Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70C688D08A5611F1A5AD3C05CF1D38B0.roa
File: 70C688D08A5611F1A5AD3C05CF1D38B0.roa (raw, json)
Hash identifier: fKRv1rjMsgyoS6TI8ae34XCqBV0b40QT8WrQE1Wd8VI=
Subject key identifier: E8:AC:A2:0A:B0:FD:E0:FC:47:75:AA:82:C0:3A:53:34:A6:1A:6B:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C844
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70C688D08A5611F1A5AD3C05CF1D38B0.roa
Signing time: Tue 28 Jul 2026 07:32:09 +0000
ROA not before: Tue 28 Jul 2026 07:32:05 +0000
ROA not after: Sat 15 Aug 2026 07:32:05 +0000
asID: 134824
IP address blocks: 45.192.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116804 (0x1c844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 07:32:05 2026 GMT
Not After : Aug 15 07:32:05 2026 GMT
Subject: CN=6a685af9-07fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:8f:8c:a0:24:73:f4:89:0c:ff:0f:b0:51:
03:59:37:dd:d8:48:49:4f:c5:ad:b6:59:ae:a0:ce:
d0:be:a5:6c:2b:b9:f9:48:74:8f:fc:3b:ec:a3:94:
86:ec:0c:71:d4:fe:f5:c0:16:32:b4:4d:69:33:7c:
90:4a:e6:77:6f:31:cb:9a:7e:cd:e7:01:39:18:62:
86:45:cb:eb:89:7e:09:83:71:39:23:87:71:2a:c3:
bd:87:7f:e2:6c:c9:04:8d:d0:19:ee:d2:83:cb:05:
25:d3:4c:57:a4:02:36:f9:2a:4b:a6:f0:9e:c4:27:
18:2f:e7:c9:c9:ca:65:59:49:41:1b:29:fd:3e:8c:
1e:60:3c:07:b3:3a:7c:81:9c:bf:5a:76:b4:d2:a2:
76:a9:f6:93:64:15:c1:07:5f:87:ae:85:60:4c:41:
40:34:0b:33:22:ec:3d:47:36:4e:88:8c:d9:e1:b9:
d6:4d:f9:41:61:18:85:dd:dc:ec:07:b0:e8:3b:eb:
30:2b:af:7c:bf:97:22:72:04:54:1f:d1:d3:ca:1f:
65:7d:90:c4:b6:64:76:b2:aa:ed:04:84:6a:a4:c5:
a4:f3:8a:cc:92:bd:56:f7:63:3c:c4:e6:45:a5:a4:
db:b9:75:a1:29:42:20:25:14:81:a6:0a:cf:67:7d:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:A2:0A:B0:FD:E0:FC:47:75:AA:82:C0:3A:53:34:A6:1A:6B:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70C688D08A5611F1A5AD3C05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e4:cf:03:30:46:c9:2e:c0:94:cb:de:c1:2e:37:13:3d:e8:
65:da:db:34:8c:f1:90:cd:c8:07:0b:42:28:81:4f:b9:75:d4:
58:01:b0:d3:0f:62:e1:49:f2:90:3c:c0:29:cf:ba:42:16:96:
9e:ab:2b:a9:c7:ae:d1:ba:00:cc:0a:fe:63:e6:9d:97:16:d3:
a3:f5:84:d6:0e:0e:85:d8:ac:c9:33:32:1e:74:ad:18:cd:8c:
44:c8:7d:5b:0a:40:3e:25:35:16:2d:d8:5e:81:c5:2f:b9:64:
09:8b:78:dd:ed:8e:ba:8b:70:67:79:df:3d:b4:9c:15:47:b2:
38:e7:d7:31:f4:e1:c5:19:19:c6:14:f1:94:5e:67:03:82:58:
f2:af:9f:19:45:24:09:43:b8:47:75:0d:41:11:61:e0:d4:ae:
c7:d6:2c:f4:8f:0a:60:14:7b:f6:a2:f9:7e:06:12:f1:da:2e:
a8:c5:a3:12:a4:e0:29:5e:33:81:20:21:b8:a8:e4:25:8e:6f:
ca:5d:e6:c8:e1:86:13:5a:91:39:cb:da:f0:79:d8:39:da:39:
f0:0c:bb:75:ee:a9:39:f7:d1:7e:21:80:70:01:68:f8:69:f5:
2a:87:1b:c0:95:62:a0:4d:73:7f:93:40:50:90:89:ce:65:57:
e0:c8:05:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:29 2026 by rpki-client