Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/AC2DAECC925711F1AAA851BACE1D38B0.roa
File: AC2DAECC925711F1AAA851BACE1D38B0.roa (raw, json)
Hash identifier: 9ZdguHYvPkSj6VbmcoctITKVVNWWEmngLHQwoRyJWw8=
Subject key identifier: AF:AE:B6:C8:0C:EE:74:6D:B0:2C:CF:B2:C9:C7:6E:AB:30:7B:74:28
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 07B4
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/AC2DAECC925711F1AAA851BACE1D38B0.roa
Signing time: Fri 07 Aug 2026 12:01:08 +0000
ROA not before: Fri 14 Aug 2026 12:01:04 +0000
ROA not after: Sat 14 Aug 2027 12:01:04 +0000
asID: 142240
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1972 (0x7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Aug 14 12:01:04 2026 GMT
Not After : Aug 14 12:01:04 2027 GMT
Subject: CN=6a75c904-7a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:54:2a:00:26:fd:a2:2c:5a:14:7e:36:cb:
05:35:4c:f7:73:60:a5:ac:58:e2:56:7e:a3:2e:3d:
1f:7e:ea:fd:be:d6:9f:ee:71:fc:e4:ce:fa:dd:b7:
09:50:ba:78:7d:f2:eb:e1:7a:a3:5a:e8:9d:4d:5f:
04:d7:27:4d:bf:b8:60:3a:b9:ba:6d:40:bc:3d:c4:
a8:9a:ca:51:07:73:88:08:88:ea:c5:98:03:05:51:
d9:68:f7:3c:4c:9a:d7:a4:5c:17:b7:86:50:15:ce:
c8:74:57:99:e0:14:15:d6:50:f0:19:71:9b:4f:ec:
6f:00:27:82:8d:18:8b:6c:07:7b:60:e4:09:ec:66:
96:ff:cd:07:0d:c4:7c:f1:f8:ac:be:2f:91:81:ba:
66:d9:20:9f:63:0c:03:a3:08:8b:36:14:4e:0e:a9:
a4:e0:22:4e:34:89:57:bf:f4:7e:c1:0d:1d:1a:4d:
81:34:41:a4:7a:cf:80:d3:fa:cf:d0:97:62:69:54:
88:84:8b:ee:5c:25:84:07:85:d6:dd:db:4b:73:45:
91:cc:6c:8d:2c:c1:ba:d8:88:13:5a:85:30:26:05:
2f:a7:47:1b:dd:52:84:21:9d:44:29:b5:22:fa:5c:
8e:11:79:e7:6d:85:1d:3c:65:80:5c:d5:d8:d5:88:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:B6:C8:0C:EE:74:6D:B0:2C:CF:B2:C9:C7:6E:AB:30:7B:74:28
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/AC2DAECC925711F1AAA851BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:86:c8:5a:bb:f7:cf:38:44:7f:5e:7f:0c:14:06:0a:1b:be:
1c:ba:e7:1a:c2:6b:ea:0b:78:75:35:61:2c:c3:b3:f7:96:ba:
a0:89:58:96:20:b7:1a:17:f2:2f:02:1b:ae:9c:b1:a5:7a:cb:
64:b2:28:46:84:0f:f1:32:ea:82:99:a2:0f:53:5b:45:18:69:
37:e4:f2:91:2c:af:5a:3e:c2:0f:04:96:c6:43:b0:d8:63:fb:
6a:20:de:06:e2:18:34:96:6a:50:f1:ac:d9:7a:0d:e5:ed:40:
a6:03:2f:67:f1:45:d9:5f:8c:a0:f4:3c:cb:3e:f4:59:5a:9b:
2f:94:04:34:78:77:b4:d8:c0:cf:8a:3f:f7:50:a8:39:b1:28:
13:40:4a:18:36:8f:05:ea:4d:d5:c0:9b:3e:6e:ec:2c:98:40:
dd:0e:53:f4:c0:c1:35:a9:c8:94:a8:5d:49:6f:00:5d:fc:92:
e0:4b:51:7c:e7:16:b5:c4:ff:f4:8b:91:ed:38:8d:92:08:1c:
99:66:84:05:c1:58:70:9c:b9:b2:c7:30:8b:48:fc:7e:3a:9c:
a5:df:32:e8:24:92:f0:9a:4b:1b:89:76:0c:85:cb:bc:22:fe:
35:ee:e0:39:af:75:cf:f6:f6:24:30:42:77:17:32:49:d3:13:
64:4b:0e:9e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNjA4MTQxMjAxMDRaFw0yNzA4MTQxMjAxMDRaMBgxFjAU
BgNVBAMTDTZhNzVjOTA0LTdhMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5UVQqACb9oixaFH42ywU1TPdzYKWsWOJWfqMuPR9+6v2+1p/ucfzkzvrd
twlQunh98uvheqNa6J1NXwTXJ02/uGA6ubptQLw9xKiaylEHc4gIiOrFmAMFUdlo
9zxMmtekXBe3hlAVzsh0V5ngFBXWUPAZcZtP7G8AJ4KNGItsB3tg5AnsZpb/zQcN
xHzx+Ky+L5GBumbZIJ9jDAOjCIs2FE4OqaTgIk40iVe/9H7BDR0aTYE0QaR6z4DT
+s/Ql2JpVIiEi+5cJYQHhdbd20tzRZHMbI0swbrYiBNahTAmBS+nRxvdUoQhnUQp
tSL6XI4ReedthR08ZYBc1djViPGFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUr662
yAzudG2wLM+yycduqzB7dCgwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3L0FDMkRBRUNDOTI1NzExRjFBQUE4NTFCQUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UcwDQYJKoZIhvcNAQELBQAD
ggEBALWGyFq79884RH9efwwUBgobvhy65xrCa+oLeHU1YSzDs/eWuqCJWJYgtxoX
8i8CG66csaV6y2SyKEaED/Ey6oKZog9TW0UYaTfk8pEsr1o+wg8ElsZDsNhj+2og
3gbiGDSWalDxrNl6DeXtQKYDL2fxRdlfjKD0PMs+9Flamy+UBDR4d7TYwM+KP/dQ
qDmxKBNAShg2jwXqTdXAmz5u7CyYQN0OU/TAwTWpyJSoXUlvAF38kuBLUXznFrXE
//SLke04jZIIHJlmhAXBWHCcubLHMItI/H46nKXfMugkkvCaSxuJdgyFy7wi/jXu
4Dmvdc/29iQwQncXMknTE2RLDp4=
-----END CERTIFICATE-----
Generated at Sun Aug 9 15:14:59 2026 by rpki-client