Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29312F463D411F1B43386FECE1D38B0.roa
File: B29312F463D411F1B43386FECE1D38B0.roa (raw, json)
Hash identifier: AgsyrQv5Uh5v8+lgRsZJ+X4VAuHD+DfpuQEWaZwtNmg=
Subject key identifier: 98:A8:23:78:08:D7:CF:A2:6A:0A:78:5C:FF:7B:C0:5A:2A:DD:F9:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29312F463D411F1B43386FECE1D38B0.roa
Signing time: Tue 09 Jun 2026 07:27:41 +0000
ROA not before: Tue 09 Jun 2026 07:27:36 +0000
ROA not after: Thu 16 Jul 2026 07:27:36 +0000
asID: 43260
IP address blocks: 45.195.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113785 (0x1bc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 07:27:36 2026 GMT
Not After : Jul 16 07:27:36 2026 GMT
Subject: CN=6a27c06d-1c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:0f:18:9e:c4:ae:50:30:77:b1:e6:f8:31:
c2:97:4c:ab:7e:d9:a4:e5:24:80:68:19:65:8e:9e:
18:21:52:6c:72:32:bc:cd:8c:a2:df:68:d1:4c:07:
18:92:6d:45:2f:ca:73:11:90:c2:12:d7:e8:0c:02:
4c:bb:ce:b8:0c:62:78:cb:da:7d:f1:22:8e:79:60:
a3:3e:d5:22:9d:cf:14:c9:e9:28:2d:2a:07:27:85:
8c:35:fc:48:51:3e:45:4b:c1:54:b6:c7:f6:66:d3:
3b:3b:9d:ab:fc:dd:1c:77:3f:20:1d:5e:98:71:4a:
f1:ff:0a:b5:d4:27:51:fb:82:b1:7f:ae:8c:85:02:
69:51:c7:1f:8d:69:07:65:c8:d8:cc:9a:f3:d8:21:
20:14:42:d2:03:f5:fa:34:4c:47:b6:0c:40:63:74:
80:90:37:21:53:ca:27:f4:8f:36:6f:18:3a:08:85:
22:14:4b:22:6f:05:42:82:b3:2f:84:8f:91:29:12:
30:45:c2:4b:31:d9:7d:f7:04:38:48:e9:de:22:31:
43:47:b5:81:68:7f:26:69:34:7e:28:50:c0:24:e2:
c6:f4:d6:25:96:76:64:e8:68:d6:bf:91:b1:0b:b4:
53:69:7f:a5:50:2f:aa:78:d4:0d:d7:01:94:20:11:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A8:23:78:08:D7:CF:A2:6A:0A:78:5C:FF:7B:C0:5A:2A:DD:F9:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29312F463D411F1B43386FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.75.0/24
Signature Algorithm: sha256WithRSAEncryption
70:11:06:61:e6:45:a7:56:ae:25:99:86:81:e7:0c:ff:95:22:
50:0e:33:14:b8:e8:8a:a5:16:2f:1c:5f:5a:c4:23:b6:f3:d6:
e0:ff:ed:92:ae:bf:97:05:9e:1b:58:ed:30:d2:02:3d:3b:61:
8f:86:dd:8b:9b:a4:f2:ae:b6:93:70:5c:50:47:a8:51:2d:d1:
8e:b0:fd:99:19:91:9b:a0:13:71:d6:ef:e7:d9:ed:54:11:0f:
0f:ce:84:f7:ef:f4:8c:ea:53:88:40:52:10:fa:a4:6b:f1:63:
be:2f:7e:95:82:28:08:aa:d3:5f:3f:1b:92:78:17:0e:b2:33:
cc:ce:b3:c2:67:72:96:65:0b:7e:23:f4:7f:2c:c1:dd:6c:34:
3a:54:18:1e:71:23:ab:f3:65:03:6b:43:4c:3c:28:22:54:f5:
42:b7:2b:3a:e1:e6:f2:09:06:77:93:a9:d0:3e:d2:61:41:4d:
6a:84:bf:1a:e0:83:a1:10:02:16:a8:83:8c:90:91:a1:a3:48:
28:26:e5:16:6e:2d:ac:1f:e5:8f:39:fd:82:06:fb:fa:be:20:
6f:04:48:32:dd:1b:5a:2d:69:d6:02:17:bc:f1:8c:4b:55:8b:
dd:9d:26:9c:b8:62:66:21:8d:4e:8f:7a:6a:39:03:0f:bb:08:
b2:73:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:56:10 2026 by rpki-client