Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56F799D688BB11F19EA221BBCE1D38B0.roa
File: 56F799D688BB11F19EA221BBCE1D38B0.roa (raw, json)
Hash identifier: Aj4712OMgbpk1BczxZQOmfhoYZmhTFZbEUdxbgmI4Rs=
Subject key identifier: E5:35:AD:16:3C:5F:35:17:89:17:F7:91:A1:ED:8F:3C:A5:AA:45:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C804
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56F799D688BB11F19EA221BBCE1D38B0.roa
Signing time: Sun 26 Jul 2026 06:29:23 +0000
ROA not before: Sun 26 Jul 2026 06:29:19 +0000
ROA not after: Wed 26 Aug 2026 06:29:19 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116740 (0x1c804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 06:29:19 2026 GMT
Not After : Aug 26 06:29:19 2026 GMT
Subject: CN=6a65a943-d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:c5:37:77:40:bd:9d:4c:1b:96:4a:00:37:
31:74:91:87:41:d6:26:71:19:94:1a:ef:03:8f:da:
e5:0a:63:21:47:c0:76:db:fb:5c:cc:b6:be:4e:c1:
78:a7:0b:b2:c1:62:e3:c9:25:f1:c8:da:78:d3:6a:
88:60:e1:e1:b6:e9:4a:ee:a5:79:a6:bb:d9:6f:fa:
af:a1:fb:c1:22:c7:45:74:51:ca:fe:76:4b:0c:35:
51:6b:cb:b8:aa:b6:dc:ec:de:60:a1:4c:e0:d2:45:
cc:b3:f3:1c:82:b7:3b:55:93:33:84:ea:74:da:09:
ff:76:9b:5d:ba:33:fb:a2:ce:18:fb:5b:0d:6c:86:
2f:63:2c:a5:ca:b8:a7:de:20:c8:fc:28:09:05:35:
37:b6:ec:e9:41:fa:d1:92:56:bc:4c:c9:ba:8e:4a:
bc:71:83:b2:09:d3:09:89:9e:77:14:a6:a4:e3:52:
7c:a7:59:1d:9e:6f:98:18:59:e6:1b:07:1b:dd:8f:
e8:27:3a:9d:ae:e3:c4:6a:13:25:77:c4:34:ab:2a:
0b:23:33:4f:05:04:36:9f:2d:ff:fa:d5:43:32:33:
06:de:3b:61:8d:2e:0c:4f:7b:b3:4d:4e:ad:f8:a0:
11:7f:24:0c:18:6e:2d:aa:a2:39:db:9f:66:f7:a6:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:AD:16:3C:5F:35:17:89:17:F7:91:A1:ED:8F:3C:A5:AA:45:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56F799D688BB11F19EA221BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7a:c0:7e:a5:d3:01:4a:e6:67:96:1b:97:ea:29:c3:08:f8:
52:56:5c:20:f9:5f:bb:09:a8:b0:b8:b4:5d:47:5a:0e:e0:b0:
90:cc:33:86:44:be:48:5c:59:d2:62:e0:fe:b7:d4:e6:da:12:
9b:17:e0:85:b2:e1:31:6b:bc:0d:ca:31:55:12:57:b8:68:c1:
4b:36:32:f6:15:32:ff:59:39:42:27:c2:5d:0a:45:be:8d:e0:
41:e1:43:a5:68:49:c4:b2:f7:fa:15:b7:28:01:c8:f8:ff:f0:
a5:d0:5c:29:b2:6b:e0:e7:ef:6b:85:74:1d:79:3e:06:01:b2:
a3:ba:cc:f5:7c:dd:15:0a:e8:3d:b4:80:03:68:3d:13:ef:2b:
fb:07:e4:9e:af:20:a8:f1:7b:5b:7d:7f:f0:f9:5f:c5:5d:b1:
75:aa:16:52:e7:25:db:9c:c5:93:db:86:7a:e5:13:a7:e8:c4:
22:e3:d8:39:3c:08:87:b6:81:21:ce:89:14:8a:43:d5:35:2e:
ef:7e:e9:7f:0b:c5:d1:43:6a:25:ed:fa:07:08:f4:23:a9:9f:
46:8b:01:22:ef:fc:11:43:94:71:62:28:f7:85:a0:5e:ea:73:
a2:b0:22:32:46:d3:1b:ef:17:91:30:4c:76:0a:6d:93:54:cd:
89:9c:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:05:02 2026 by rpki-client