Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85474E3E8A5B11F1B3C8ABA4CE1D38B0.roa
File: 85474E3E8A5B11F1B3C8ABA4CE1D38B0.roa (raw, json)
Hash identifier: k5nM1Tc1097LGIanUG0BSR2gGDuZrL5b4OLU/1bAodk=
Subject key identifier: 4A:9C:43:21:F6:0F:0E:CC:CE:C4:93:8F:C4:F4:89:97:50:C7:A0:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C854
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85474E3E8A5B11F1B3C8ABA4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 08:08:31 +0000
ROA not before: Tue 28 Jul 2026 08:08:27 +0000
ROA not after: Wed 23 Sep 2026 08:08:27 +0000
asID: 263242
IP address blocks: 45.192.133.0/24 maxlen: 24
45.196.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116820 (0x1c854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 08:08:27 2026 GMT
Not After : Sep 23 08:08:27 2026 GMT
Subject: CN=6a68637f-3ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b8:2a:0f:5c:a8:39:45:b8:19:04:a7:5b:a1:
50:44:e4:17:c2:68:f3:d1:96:05:0b:77:cd:d7:18:
e7:76:bf:89:39:f0:ec:c3:71:5e:d9:10:ff:91:d6:
e4:f1:4a:24:35:fa:a1:be:82:aa:97:e3:e0:5a:45:
a9:d4:fc:4b:48:61:32:1c:b5:2a:b9:9e:a1:c7:87:
07:86:e0:07:e9:99:a6:28:c2:9b:2d:60:df:cd:70:
f0:c8:37:0d:66:19:22:c3:c2:e9:ee:1d:c2:7d:c9:
c6:c6:6a:ac:8e:0b:28:09:11:57:53:5c:5f:1f:b3:
75:ce:8d:bb:45:86:c6:04:49:85:db:dd:ba:f2:e1:
c3:33:2d:e3:43:f4:2a:8a:57:fc:8b:78:9c:e3:4e:
39:61:06:81:eb:55:de:c0:0c:32:67:bb:a0:77:a1:
d1:41:6e:e5:10:8e:25:e1:48:44:b6:89:d8:e5:00:
97:f7:f1:f5:9e:51:67:e0:d6:70:ee:3f:fb:a2:59:
af:0e:c7:ee:c7:2d:d0:9a:26:d5:9f:fe:dc:e4:f1:
bf:b7:4e:e9:aa:46:40:51:cd:8d:32:89:e9:9e:5b:
20:e2:2a:07:dc:35:c4:4c:dc:89:83:bd:4e:15:46:
5e:7b:31:35:5e:5d:13:b4:de:11:86:f3:e6:70:05:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:43:21:F6:0F:0E:CC:CE:C4:93:8F:C4:F4:89:97:50:C7:A0:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85474E3E8A5B11F1B3C8ABA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.133.0/24
45.196.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:28:e7:e7:cf:e3:df:a9:e9:1d:6e:78:41:d3:8d:7b:31:83:
30:29:bf:22:59:61:26:6c:b8:54:cb:bc:2d:6d:5e:f8:a5:08:
5f:dc:e6:e4:39:f3:7b:bf:3e:af:da:d9:e5:59:7c:39:a7:dc:
5d:f3:e8:bb:22:8d:60:52:ce:8b:b1:fb:f6:7f:a2:48:c8:1b:
1c:ce:93:8f:2f:e5:95:eb:93:2d:81:a4:b9:cd:97:ea:71:8b:
f9:5f:94:ff:ef:f7:77:b8:15:ae:5b:67:4e:9c:67:a4:dd:10:
80:aa:e6:9c:9e:c0:5b:45:95:37:43:99:f8:91:17:d9:f8:b4:
9b:08:6e:88:a3:58:5a:f7:8d:90:6a:2b:26:e3:8c:33:b0:ac:
51:f3:ab:8b:e0:eb:24:6e:b2:31:a2:af:b3:15:a1:3c:93:4c:
f9:29:99:be:44:ff:48:66:09:00:55:d3:e5:8e:4f:e3:fd:f8:
1b:6f:a4:3f:fc:b2:3c:f1:c9:4b:ef:68:12:63:40:6a:9a:8d:
7f:f3:e5:ce:d2:d7:ea:0d:bb:45:71:65:3e:a5:0d:40:db:14:
d3:71:fd:04:b0:14:5c:1e:20:cc:42:c3:02:a6:15:c4:7c:83:
1e:bb:9f:03:4a:f4:23:e6:2f:86:1b:58:ed:63:28:2e:56:79:
01:fb:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:34 2026 by rpki-client