Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BD70D1881BF11F19A8416A3CE1D38B0.roa
File: 0BD70D1881BF11F19A8416A3CE1D38B0.roa (raw, json)
Hash identifier: ZICk74udGs7PzLde3oFVidqWxDF+m5x+uLXLi218iqU=
Subject key identifier: 33:EF:DA:F8:E2:A3:7F:31:6C:44:22:A6:18:EF:5E:65:AA:6F:40:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BD70D1881BF11F19A8416A3CE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:08:17 +0000
ROA not before: Fri 17 Jul 2026 09:08:12 +0000
ROA not after: Mon 24 Aug 2026 09:08:12 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116169 (0x1c5c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 09:08:12 2026 GMT
Not After : Aug 24 09:08:12 2026 GMT
Subject: CN=6a59f100-f883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:84:80:43:33:a8:dc:f8:a6:c8:bc:78:61:
bb:8f:c0:d5:a1:aa:cd:ed:1d:94:b0:33:f1:1e:a4:
1c:32:0f:8b:ec:e7:94:3f:2e:b0:0f:47:ab:69:1f:
d5:43:8d:43:16:71:75:45:31:f7:34:eb:a0:10:4e:
c8:d2:67:45:3d:55:59:ec:6a:8b:5e:83:6d:85:4b:
dd:36:6c:b5:7f:7c:0e:90:1a:fb:2b:7e:08:b0:e7:
4b:6e:b5:e7:83:b3:6b:d9:ac:77:89:98:2d:0d:29:
06:39:f1:09:84:e1:57:3e:d6:ea:fc:c1:d4:cc:c2:
cc:bf:f2:9b:4c:b0:82:14:0a:16:e9:f2:05:b9:6d:
79:b0:d2:1b:5b:6f:3c:32:3f:ef:a5:9b:24:0f:1a:
4a:eb:b5:e8:19:74:5d:1b:16:75:0a:13:96:2e:fe:
38:09:dd:f7:7d:68:84:fc:5f:70:0f:8c:67:58:6d:
6e:16:27:08:60:4f:78:77:dd:92:bd:40:6e:33:8e:
d6:ef:59:47:14:9d:01:d9:14:84:2d:98:fa:1e:48:
57:7a:f7:d0:ca:68:df:e7:54:b3:61:eb:5c:91:42:
ba:76:1a:bc:23:14:d2:b5:86:95:55:01:b6:d1:b9:
41:a5:a9:79:f1:42:18:4f:fe:0c:13:ac:11:5c:64:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:DA:F8:E2:A3:7F:31:6C:44:22:A6:18:EF:5E:65:AA:6F:40:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BD70D1881BF11F19A8416A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:6b:6b:0e:2b:20:b6:ca:85:94:6d:e1:7e:c2:61:6d:ec:7b:
28:e3:92:d2:73:a7:bd:94:1f:35:2e:24:3f:2f:78:e0:f1:26:
4e:30:e7:6d:9d:0c:1a:05:7b:6b:b9:40:f9:3d:eb:a4:e6:e9:
86:44:11:6a:da:03:5e:b7:0f:0e:8e:5f:5a:f9:39:a6:4b:c5:
9c:27:7a:a2:dc:d6:82:ef:7c:fe:a8:b2:44:a6:f9:97:03:2c:
0d:ab:7e:d4:57:40:19:a2:19:70:ed:bc:d8:71:8f:9d:cd:ee:
8d:cc:83:3e:53:99:c5:38:70:39:f9:a6:75:0d:e4:e7:c6:dc:
0f:0d:bf:cc:20:5e:74:22:16:79:10:e9:ed:42:ea:5d:b7:3c:
73:3f:f2:d3:c3:ae:f5:14:08:6c:04:93:55:7b:dc:b1:71:db:
83:25:d2:bd:93:0e:f0:67:2d:19:0b:41:99:bc:11:4f:e1:38:
ac:c6:2d:e7:e2:89:be:1a:ea:d8:d3:60:10:10:af:e5:b1:bf:
0e:e7:6c:2d:ae:f5:8c:c9:d1:e8:9a:58:38:13:4f:94:54:e4:
06:c8:0d:05:e6:46:d0:62:b3:46:87:96:db:a7:bb:95:68:38:
5b:8c:5d:b1:7c:69:7d:c0:b2:c3:c5:be:4c:0f:8d:2b:84:bb:
b3:7b:40:d2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcXJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE3MDkwODEyWhcNMjYwODI0MDkwODEyWjAYMRYw
FAYDVQQDEw02YTU5ZjEwMC1mODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7dyEgEMzqNz4psi8eGG7j8DVoarN7R2UsDPxHqQcMg+L7OeUPy6wD0er
aR/VQ41DFnF1RTH3NOugEE7I0mdFPVVZ7GqLXoNthUvdNmy1f3wOkBr7K34IsOdL
brXng7Nr2ax3iZgtDSkGOfEJhOFXPtbq/MHUzMLMv/KbTLCCFAoW6fIFuW15sNIb
W288Mj/vpZskDxpK67XoGXRdGxZ1ChOWLv44Cd33fWiE/F9wD4xnWG1uFicIYE94
d92SvUBuM47W71lHFJ0B2RSELZj6HkhXevfQymjf51SzYetckUK6dhq8IxTStYaV
VQG20blBpal58UIYT/4ME6wRXGSr4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDPv
2vjio38xbEQiphjvXmWqb0CgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQkQ3MEQxODgxQkYxMUYxOUE4NDE2QTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc+AMA0GCSqGSIb3DQEBCwUA
A4IBAQCLa2sOKyC2yoWUbeF+wmFt7Hso45LSc6e9lB81LiQ/L3jg8SZOMOdtnQwa
BXtruUD5Peuk5umGRBFq2gNetw8Ojl9a+TmmS8WcJ3qi3NaC73z+qLJEpvmXAywN
q37UV0AZohlw7bzYcY+dze6NzIM+U5nFOHA5+aZ1DeTnxtwPDb/MIF50IhZ5EOnt
QupdtzxzP/LTw671FAhsBJNVe9yxcduDJdK9kw7wZy0ZC0GZvBFP4Tisxi3n4om+
GurY02AQEK/lsb8O52wtrvWMydHomlg4E0+UVOQGyA0F5kbQYrNGh5bbp7uVaDhb
jF2xfGl9wLLDxb5MD40rhLuze0DS
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:55 2026 by rpki-client