Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0594D08075CA11F18C1042E3CE1D38B0.roa
File: 0594D08075CA11F18C1042E3CE1D38B0.roa (raw, json)
Hash identifier: uygwH3dTMcgTUtdJhqGzJtUYireMR1gXVGwAIblQa8U=
Subject key identifier: 28:F9:7B:58:EB:4C:5D:D3:DE:FC:47:3A:FD:E7:0F:EE:53:95:7E:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C235
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0594D08075CA11F18C1042E3CE1D38B0.roa
Signing time: Thu 02 Jul 2026 03:56:37 +0000
ROA not before: Thu 02 Jul 2026 03:56:32 +0000
ROA not after: Sat 25 Jul 2026 03:56:32 +0000
asID: 32043
IP address blocks: 45.201.10.0/24 maxlen: 24
45.201.11.0/24 maxlen: 24
45.201.100.0/24 maxlen: 24
45.201.101.0/24 maxlen: 24
45.201.102.0/24 maxlen: 24
45.201.103.0/24 maxlen: 24
45.201.110.0/24 maxlen: 24
45.201.111.0/24 maxlen: 24
45.201.112.0/24 maxlen: 24
45.201.113.0/24 maxlen: 24
45.201.120.0/24 maxlen: 24
45.201.121.0/24 maxlen: 24
45.201.122.0/24 maxlen: 24
45.201.123.0/24 maxlen: 24
45.201.124.0/24 maxlen: 24
45.203.33.0/24 maxlen: 24
45.203.34.0/24 maxlen: 24
45.203.35.0/24 maxlen: 24
45.203.36.0/24 maxlen: 24
45.203.37.0/24 maxlen: 24
45.203.38.0/24 maxlen: 24
45.203.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115253 (0x1c235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 03:56:32 2026 GMT
Not After : Jul 25 03:56:32 2026 GMT
Subject: CN=6a45e174-d950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:aa:c5:86:3d:63:32:b1:00:97:7a:0c:b9:
5b:bc:26:e8:7e:c0:e3:7b:63:fe:4f:e9:dc:1a:a3:
e9:98:db:97:09:35:06:e2:df:52:d3:c0:81:1b:f3:
bc:29:1e:3e:b7:2c:d7:f8:93:00:1e:92:3a:20:b8:
a5:8a:01:fd:10:db:71:7f:b0:d5:35:fc:3d:b8:54:
b9:a0:14:cd:f2:5a:68:91:f8:a0:8d:88:31:7c:f0:
16:af:9c:1f:ab:22:3e:57:6c:7c:05:bc:f3:d4:ec:
ab:be:56:4e:74:00:2e:64:db:c8:f0:78:05:5e:e3:
d3:96:0d:f7:12:4e:6a:69:59:fb:3b:e4:81:56:8b:
4d:cf:4f:24:00:45:96:f0:f4:64:a5:cf:c5:d5:57:
0b:93:13:46:b5:04:90:8c:c6:00:c8:57:98:6a:f6:
e9:7a:17:f9:ef:32:37:a9:52:17:05:ca:b9:65:01:
50:e7:9e:8d:e3:88:f5:62:ee:84:e4:1e:20:b8:22:
d3:7b:24:cb:6e:f4:90:85:24:95:c8:fb:f9:4e:2f:
b1:d1:28:7e:04:d1:c6:4b:af:a6:82:b2:8d:83:15:
b0:18:74:3f:70:d1:9a:3c:c9:c0:ae:c2:1d:a0:5d:
9e:e5:e4:8e:74:21:83:b5:c4:be:c3:5b:62:2d:64:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:7B:58:EB:4C:5D:D3:DE:FC:47:3A:FD:E7:0F:EE:53:95:7E:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0594D08075CA11F18C1042E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.201.100.0/22
