Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2C2258579411F195E591FBCE1D38B0.roa
File: BB2C2258579411F195E591FBCE1D38B0.roa (raw, json)
Hash identifier: dOP5fbT/QL72HGlKpstpmI8C1tUFepq2IXs29trB/gQ=
Subject key identifier: 19:07:1D:C1:C5:1B:E5:43:72:20:6B:71:B7:1F:8F:9F:CD:56:94:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B930
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2C2258579411F195E591FBCE1D38B0.roa
Signing time: Sun 24 May 2026 17:19:33 +0000
ROA not before: Sun 24 May 2026 17:19:29 +0000
ROA not after: Sat 29 Aug 2026 17:19:29 +0000
asID: 273079
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112944 (0x1b930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 17:19:29 2026 GMT
Not After : Aug 29 17:19:29 2026 GMT
Subject: CN=6a133325-53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:a9:73:d7:3a:22:d1:38:32:2e:b2:84:41:
ad:69:fb:bd:d4:1b:b3:29:a1:8a:51:6a:52:89:aa:
92:a6:85:61:fa:96:3c:09:93:c7:87:8f:81:0d:c4:
77:c7:8d:67:91:54:d1:25:dc:80:47:cd:0d:9a:3c:
bd:fd:e1:20:20:af:13:81:f6:71:2d:ac:01:cd:f0:
e5:b5:f5:f4:d2:9c:b8:52:28:ab:1d:79:69:3b:58:
88:ea:28:65:9e:73:77:13:1c:23:97:ef:42:2b:c4:
22:b0:90:b7:87:0a:6c:c3:8f:e1:04:d5:a1:b8:2e:
78:84:6f:27:57:e5:49:be:d5:3d:d2:d7:0c:95:16:
87:86:5c:5f:b0:0b:66:80:0e:c2:95:51:2d:4f:fa:
fd:1e:3a:de:70:40:ef:f0:8c:de:1e:c9:28:0d:ad:
d1:f9:67:7a:7d:07:67:13:dc:81:85:f4:45:ab:2c:
f3:0d:b2:6b:32:2c:c9:0c:65:02:2e:e9:df:e6:26:
37:f2:0a:f0:9a:62:4a:34:21:24:d8:de:92:cd:54:
66:d5:f5:73:a4:a9:bf:36:df:1b:74:96:33:ca:38:
da:e5:18:8b:aa:63:cb:14:4b:a4:d8:d8:e0:14:92:
2e:4a:7f:59:e6:ee:3d:69:f2:44:be:96:e2:06:ef:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:1D:C1:C5:1B:E5:43:72:20:6B:71:B7:1F:8F:9F:CD:56:94:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2C2258579411F195E591FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ec:12:d6:11:6e:73:48:9f:7b:68:a7:d3:f1:9c:ac:c1:fb:
d2:39:48:93:ac:de:58:dd:e2:56:1d:4c:31:b9:12:75:3f:78:
bf:1f:a0:84:60:71:d7:3d:da:5a:95:82:b2:d1:1b:55:fd:8e:
4e:2e:0f:35:a8:08:b7:36:1d:91:eb:3b:e3:8a:24:a3:ea:61:
da:7e:13:e2:fe:c8:ab:4a:45:0d:ef:a5:d9:2e:22:2b:3b:e8:
1d:8f:6e:2e:d2:d2:be:79:7e:1b:5d:6c:86:0d:d4:3a:4c:b4:
31:f5:e3:e6:d1:94:77:0c:50:61:bf:91:80:64:cb:36:c3:84:
7b:c8:75:9e:a1:ea:17:64:0d:39:37:5a:4b:66:4e:ef:2d:e0:
53:ae:61:f8:99:bc:cd:06:06:48:50:a9:39:f0:e0:a2:ae:47:
6f:5f:41:61:87:0f:3a:97:96:d6:10:16:68:f5:28:bb:ba:ad:
94:dc:a1:2b:72:e6:70:62:4f:ad:3e:6c:49:80:f3:5a:2e:11:
37:40:91:30:4c:2d:57:0c:20:1d:8f:a6:97:56:6c:6a:a9:7b:
f0:6f:3e:5e:1a:8b:e8:ba:52:f7:e2:60:f1:ed:c7:5d:b2:06:
94:99:d6:03:54:b1:9a:1c:e5:51:8a:f7:36:4d:d2:e3:5c:d8:
cc:63:68:98
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbkwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI0MTcxOTI5WhcNMjYwODI5MTcxOTI5WjAYMRYw
FAYDVQQDEw02YTEzMzMyNS01M2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtOGpc9c6ItE4Mi6yhEGtafu91BuzKaGKUWpSiaqSpoVh+pY8CZPHh4+B
DcR3x41nkVTRJdyAR80Nmjy9/eEgIK8TgfZxLawBzfDltfX00py4UiirHXlpO1iI
6ihlnnN3Exwjl+9CK8QisJC3hwpsw4/hBNWhuC54hG8nV+VJvtU90tcMlRaHhlxf
sAtmgA7ClVEtT/r9HjrecEDv8IzeHskoDa3R+Wd6fQdnE9yBhfRFqyzzDbJrMizJ
DGUCLunf5iY38grwmmJKNCEk2N6SzVRm1fVzpKm/Nt8bdJYzyjja5RiLqmPLFEuk
2NjgFJIuSn9Z5u49afJEvpbiBu8XiQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBkH
HcHFG+VDciBrcbcfj5/NVpTGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQjJDMjI1ODU3OTQxMUYxOTVFNTkxRkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPJMA0GCSqGSIb3DQEBCwUA
A4IBAQBg7BLWEW5zSJ97aKfT8ZyswfvSOUiTrN5Y3eJWHUwxuRJ1P3i/H6CEYHHX
PdpalYKy0RtV/Y5OLg81qAi3Nh2R6zvjiiSj6mHafhPi/sirSkUN76XZLiIrO+gd
j24u0tK+eX4bXWyGDdQ6TLQx9ePm0ZR3DFBhv5GAZMs2w4R7yHWeoeoXZA05N1pL
Zk7vLeBTrmH4mbzNBgZIUKk58OCirkdvX0Fhhw86l5bWEBZo9Si7uq2U3KErcuZw
Yk+tPmxJgPNaLhE3QJEwTC1XDCAdj6aXVmxqqXvwbz5eGovoulL34mDx7cddsgaU
mdYDVLGaHOVRivc2TdLjXNjMY2iY
-----END CERTIFICATE-----
Generated at Sat May 30 01:03:59 2026 by rpki-client