Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C12322C8A4C11F19807C5CACE1D38B0.roa
File: 5C12322C8A4C11F19807C5CACE1D38B0.roa (raw, json)
Hash identifier: SMdC0K7g1xi6UIFCntQiQ4voO55wN18StkJuZXmW1uc=
Subject key identifier: 65:42:90:3B:55:6C:D0:9F:30:C8:B6:BA:0B:4D:BF:68:5F:27:07:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C82E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C12322C8A4C11F19807C5CACE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:19:59 +0000
ROA not before: Tue 28 Jul 2026 06:19:55 +0000
ROA not after: Sun 23 Aug 2026 06:19:55 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116782 (0x1c82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 06:19:55 2026 GMT
Not After : Aug 23 06:19:55 2026 GMT
Subject: CN=6a684a0f-c49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:12:69:f6:13:b0:cc:34:f8:4f:d7:f8:f1:
35:1f:13:ba:a4:42:a3:eb:4d:86:26:f7:8c:bb:ac:
48:58:60:7f:fc:0a:60:23:ac:c0:50:a7:04:f3:94:
a2:b1:b1:6c:89:9e:34:0f:14:f7:8b:92:e0:20:4b:
17:7c:49:d8:71:bb:4e:61:67:69:17:5f:0c:a8:8a:
a0:87:51:3d:f7:30:21:30:e6:99:f1:6c:d2:73:f3:
82:1e:5b:53:5f:3c:46:d9:64:2b:56:ea:df:a3:f2:
37:3d:e8:3f:e3:0e:52:39:a1:e1:f8:fe:e1:93:92:
23:3a:2c:ae:4b:74:49:fc:7b:50:d2:3f:6e:fc:0f:
86:fa:8b:64:4e:a4:5b:f9:97:22:bd:20:a9:fa:10:
4f:f4:f7:8a:02:fb:73:2e:12:7f:89:dd:e9:52:b7:
10:3b:59:15:a3:b2:2e:c5:f8:1f:cb:7a:dd:99:5d:
b4:63:b8:b6:56:f0:6c:2d:58:47:da:dc:dc:5a:63:
54:b8:81:22:1c:89:fd:02:ac:8c:1b:fe:43:13:6e:
cf:89:32:ac:f8:a4:cf:c4:b4:b8:9c:2f:48:0e:22:
6e:6d:ad:bf:27:3e:38:bc:0e:c4:3b:94:7b:29:1e:
a1:e4:31:64:99:9c:36:97:5d:8f:59:9e:7f:33:54:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:90:3B:55:6C:D0:9F:30:C8:B6:BA:0B:4D:BF:68:5F:27:07:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C12322C8A4C11F19807C5CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:50:e9:cc:58:c5:ab:56:32:d7:13:1b:04:3a:ed:1e:fa:b7:
d3:fd:a3:3a:a8:bb:9a:6e:9b:39:6d:e4:ee:9b:b9:9e:e4:ac:
1e:82:d2:8f:b2:85:a7:ea:2b:bc:46:6f:02:22:93:7f:98:5e:
b7:ba:7d:b6:53:04:c3:93:db:49:0c:60:33:e8:c0:9e:ab:ec:
01:26:d8:2a:87:50:89:0c:35:c7:57:85:07:43:13:fe:5d:61:
ee:9e:cb:e9:1d:25:7d:9e:bb:af:06:b4:ff:d5:da:42:3f:5e:
c0:18:70:d6:f9:d6:09:86:fb:02:8d:b6:ef:d0:ba:e1:de:5c:
97:b6:b0:ea:ff:f7:ec:b4:64:a1:de:09:5f:77:3d:7b:86:80:
bd:38:40:70:12:9c:d5:41:31:e9:46:e5:f9:39:81:14:71:0b:
b4:7a:ee:41:d1:32:ec:a6:80:f9:9c:f6:1a:56:ea:a2:db:0e:
b4:62:07:69:d2:78:87:0f:d5:72:5d:98:92:ff:b7:86:21:85:
bf:74:13:05:09:84:8a:b1:be:73:fc:55:fb:de:c4:05:7c:ff:
f0:68:9e:ff:72:ad:9f:6f:0e:a7:da:48:cb:40:b4:08:95:0a:
4f:04:6e:85:57:03:66:04:c0:b8:aa:8b:0d:70:2d:18:4f:fd:
e5:70:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:20 2026 by rpki-client