Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097838F07E8411F18B8614B5CE1D38B0.roa
File: 097838F07E8411F18B8614B5CE1D38B0.roa (raw, json)
Hash identifier: o5vAXfP1YlPZMGiIbGLVsscLI1ng9fvNS6zR/uWeWWA=
Subject key identifier: 05:74:81:E4:53:CD:88:58:F5:F9:5B:33:B3:8B:54:77:EE:8A:E8:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097838F07E8411F18B8614B5CE1D38B0.roa
Signing time: Mon 13 Jul 2026 06:28:19 +0000
ROA not before: Mon 13 Jul 2026 06:28:14 +0000
ROA not after: Sat 29 May 2027 06:28:14 +0000
asID: 17976
IP address blocks: 45.201.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115915 (0x1c4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 06:28:14 2026 GMT
Not After : May 29 06:28:14 2027 GMT
Subject: CN=6a548583-50dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:11:96:96:47:b8:88:8a:0a:7e:ee:f2:12:
b3:6e:45:8c:3b:ea:c2:1e:65:be:c3:fa:93:56:ad:
ca:f4:f5:c8:55:de:92:26:e4:c1:2d:a8:99:2a:3f:
6e:0e:54:3e:02:34:16:13:fa:85:6b:5b:15:29:00:
cb:6f:c7:1f:5b:8b:22:05:9c:ba:de:ca:df:91:40:
78:3f:01:60:c8:38:71:c8:05:06:3c:cd:74:cd:28:
ef:5b:ca:14:16:70:8d:81:7a:c4:3d:e6:90:38:1f:
44:60:ba:d4:e2:e1:07:13:df:b6:b6:d5:6e:00:46:
62:4e:96:c1:95:fb:cb:b4:5c:8e:70:44:96:b0:e9:
bb:19:56:a5:7c:7b:8b:99:9e:95:02:cc:09:00:dd:
ed:81:e0:20:f3:79:77:71:63:4b:ef:f0:aa:fd:e6:
19:09:cb:b4:c6:23:c3:31:6c:c5:c4:0b:14:2a:98:
7a:fe:fc:9b:93:ab:61:27:67:ae:4c:af:28:52:65:
26:1b:5f:5f:2b:f4:0d:f6:9e:e3:c4:cd:6e:f9:38:
02:d7:1d:77:cd:d3:0d:17:aa:46:29:c4:00:db:c3:
55:56:52:1e:b1:cd:ed:fc:66:83:12:c0:a7:b1:0d:
99:45:92:26:02:30:fc:a8:b5:5f:f4:ff:60:7f:c2:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:81:E4:53:CD:88:58:F5:F9:5B:33:B3:8B:54:77:EE:8A:E8:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097838F07E8411F18B8614B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.144.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9f:ed:8b:80:71:24:21:0c:31:ea:02:c5:7e:d6:aa:34:62:
90:28:e3:ed:8b:aa:c2:19:20:98:b4:be:fc:40:de:90:c9:17:
df:12:c8:11:d8:e2:c2:b0:27:35:23:d0:73:e4:94:1c:1a:db:
c2:95:48:43:50:aa:13:fa:57:f9:49:40:1f:71:72:f8:5e:c9:
f2:73:ca:c3:9d:fc:89:d3:00:42:44:8f:6f:ab:b5:92:cd:b6:
f3:7a:5c:13:a3:7b:4e:23:f3:2f:9a:ec:9c:35:42:3f:ff:a7:
9b:59:ed:22:00:2b:d9:d1:43:b5:c5:2f:52:a9:27:54:f0:d7:
e0:c3:c1:ff:01:9a:5c:95:db:64:5c:7d:76:85:6e:44:77:2d:
6c:8b:6e:67:da:a0:9b:ed:90:26:77:07:b9:49:de:af:38:e6:
69:65:5e:14:d1:30:00:fa:b4:b9:75:22:e1:43:19:dd:9a:23:
18:97:84:98:ea:e5:4c:27:f8:36:39:1a:11:b8:de:a0:1f:57:
b5:2b:92:25:38:5f:8c:d9:35:cb:a0:ac:f1:17:44:af:ae:bb:
49:72:73:c6:16:5f:77:c6:e1:eb:12:c7:da:f9:eb:0b:36:a2:
d4:5f:f5:85:bc:d8:78:84:ef:c3:96:5f:17:5b:82:8a:2f:f9:
c4:3b:88:53
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcTLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzEzMDYyODE0WhcNMjcwNTI5MDYyODE0WjAYMRYw
FAYDVQQDEw02YTU0ODU4My01MGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwNERlpZHuIiKCn7u8hKzbkWMO+rCHmW+w/qTVq3K9PXIVd6SJuTBLaiZ
Kj9uDlQ+AjQWE/qFa1sVKQDLb8cfW4siBZy63srfkUB4PwFgyDhxyAUGPM10zSjv
W8oUFnCNgXrEPeaQOB9EYLrU4uEHE9+2ttVuAEZiTpbBlfvLtFyOcESWsOm7GVal
fHuLmZ6VAswJAN3tgeAg83l3cWNL7/Cq/eYZCcu0xiPDMWzFxAsUKph6/vybk6th
J2euTK8oUmUmG19fK/QN9p7jxM1u+TgC1x13zdMNF6pGKcQA28NVVlIesc3t/GaD
EsCnsQ2ZRZImAjD8qLVf9P9gf8KCPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAV0
geRTzYhY9flbM7OLVHfuiujgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOTc4MzhGMDdFODQxMUYxOEI4NjE0QjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcmQMA0GCSqGSIb3DQEBCwUA
A4IBAQBgn+2LgHEkIQwx6gLFftaqNGKQKOPti6rCGSCYtL78QN6QyRffEsgR2OLC
sCc1I9Bz5JQcGtvClUhDUKoT+lf5SUAfcXL4Xsnyc8rDnfyJ0wBCRI9vq7WSzbbz
elwTo3tOI/MvmuycNUI//6ebWe0iACvZ0UO1xS9SqSdU8Nfgw8H/AZpcldtkXH12
hW5Edy1si25n2qCb7ZAmdwe5Sd6vOOZpZV4U0TAA+rS5dSLhQxndmiMYl4SY6uVM
J/g2ORoRuN6gH1e1K5IlOF+M2TXLoKzxF0SvrrtJcnPGFl93xuHrEsfa+esLNqLU
X/WFvNh4hO/Dll8XW4KKL/nEO4hT
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:42 2026 by rpki-client