Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C31C9C898B11F1B38714B0CE1D38B0.roa
File: F8C31C9C898B11F1B38714B0CE1D38B0.roa (raw, json)
Hash identifier: eN4zXe+8PwLi20FjbUZOXkLjeWbrVUcW5VY2aZ77Eek=
Subject key identifier: 14:EA:72:C9:9A:41:7E:57:67:6E:65:FF:32:AA:63:8A:6A:63:56:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C81B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C31C9C898B11F1B38714B0CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:22:50 +0000
ROA not before: Mon 27 Jul 2026 07:22:45 +0000
ROA not after: Thu 27 Aug 2026 07:22:45 +0000
asID: 136725
IP address blocks: 45.196.104.0/24 maxlen: 24
45.196.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116763 (0x1c81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 27 07:22:45 2026 GMT
Not After : Aug 27 07:22:45 2026 GMT
Subject: CN=6a670749-2a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:36:1c:fc:c1:83:58:94:75:ce:27:a9:f2:
7b:f0:d3:f5:0f:74:eb:64:93:d7:5e:0c:cc:f1:0a:
1d:06:9d:fb:03:37:fd:36:dc:92:21:c6:6a:ed:c4:
f5:b1:9a:35:58:27:ad:33:4a:52:01:d3:3d:e9:68:
0d:0d:97:b6:67:03:86:cf:33:2a:2c:98:c2:45:a3:
75:0f:e7:b8:0e:73:3b:cd:e6:50:eb:52:60:cf:9e:
89:11:b1:e6:4f:e1:3b:84:a1:62:1e:f5:b0:ad:e3:
a0:ce:c0:6e:4f:6d:3d:16:37:9a:f1:3b:a0:cb:1b:
4a:44:6e:5b:83:ae:e1:0f:f7:bc:27:ef:c6:e6:28:
61:5a:ab:0d:63:75:0e:41:05:85:fa:6e:24:0d:6e:
8b:c4:af:c6:1d:59:87:9b:fa:8a:7e:69:bf:37:3c:
24:06:8c:29:7e:aa:06:2f:f1:97:e8:de:bb:d5:f3:
10:81:48:d7:b7:25:ce:4c:f5:df:1d:6e:fd:dc:97:
7c:37:73:e0:43:13:ff:82:c3:dd:53:22:cc:e9:0d:
a7:d2:f1:32:82:96:53:34:e8:49:11:9d:63:44:c0:
d0:c0:74:f2:dd:6b:01:4f:0a:20:ec:9e:f4:01:e6:
0a:83:7f:95:8b:59:27:f2:75:0a:e0:1e:89:a7:e0:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:72:C9:9A:41:7E:57:67:6E:65:FF:32:AA:63:8A:6A:63:56:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C31C9C898B11F1B38714B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.104.0/24
45.196.165.0/24
Signature Algorithm: sha256WithRSAEncryption
91:60:55:c8:4f:16:c7:b0:18:c3:02:e7:fe:30:a4:d1:87:fa:
3c:18:49:eb:c8:54:f9:2f:a0:a2:a2:14:92:5f:08:ed:a8:7f:
69:ef:6e:49:3e:30:53:04:50:22:bb:75:7d:4c:7c:51:4d:50:
b9:de:59:90:ef:82:3c:09:07:da:d4:03:77:41:eb:30:bf:e7:
ea:14:01:d6:25:58:a6:c3:1d:d2:ad:92:11:c6:df:32:7a:82:
53:89:24:20:e4:c0:7a:61:bf:ee:9e:71:ff:22:3e:69:ff:b3:
0b:7c:89:6c:6b:11:98:76:3c:00:8c:cd:5b:d8:ee:cd:fc:54:
b5:c6:99:98:d8:3b:a3:66:2e:58:53:b3:cc:d5:c7:c5:1a:f4:
cd:07:16:5a:f1:aa:53:f0:48:d8:ff:9f:3f:9c:6f:ff:a1:8b:
55:4b:aa:28:c7:10:01:75:fc:01:89:e7:d4:5c:92:bb:a5:ec:
b3:f2:7b:eb:39:97:b4:ee:72:c9:81:b4:0c:c0:97:a0:c9:22:
fe:ed:d6:c8:19:de:45:90:3d:9b:bc:f4:5f:a0:2d:f2:4a:c3:
ca:bc:61:1d:16:6d:c7:22:25:b8:ca:0c:73:27:21:ab:b4:f9:
99:c9:03:b4:8b:85:af:1c:4f:17:2f:b3:ee:ba:ce:45:71:83:
49:35:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:15:31 2026 by rpki-client