Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10201C2C552611F18550C6A7CE1D38B0.roa
File: 10201C2C552611F18550C6A7CE1D38B0.roa (raw, json)
Hash identifier: nPhUbewAjmVvdbXFXb8bXelHMqSEv0KlXNrFVwOYzWc=
Subject key identifier: 89:53:C6:93:10:D5:4C:45:29:9D:07:21:E7:F3:9A:BE:8B:F7:00:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B73C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10201C2C552611F18550C6A7CE1D38B0.roa
Signing time: Thu 21 May 2026 15:02:20 +0000
ROA not before: Thu 21 May 2026 15:02:15 +0000
ROA not after: Wed 24 Jun 2026 15:02:15 +0000
asID: 197574
IP address blocks: 45.192.12.0/24 maxlen: 24
45.194.66.0/24 maxlen: 24
45.198.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112444 (0x1b73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:02:15 2026 GMT
Not After : Jun 24 15:02:15 2026 GMT
Subject: CN=6a0f1e7b-7299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:7b:33:d0:87:d1:5e:34:bd:73:23:4b:16:
37:5e:c3:9b:4f:04:9f:dc:42:a4:d3:bc:c3:5f:9e:
e0:8e:95:ab:75:8b:96:49:05:84:82:73:e7:41:cf:
f7:08:61:55:53:c4:32:ac:1d:ac:67:66:90:68:96:
b5:2b:5a:b6:a4:a9:95:f4:71:79:97:c2:01:5b:a2:
b7:ac:4b:04:80:f3:33:3e:9f:8f:cd:43:61:08:9f:
ff:8b:61:44:9a:82:3f:ed:60:20:74:a4:66:85:63:
7c:38:0d:93:86:0a:95:1f:a1:10:85:31:b3:8f:9f:
c5:aa:49:eb:8c:30:48:97:9a:89:14:33:d8:ff:30:
3e:01:43:0e:2f:8f:47:52:94:af:43:9c:aa:79:89:
65:8d:56:1a:34:e4:fe:3c:17:7e:ea:46:8b:59:d2:
03:f5:7f:f7:b6:bb:5f:46:83:6b:44:f2:9d:bd:fc:
d5:c9:50:c0:b0:6b:38:c1:a9:89:37:ef:d0:18:a1:
c2:16:f8:7b:3e:0e:00:03:b5:e1:83:aa:67:52:4f:
5b:ae:24:e6:cc:9b:e9:db:42:60:3c:df:57:69:8b:
0b:97:66:03:0a:9c:4c:13:61:36:17:a7:48:3b:71:
27:60:a5:e2:b3:00:9f:e9:1c:b6:e4:74:b5:62:18:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:C6:93:10:D5:4C:45:29:9D:07:21:E7:F3:9A:BE:8B:F7:00:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10201C2C552611F18550C6A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
45.194.66.0/24
45.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:2a:31:f4:3d:66:d3:cb:bf:5a:3b:c9:50:9e:52:db:2b:
ec:37:57:bb:94:bf:8a:12:42:81:6f:90:15:55:c5:5c:fd:64:
b9:bc:ee:ff:27:cb:f1:39:aa:84:79:ea:19:6d:1c:16:f5:ea:
cb:30:6b:de:72:b0:7c:1e:33:fc:6a:51:cb:2f:d5:52:b0:8e:
5c:94:9c:23:d9:ac:a2:f6:63:a0:ce:4a:07:b7:3a:89:33:b0:
94:54:9c:cd:22:13:f7:23:6d:a3:3c:aa:56:f0:29:46:d5:86:
21:ea:2a:97:5f:89:7d:ef:72:e1:af:f1:50:6d:08:0e:22:ac:
a6:75:af:07:ff:af:a7:5b:26:69:b4:04:10:d5:22:65:fe:d7:
90:98:db:93:53:c5:e7:02:36:ca:e9:de:04:22:ae:55:28:ff:
65:3c:b0:54:78:71:bd:ed:81:f5:8b:ac:8f:de:47:6e:07:43:
bf:4b:e0:76:11:82:31:df:8c:98:a3:9d:b8:09:54:25:7b:13:
87:27:34:7f:6f:4c:25:b7:0d:7c:7f:0b:06:98:9e:a6:02:49:
5a:77:33:01:8a:36:bc:52:2e:0e:b4:6e:7b:71:20:1f:41:52:
0d:c0:8b:22:14:fe:a8:a0:ac:b7:72:8b:fc:05:50:27:85:83:
8a:c3:fe:c6
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAbc8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTUwMjE1WhcNMjYwNjI0MTUwMjE1WjAYMRYw
FAYDVQQDEw02YTBmMWU3Yi03Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApGd7M9CH0V40vXMjSxY3XsObTwSf3EKk07zDX57gjpWrdYuWSQWEgnPn
Qc/3CGFVU8QyrB2sZ2aQaJa1K1q2pKmV9HF5l8IBW6K3rEsEgPMzPp+PzUNhCJ//
i2FEmoI/7WAgdKRmhWN8OA2ThgqVH6EQhTGzj5/FqknrjDBIl5qJFDPY/zA+AUMO
L49HUpSvQ5yqeYlljVYaNOT+PBd+6kaLWdID9X/3trtfRoNrRPKdvfzVyVDAsGs4
wamJN+/QGKHCFvh7Pg4AA7Xhg6pnUk9briTmzJvp20JgPN9XaYsLl2YDCpxME2E2
F6dIO3EnYKXiswCf6Ry25HS1YhidNQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFIlT
xpMQ1UxFKZ0HIefzmr6L9wBwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDIwMUMyQzU1MjYxMUYxODU1MEM2QTdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALcAMAwQALcJCAwQALcYAMA0G
CSqGSIb3DQEBCwUAA4IBAQCjryox9D1m08u/WjvJUJ5S2yvsN1e7lL+KEkKBb5AV
VcVc/WS5vO7/J8vxOaqEeeoZbRwW9erLMGvecrB8HjP8alHLL9VSsI5clJwj2ayi
9mOgzkoHtzqJM7CUVJzNIhP3I22jPKpW8ClG1YYh6iqXX4l973Lhr/FQbQgOIqym
da8H/6+nWyZptAQQ1SJl/teQmNuTU8XnAjbK6d4EIq5VKP9lPLBUeHG97YH1i6yP
3kduB0O/S+B2EYIx34yYo524CVQlexOHJzR/b0wltw18fwsGmJ6mAkladzMBija8
Ui4OtG57cSAfQVINwIsiFP6ooKy3cov8BVAnhYOKw/7G
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:31 2026 by rpki-client