCAEB48A6E11F1865B8014CF1D38B0.roa (raw, json)
Hash identifier: F8b0K5qsbbeIeZjBR7JXJRY61PvMD7/TLKQVrMisuyE=
Subject key identifier: 4A:15:CB:A2:E1:5F:9C:1A:1A:4E:B1:03:F8:47:F0:AC:E2:52:51:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C85E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02CCAEB48A6E11F1865B8014CF1D38B0.roa
Signing time: Tue 28 Jul 2026 10:20:53 +0000
ROA not before: Tue 28 Jul 2026 10:20:48 +0000
ROA not after: Wed 07 Jul 2027 10:20:48 +0000
asID: 328888
IP address blocks: 45.197.172.0/22 maxlen: 24
45.202.56.0/22 maxlen: 24
156.229.68.0/22 maxlen: 24
156.229.96.0/22 maxlen: 24
156.242.72.0/22 maxlen: 24
156.244.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116830 (0x1c85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 10:20:48 2026 GMT
Not After : Jul 7 10:20:48 2027 GMT
Subject: CN=6a688284-a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:78:89:9a:ff:f7:f6:d5:5b:d2:ac:12:80:c1:
1a:d9:77:7f:b7:7c:0b:6f:13:47:c7:66:97:07:0f:
7e:6e:5f:f2:86:7f:c9:39:6e:2c:c6:a8:14:5f:53:
81:4f:32:04:c7:fe:e9:98:bb:0f:78:89:28:58:a9:
23:da:b0:f1:36:fa:ee:94:20:f8:15:2b:7a:06:0e:
22:93:9a:25:b9:eb:d6:61:88:24:20:5d:af:43:db:
54:84:71:52:38:00:31:a1:23:6e:63:82:93:40:82:
f6:e7:7c:93:24:db:13:37:e2:d6:ac:05:18:56:e6:
03:90:09:e3:67:6a:9f:8e:a7:2c:00:07:fc:47:bd:
5a:6f:5a:c9:b4:17:f5:88:90:45:ef:2e:cd:4f:1c:
0f:1a:07:1b:9b:54:f6:c1:73:f9:51:3f:00:88:10:
5b:2c:d0:46:74:b4:f4:3f:53:82:6a:55:3f:d4:f1:
79:b8:1e:63:0a:46:8b:cb:fe:3e:29:42:0e:d4:88:
39:0e:39:e0:7f:5e:dc:42:66:c8:e9:d6:75:1d:80:
09:65:4b:d5:5d:ca:b0:3a:06:30:2e:5c:97:19:23:
31:d7:7d:ea:18:88:94:ba:f3:69:ba:ba:58:7b:ea:
36:38:01:b4:57:6c:3c:74:59:ad:a4:93:6b:6b:28:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:15:CB:A2:E1:5F:9C:1A:1A:4E:B1:03:F8:47:F0:AC:E2:52:51:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02CCAEB48A6E11F1865B8014CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.172.0/22
45.202.56.0/22
156.229.68.0/22
156.229.96.0/22
156.242.72.0/22
156.244.204.0/22
Signature Algorithm: sha256WithRSAEncryption
20:cd:e9:eb:07:f1:b8:a2:12:cb:41:76:86:dd:1d:4e:61:45:
2d:12:a6:7e:8e:1e:c7:76:ed:b2:ed:91:06:09:5b:dc:6a:7a:
97:5d:6f:a4:25:97:6f:09:4a:9f:9a:70:c5:d5:02:b3:f9:21:
ae:de:3a:07:66:0c:e9:37:72:02:15:ce:4a:ab:d9:7c:de:da:
24:3f:e7:0e:11:39:1d:ba:63:69:e9:80:47:61:ba:6e:19:d3:
3f:60:ba:dc:72:5e:e7:58:ef:39:9c:1c:58:6c:45:bc:4d:34:
41:a6:25:ec:c3:b5:05:cd:0a:a2:3b:bb:bb:b7:25:57:88:a2:
81:59:f6:c4:1e:47:de:17:02:56:5d:57:5f:f8:72:74:9e:c1:
1b:c2:b0:a0:31:40:39:60:61:72:59:90:1d:27:47:2c:43:64:
85:35:51:bf:e3:5e:d5:0d:08:39:25:21:a8:98:4b:30:3c:4d:
64:91:d0:27:c7:e3:43:c2:de:1c:74:53:66:16:a0:95:42:fa:
3d:11:e4:3b:b6:96:34:6b:61:16:fe:d5:49:53:98:34:b5:cc:
f6:0a:02:f0:d2:62:3a:1f:bc:3a:b0:98:f2:69:03:ea:5a:f0:
cc:0f:c4:0d:08:2a:b2:82:58:0d:bd:7d:8c:da:4b:c1:4e:5b:
2f:7c:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:36 2026 by rpki-client