Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E421C3E889A811F1845C12DECE1D38B0.roa
File: E421C3E889A811F1845C12DECE1D38B0.roa (raw, json)
Hash identifier: h1pRkQCN3LhoJz261X6EOZ8wE/aOaeEXspvTCWvcgnM=
Subject key identifier: 79:E2:26:A6:4D:2F:D7:15:D0:21:D6:3C:2F:10:8C:2A:85:79:16:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C829
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E421C3E889A811F1845C12DECE1D38B0.roa
Signing time: Mon 27 Jul 2026 10:49:50 +0000
ROA not before: Mon 27 Jul 2026 10:49:46 +0000
ROA not after: Tue 25 May 2027 10:49:46 +0000
asID: 215208
IP address blocks: 45.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116777 (0x1c829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 27 10:49:46 2026 GMT
Not After : May 25 10:49:46 2027 GMT
Subject: CN=6a6737ce-c9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:9a:c8:b6:8c:2d:8f:c5:6c:31:67:d4:17:
e9:df:c2:ad:16:48:33:60:d9:58:a8:d1:dd:54:13:
1d:b6:b2:ee:1d:68:e0:1f:55:2b:36:56:59:f5:77:
e6:20:48:07:cc:93:36:ab:0b:31:f4:22:a3:c6:6f:
fc:5a:bb:cc:5e:3f:81:d2:53:3a:f0:aa:43:5c:2f:
df:7a:26:66:3f:68:ff:d4:22:32:bb:ce:58:73:ac:
c3:0e:c0:3b:d0:b4:0a:d6:b4:9d:af:d9:b9:b3:77:
65:34:d8:a2:35:6c:a2:85:97:92:61:4e:fd:40:95:
d9:81:3d:9d:80:a2:08:54:07:27:d4:06:47:bf:94:
69:3f:61:5e:d3:e7:02:15:ca:5a:c9:ab:1a:64:81:
45:37:06:69:ac:98:ab:01:1b:51:8a:f1:1e:84:37:
dd:1a:07:c0:15:a7:dc:77:1e:c3:25:2b:67:9e:79:
f3:dd:bf:b9:74:e1:b4:c9:b2:ff:b6:19:ce:67:80:
ce:9a:43:2f:00:52:ea:e4:2d:32:f5:1b:65:4a:31:
5b:23:6c:3b:86:63:2b:5d:c3:bd:30:6a:17:34:97:
33:22:a8:c8:c8:e2:d2:fc:d9:81:4e:be:76:39:fa:
a5:a6:0e:55:d6:78:82:98:4c:63:22:71:ae:18:0d:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:26:A6:4D:2F:D7:15:D0:21:D6:3C:2F:10:8C:2A:85:79:16:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E421C3E889A811F1845C12DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c8:a5:e8:5d:97:92:d8:01:e7:b1:b2:5f:c0:77:3f:d5:4d:
ad:e7:0a:aa:59:7b:8c:b3:19:e7:2b:37:f1:d7:69:09:24:eb:
a5:dc:49:91:40:dc:3e:88:5e:91:5d:7e:ec:a3:6b:ae:7b:6e:
7e:1d:cc:3f:38:61:a8:a5:69:60:f0:1d:e8:f4:93:ec:f4:67:
39:11:a9:b7:da:21:db:6e:7f:d7:7a:33:bb:16:56:e0:10:8d:
58:13:ef:0e:0e:96:f7:02:af:8f:b6:0e:9c:8d:fa:6d:66:82:
ae:a9:70:bb:56:3e:4e:eb:fc:74:41:34:10:fa:46:4e:51:19:
ce:40:b1:9d:cc:3e:28:b1:f6:b6:13:dc:5e:7b:45:3f:a3:b7:
99:c3:18:1b:ac:c7:00:e1:1d:2e:c4:bf:68:eb:44:bb:b1:48:
5f:c5:31:05:a9:57:86:6f:79:34:9e:2c:f6:7c:ca:5c:2d:68:
6f:3e:ab:91:36:03:63:01:8d:1f:b2:61:46:d0:92:a7:32:b4:
b0:79:d6:86:79:b5:f4:4d:e4:ed:0b:84:e1:74:fe:1b:df:23:
f8:bb:94:33:7f:1a:c5:50:79:dd:01:55:36:21:d3:75:9c:d1:
69:9f:0a:0f:b1:ec:b1:4d:7a:fd:52:d6:70:4b:2f:17:04:27:
d7:32:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:36 2026 by rpki-client