45.201.110.0-45.201.113.255
45.201.120.0-45.201.124.255
45.203.33.0-45.203.39.255
Signature Algorithm: sha256WithRSAEncryption
6f:2a:96:35:ce:d2:7b:d1:20:e7:bc:45:1b:32:f0:33:dc:c6:
02:bf:bd:84:22:d1:1f:de:73:f0:55:18:70:68:b5:a4:d2:d1:
04:ef:e4:ae:d9:48:59:5c:76:77:cb:96:a4:86:09:b6:f4:a2:
eb:ad:58:20:1a:50:80:c0:38:c6:8e:2a:16:0d:fe:00:89:a3:
21:5a:1e:2f:97:f6:1d:f1:2d:b1:0b:b8:f8:6d:b2:f2:86:a4:
ce:e3:43:7f:c0:6a:8f:bd:5e:5f:18:45:70:ae:38:b8:44:bb:
6f:93:85:f1:db:5b:62:78:d0:83:c1:45:9c:d9:7f:03:a2:72:
27:37:23:cf:ac:0c:d9:a9:24:83:cc:f9:12:3c:7a:d3:7a:0e:
5f:93:3a:af:32:6a:8e:93:8f:40:07:67:a0:5b:ae:1c:77:be:
a7:d2:9a:57:d0:9d:57:08:e2:39:37:71:72:16:86:35:d8:51:
2a:29:df:96:6d:cf:85:73:48:94:52:21:e6:d7:70:ea:a4:20:
ed:9b:b4:55:9f:3a:af:2b:87:bf:e5:2d:e1:81:28:96:be:67:
f6:7e:87:35:67:98:63:62:63:49:3b:d3:2f:81:09:7b:df:71:
d4:dd:58:a7:48:65:7c:86:05:70:28:31:5a:5c:a0:03:ab:34:
7f:1c:17:66
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDAcI1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAyMDM1NjMyWhcNMjYwNzI1MDM1NjMyWjAYMRYw
FAYDVQQDEw02YTQ1ZTE3NC1kOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmaaqxYY9YzKxAJd6DLlbvCbofsDje2P+T+ncGqPpmNuXCTUG4t9S08CB
G/O8KR4+tyzX+JMAHpI6ILiligH9ENtxf7DVNfw9uFS5oBTN8lpokfigjYgxfPAW
r5wfqyI+V2x8Bbzz1OyrvlZOdAAuZNvI8HgFXuPTlg33Ek5qaVn7O+SBVotNz08k
AEWW8PRkpc/F1VcLkxNGtQSQjMYAyFeYavbpehf57zI3qVIXBcq5ZQFQ556N44j1
Yu6E5B4guCLTeyTLbvSQhSSVyPv5Ti+x0Sh+BNHGS6+mgrKNgxWwGHQ/cNGaPMnA
rsIdoF2e5eSOdCGDtcS+w1tiLWSfxwIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFCj5
e1jrTF3T3vxHOv3nD+5TlX66MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNTk0RDA4MDc1Q0ExMUYxOEMxMDQyRTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLckKAwQCLclkMAwDBAEtyW4D
BAEtyXAwDAMEAy3JeAMEAC3JfDAMAwQALcshAwQDLcsgMA0GCSqGSIb3DQEBCwUA
A4IBAQBvKpY1ztJ70SDnvEUbMvAz3MYCv72EItEf3nPwVRhwaLWk0tEE7+Su2UhZ
XHZ3y5akhgm29KLrrVggGlCAwDjGjioWDf4AiaMhWh4vl/Yd8S2xC7j4bbLyhqTO
40N/wGqPvV5fGEVwrji4RLtvk4Xx21tieNCDwUWc2X8DonInNyPPrAzZqSSDzPkS
PHrTeg5fkzqvMmqOk49AB2egW64cd76n0ppX0J1XCOI5N3FyFoY12FEqKd+Wbc+F
c0iUUiHm13DqpCDtm7RVnzqvK4e/5S3hgSiWvmf2foc1Z5hjYmNJO9MvgQl733HU
3VinSGV8hgVwKDFaXKADqzR/HBdm
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:54 2026 by rpki-client