Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/146B573C60AD11F1AA74EDCDCE1D38B0.roa
File: 146B573C60AD11F1AA74EDCDCE1D38B0.roa (raw, json)
Hash identifier: b44hl5ns1GejqBDlBZqqeabDZjHSwkcNtGvmLapzA6g=
Subject key identifier: F6:C7:99:CA:78:15:FB:00:7F:88:46:6E:DE:56:DB:50:1E:6D:A9:D3
Certificate issuer: /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial: 05D9
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Authority info access: rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/146B573C60AD11F1AA74EDCDCE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:06:32 +0000
ROA not before: Fri 05 Jun 2026 07:06:17 +0000
ROA not after: Wed 31 Dec 2042 07:06:17 +0000
asID: 4755
IP address blocks: 202.123.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Validity
Not Before: Jun 5 07:06:17 2026 GMT
Not After : Dec 31 07:06:17 2042 GMT
Subject: CN=6a227577-074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:4a:4b:c8:88:42:94:d5:f1:99:1a:40:fc:
ac:82:0d:8e:11:44:e8:42:40:9a:f8:b7:0c:2c:05:
66:ff:03:1b:92:62:b7:33:60:2f:23:d8:b8:b6:dd:
e7:76:ab:74:d5:0b:f6:0b:b9:50:10:a6:60:ab:34:
7b:84:f5:43:c8:4e:03:4d:55:85:4d:30:74:49:b1:
b8:9f:09:43:3a:f6:68:9f:b3:f2:89:64:ac:80:bf:
88:58:b3:59:c0:34:83:41:60:a6:e4:25:08:95:c2:
c8:00:ee:2a:54:25:5e:6e:48:be:0e:6e:65:c7:83:
93:ec:3e:e9:e1:d4:87:00:da:b7:fc:2d:87:cf:f8:
7c:64:ee:62:de:de:cd:6d:5f:4c:df:3a:29:6e:0d:
15:f5:74:4c:b7:a5:3a:b7:92:c7:1e:b1:da:34:ee:
47:6c:7f:65:df:3d:aa:c4:df:35:3a:51:db:13:e4:
56:04:f3:c8:39:db:9a:6b:49:22:ad:95:70:79:9f:
0e:5b:f0:00:c7:74:6f:c2:d7:7a:4c:22:78:78:de:
8f:90:ed:b4:af:b0:8d:2d:da:08:27:cd:f9:c2:fd:
8b:d3:42:ae:8a:fd:9a:05:b3:66:a4:9e:98:34:36:
be:d4:bc:8b:06:76:f3:e2:da:88:67:b8:64:02:fc:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C7:99:CA:78:15:FB:00:7F:88:46:6E:DE:56:DB:50:1E:6D:A9:D3
X509v3 Authority Key Identifier:
keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/146B573C60AD11F1AA74EDCDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.123.0.0/19
Signature Algorithm: sha256WithRSAEncryption
97:d2:66:3c:8e:31:75:cb:a5:f9:36:49:3d:bb:cc:96:30:8c:
de:0b:67:b9:0c:77:7f:41:67:b8:1a:4b:b8:8e:0e:36:0d:51:
0b:dc:bd:85:ea:7c:e4:47:6b:e6:b9:e8:51:52:af:40:2f:08:
4c:2c:11:3e:a5:ad:cd:43:db:cc:f3:77:f4:e2:f8:d8:56:65:
45:74:0b:48:66:ee:8e:94:74:7e:9e:a9:c2:4b:bb:c2:ef:0c:
84:97:3c:3b:9b:49:8b:6e:dc:03:1d:e5:f8:6d:af:69:79:48:
c6:1f:0d:8a:35:51:ee:dd:49:a9:f5:fa:c0:fc:f9:fe:69:0f:
2d:78:2b:12:90:fb:b0:9b:29:cc:0f:6b:53:38:ea:ac:bd:17:
7b:5d:2f:63:2e:84:5c:70:24:e2:98:44:6f:0e:7b:55:f7:0a:
fa:69:ae:ca:68:e7:ad:ec:82:fb:96:35:84:eb:cf:17:f8:70:
8f:11:38:c5:89:fd:5f:21:73:f7:cf:ed:34:b8:3e:28:ef:88:
76:10:01:07:1d:00:3a:5c:3e:3e:b6:fa:a4:32:da:b9:ea:a4:
f8:ec:a3:0d:eb:7d:ad:a8:2a:30:4c:fc:30:b1:67:61:29:b9:
df:01:dc:fd:78:40:ca:55:2d:b6:b8:d7:1a:34:43:e5:ae:0a:
a6:7a:ca:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc1NjBBUDExMC8GA1UEBRMoNzJGMDg3NDE0Q0UyREY0NEJDNEY0REZGNUJFMTE0
N0E3QTcxQTlBRTAeFw0yNjA2MDUwNzA2MTdaFw00MjEyMzEwNzA2MTdaMBgxFjAU
BgNVBAMTDTZhMjI3NTc3LTA3NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDje0pLyIhClNXxmRpA/KyCDY4RROhCQJr4twwsBWb/AxuSYrczYC8j2Li2
3ed2q3TVC/YLuVAQpmCrNHuE9UPITgNNVYVNMHRJsbifCUM69mifs/KJZKyAv4hY
s1nANINBYKbkJQiVwsgA7ipUJV5uSL4ObmXHg5PsPunh1IcA2rf8LYfP+Hxk7mLe
3s1tX0zfOiluDRX1dEy3pTq3kscesdo07kdsf2XfParE3zU6UdsT5FYE88g525pr
SSKtlXB5nw5b8ADHdG/C13pMInh43o+Q7bSvsI0t2ggnzfnC/YvTQq6K/ZoFs2ak
npg0Nr7UvIsGdvPi2ohnuGQC/DR/AgMBAAGjggKjMIICnzAdBgNVHQ4EFgQU9seZ
yngV+wB/iEZu3lbbUB5tqdMwHwYDVR0jBBgwFoAUcvCHQUzi30S8T03/W+EUenpx
qa4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIyNDY4L2N2Q0hR
VXppMzBTOFQwM19XLUVVZW5weHFhNC5jcmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5p
Yy9jdkNIUVV6aTMwUzhUMDNfVy1FVWVucHhxYTQuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxNzU2MC8xRTg3OTU4QUYyNTkxMUVDQjFCREYyQzFGMTIy
MjQ2OC8xNDZCNTczQzYwQUQxMUYxQUE3NEVEQ0RDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFynsAMA0GCSqGSIb3DQEBCwUA
A4IBAQCX0mY8jjF1y6X5Nkk9u8yWMIzeC2e5DHd/QWe4Gku4jg42DVEL3L2F6nzk
R2vmuehRUq9ALwhMLBE+pa3NQ9vM83f04vjYVmVFdAtIZu6OlHR+nqnCS7vC7wyE
lzw7m0mLbtwDHeX4ba9peUjGHw2KNVHu3Ump9frA/Pn+aQ8teCsSkPuwmynMD2tT
OOqsvRd7XS9jLoRccCTimERvDntV9wr6aa7KaOet7IL7ljWE688X+HCPETjFif1f
IXP3z+00uD4o74h2EAEHHQA6XD4+tvqkMtq56qT47KMN632tqCowTPwwsWdhKbnf
Adz9eEDKVS22uNcaNEPlrgqmesre
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:15 2026 by rpki-client