Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C6EDE1C88C011F19AB1C4D9CE1D38B0.roa
File: 8C6EDE1C88C011F19AB1C4D9CE1D38B0.roa (raw, json)
Hash identifier: Pel0aLlmUEoVRSxaFDu5jV5WjZL7PLLQEGTpa3bSoLw=
Subject key identifier: 0B:7D:2B:A8:8D:51:A7:38:F6:0F:06:48:96:94:93:5D:81:94:88:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C810
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C6EDE1C88C011F19AB1C4D9CE1D38B0.roa
Signing time: Sun 26 Jul 2026 07:06:40 +0000
ROA not before: Sun 26 Jul 2026 07:06:36 +0000
ROA not after: Fri 04 Sep 2026 07:06:36 +0000
asID: 213800
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 10:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116752 (0x1c810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:06:36 2026 GMT
Not After : Sep 4 07:06:36 2026 GMT
Subject: CN=6a65b200-37f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:13:8d:b5:9f:77:2d:9a:7e:59:de:d0:ad:
9e:fd:35:6f:7b:95:6d:87:6e:46:24:26:f4:d1:e4:
78:43:be:26:e7:51:ad:d7:3f:17:37:e1:dd:60:1b:
d2:0f:da:90:50:24:d9:4d:d1:a6:2e:42:ce:84:27:
9f:3d:b1:3d:2a:74:e1:e2:e2:a6:ab:35:2a:79:71:
95:52:1e:88:40:62:c9:dd:48:6d:55:be:dc:05:b7:
f5:fa:7c:7f:d0:00:3a:fd:93:2a:8e:e0:d1:eb:4c:
4f:82:fd:0c:4a:b9:03:3a:42:9b:dd:fe:11:47:f0:
8a:61:13:88:2b:74:b7:6a:61:7f:79:50:98:49:5c:
5d:49:09:be:5e:92:ee:55:49:3c:1f:10:47:e1:78:
ca:5e:1f:d1:34:4e:29:fd:94:c2:80:60:47:8c:d2:
54:1b:b6:c9:99:ef:c9:c8:af:58:59:42:ef:03:c5:
58:6a:e8:2c:e1:ab:c4:f1:84:08:6a:7d:3b:aa:6b:
af:cc:c6:a7:f2:99:b6:3b:35:fa:3d:9b:53:01:61:
43:3d:e7:f7:1f:85:9d:65:0b:8e:21:55:3e:e7:aa:
ac:d1:23:63:05:f6:a1:4a:af:ed:3e:22:59:9a:fe:
bc:f4:8f:e8:44:3f:cd:24:53:5e:5e:af:41:e9:85:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:2B:A8:8D:51:A7:38:F6:0F:06:48:96:94:93:5D:81:94:88:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C6EDE1C88C011F19AB1C4D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f8:89:48:5e:ef:69:4c:2b:8f:6c:c4:2a:d5:35:3d:ae:e7:
c1:8c:a4:6f:50:7b:a3:23:6a:32:0e:32:f2:1a:37:d4:da:9b:
e5:99:0f:d6:71:aa:a8:80:06:ba:27:96:b9:22:4b:8f:4a:ed:
df:fb:a8:fc:0d:7e:c3:b4:41:e9:8c:af:79:be:48:31:fd:7c:
5b:29:a3:57:b3:f1:33:e8:34:fe:72:40:7e:d2:99:8e:bc:1e:
47:48:00:71:17:27:23:fc:c9:25:3c:54:2b:a0:a0:1d:5c:99:
30:96:f1:56:4b:a4:b6:c5:47:38:4c:d9:e7:25:60:93:ff:9d:
9d:0f:88:64:ed:83:6e:8a:58:c2:f1:16:9b:54:56:22:03:92:
f1:5a:13:1f:5e:88:79:f7:f2:50:9e:02:8e:d3:13:f2:f2:b9:
37:07:4c:5b:81:23:e3:11:3e:65:04:e3:d5:c6:59:9f:38:fb:
09:d8:44:a1:fb:d6:36:52:d0:a9:0e:5c:31:37:a4:2a:24:2a:
08:01:15:99:d2:4c:93:6d:92:9c:27:8d:da:df:ac:c3:82:ef:
ae:bc:db:94:72:cf:87:72:a6:db:58:73:86:2c:65:4f:8c:72:
7b:f6:4d:08:d3:89:0c:34:af:17:5b:b1:27:34:35:d1:c5:f5:
10:a5:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:36:51 2026 by rpki-client