Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66AC33FC880A11F1A584DFFECE1D38B0.roa
File: 66AC33FC880A11F1A584DFFECE1D38B0.roa (raw, json)
Hash identifier: UC68KmoybWRvQMVjLoKK/GU3C0d3qdLXzF/8BbCZCgo=
Subject key identifier: 7C:22:78:A4:8C:FC:E6:73:9C:9B:0E:85:03:8D:15:03:CD:CF:D2:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66AC33FC880A11F1A584DFFECE1D38B0.roa
Signing time: Sat 25 Jul 2026 09:22:48 +0000
ROA not before: Sat 25 Jul 2026 09:22:44 +0000
ROA not after: Wed 02 Sep 2026 09:22:44 +0000
asID: 135222
IP address blocks: 45.195.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116731 (0x1c7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:22:44 2026 GMT
Not After : Sep 2 09:22:44 2026 GMT
Subject: CN=6a648068-220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:a1:fd:a7:8a:18:88:cd:96:c7:80:d8:45:
18:ea:c1:33:76:65:e5:f3:fa:37:a3:10:bd:5e:a9:
c8:b6:68:3c:3f:1e:0b:c4:ee:f4:97:78:a2:78:e4:
60:c4:c1:4f:3b:d8:7f:b7:38:be:7b:8b:22:43:8f:
b4:cd:0c:c4:16:4b:44:39:20:67:8c:20:45:d9:c8:
3f:75:12:71:74:50:26:85:4f:3e:bc:c0:88:fd:e9:
67:fc:ad:2f:e7:bd:0b:7b:4b:33:1e:93:95:4a:49:
f5:9b:73:0b:50:0d:7d:e9:25:8d:d5:68:96:2d:88:
50:5b:15:0e:34:df:1c:f9:35:27:8c:5b:bb:f7:d9:
fa:46:3d:85:f4:55:19:97:69:bb:df:62:dc:80:f2:
8d:1a:1f:82:09:50:46:83:06:1e:a6:df:da:4a:f4:
08:29:5f:9d:b0:c1:17:e6:36:64:b0:ca:3d:41:2a:
aa:24:19:09:9d:70:e2:46:c0:53:f0:4e:ff:f9:05:
2f:74:0c:3c:25:53:48:7c:3e:65:72:f4:60:ba:7d:
23:75:b5:9e:7e:bd:61:da:bc:94:88:39:ea:bf:07:
f4:6f:2d:f9:e0:97:69:fc:e6:e9:bc:b7:5f:9f:30:
11:6f:b5:c3:06:25:84:91:ab:2d:b3:55:34:37:ce:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:22:78:A4:8C:FC:E6:73:9C:9B:0E:85:03:8D:15:03:CD:CF:D2:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66AC33FC880A11F1A584DFFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.159.0/24
Signature Algorithm: sha256WithRSAEncryption
56:51:03:67:f4:55:91:e2:99:ee:e8:7e:88:ba:03:c9:6d:5d:
20:1f:ec:ef:bd:fd:12:21:e3:93:b8:48:b8:c0:ec:57:2d:83:
f9:ea:3a:33:62:c5:d1:de:4d:39:c8:84:d9:f1:a8:9d:71:d0:
80:9c:89:92:13:40:b6:e9:79:00:c1:49:7b:ef:91:03:64:51:
ec:fe:08:dd:1a:64:98:d3:62:e1:bf:2f:4a:1b:b3:9a:f7:21:
56:88:bf:8e:08:80:2f:b7:28:15:3d:6c:49:4f:6d:41:f5:4a:
96:0e:0d:01:43:92:ce:63:60:1b:42:80:48:33:06:77:1b:5f:
48:b4:fd:a3:f0:e7:f6:4a:ba:ad:8b:49:cd:ff:8e:a1:be:10:
94:ed:f7:49:74:60:c2:ff:f8:eb:7c:7a:99:24:49:35:3f:89:
c0:3a:64:8d:a6:05:4d:0c:92:56:66:89:de:1b:c2:4b:a1:30:
c7:03:7c:84:30:6e:da:3c:a3:41:8c:a8:b2:29:b4:e7:2d:a7:
b3:b2:53:71:c4:94:4a:74:71:65:0e:92:38:99:4d:f3:02:b9:
81:a0:66:a6:9b:58:90:89:25:d9:12:e7:89:36:50:44:6c:a0:
e5:e5:0c:2a:56:06:7c:98:ea:88:28:fc:68:f9:1a:b2:77:0e:
d6:63:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:30 2026 by rpki-client