Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/196F7A6869AB11F18C601BE8CE1D38B0.roa
File: 196F7A6869AB11F18C601BE8CE1D38B0.roa (raw, json)
Hash identifier: i78lUSqSNsyWVWS/Bm7HennDJ6ZTk7MGsCf4u4OepTc=
Subject key identifier: 6F:D4:6C:24:2D:B1:56:EB:F5:11:A8:B8:71:D0:DA:62:F2:85:28:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/196F7A6869AB11F18C601BE8CE1D38B0.roa
Signing time: Tue 16 Jun 2026 17:45:01 +0000
ROA not before: Tue 16 Jun 2026 17:44:57 +0000
ROA not after: Wed 22 Jul 2026 17:44:57 +0000
asID: 273986
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114259 (0x1be53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 17:44:57 2026 GMT
Not After : Jul 22 17:44:57 2026 GMT
Subject: CN=6a318b9d-9a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:d3:25:5a:04:c8:f8:e7:16:61:63:13:24:
d3:c5:63:a6:7c:1f:a1:43:68:88:a6:a9:ab:be:09:
e3:aa:b1:92:f9:81:d6:50:41:59:82:c7:50:9f:23:
30:42:a4:c4:dc:bc:38:38:e7:65:b9:be:4e:85:4f:
d9:09:4a:b8:2c:9b:70:bb:3e:f8:53:8c:52:e2:84:
ac:01:1e:ce:af:a1:a8:ea:4d:3a:36:a2:3f:ba:84:
e1:6c:c2:88:20:8f:82:0c:ac:3f:c6:03:af:52:25:
78:9a:cf:64:e6:e5:c5:f9:4c:ed:c5:c9:64:6b:de:
0d:a4:88:5c:12:cb:76:9b:48:dd:42:02:06:32:7e:
e6:be:6b:ef:e7:ac:75:d1:4a:ef:ee:cb:18:e0:53:
97:b1:63:e4:7f:3a:db:ca:04:17:0e:51:24:2f:f3:
fe:de:b4:21:f9:b6:54:cf:bb:d8:34:1d:5c:6c:4b:
9a:30:d0:79:75:cf:2c:ca:5f:b9:2a:d6:00:15:a5:
9d:65:a5:ac:0e:29:ae:96:85:e9:c8:ed:b3:fe:ba:
e4:1f:50:d4:93:07:7a:40:29:ae:b1:02:65:5e:5b:
bc:18:52:b7:79:1d:f8:3a:d7:14:91:50:47:4a:1d:
06:89:45:db:14:3e:9c:fc:ae:69:2b:e4:c0:7c:3e:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:6C:24:2D:B1:56:EB:F5:11:A8:B8:71:D0:DA:62:F2:85:28:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/196F7A6869AB11F18C601BE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
40:63:25:13:15:ae:ca:6e:d2:96:4b:8f:43:cc:71:1d:c5:ed:
60:f5:d0:f6:f4:4c:83:f6:28:ac:b6:fa:e7:dc:dd:86:2a:26:
71:84:91:d1:22:fd:2a:af:48:87:9d:ef:a8:8e:e0:da:2d:25:
a2:ae:79:36:9b:77:73:8c:31:d5:0d:25:a7:41:4f:e7:aa:84:
2b:87:07:9b:f1:77:ec:51:21:8c:f3:41:46:34:45:82:34:3f:
4a:1c:ac:32:eb:a8:a1:da:35:2e:d0:65:20:5d:da:90:42:e2:
ee:73:8d:f5:76:dc:d6:c7:75:7f:ff:aa:6e:9b:45:35:be:74:
71:de:36:b8:83:ea:d5:5c:e7:48:4f:6b:5b:53:6c:61:48:7c:
73:98:47:dc:6d:4b:31:fe:9d:29:6c:cd:aa:b8:9e:56:84:ce:
d6:36:73:b8:20:2e:8b:c8:cf:59:91:93:5f:5f:5e:66:da:b3:
6e:4e:7d:84:99:90:d4:52:b4:d1:ec:80:a3:43:71:fe:f9:47:
54:4c:49:31:e9:68:87:d4:ee:47:c5:61:5a:d6:b8:6a:19:b9:
a7:95:16:09:2a:44:40:00:aa:28:93:06:35:16:0d:0f:f0:78:
74:2e:b8:97:50:85:3a:3c:cf:88:6c:8a:97:bc:81:3c:1c:6b:
6e:29:aa:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAb5TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE2MTc0NDU3WhcNMjYwNzIyMTc0NDU3WjAYMRYw
FAYDVQQDEw02YTMxOGI5ZC05YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA41fTJVoEyPjnFmFjEyTTxWOmfB+hQ2iIpqmrvgnjqrGS+YHWUEFZgsdQ
nyMwQqTE3Lw4OOdlub5OhU/ZCUq4LJtwuz74U4xS4oSsAR7Or6Go6k06NqI/uoTh
bMKIII+CDKw/xgOvUiV4ms9k5uXF+Uztxclka94NpIhcEst2m0jdQgIGMn7mvmvv
56x10Urv7ssY4FOXsWPkfzrbygQXDlEkL/P+3rQh+bZUz7vYNB1cbEuaMNB5dc8s
yl+5KtYAFaWdZaWsDimuloXpyO2z/rrkH1DUkwd6QCmusQJlXlu8GFK3eR34OtcU
kVBHSh0GiUXbFD6c/K5pK+TAfD7O7QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG/U
bCQtsVbr9RGouHHQ2mLyhSh9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOTZGN0E2ODY5QUIxMUYxOEM2MDFCRThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ3MA0GCSqGSIb3DQEBCwUA
A4IBAQBAYyUTFa7KbtKWS49DzHEdxe1g9dD29EyD9iistvrn3N2GKiZxhJHRIv0q
r0iHne+ojuDaLSWirnk2m3dzjDHVDSWnQU/nqoQrhweb8XfsUSGM80FGNEWCND9K
HKwy66ih2jUu0GUgXdqQQuLuc431dtzWx3V//6pum0U1vnRx3ja4g+rVXOdIT2tb
U2xhSHxzmEfcbUsx/p0pbM2quJ5WhM7WNnO4IC6LyM9ZkZNfX15m2rNuTn2EmZDU
UrTR7ICjQ3H++UdUTEkx6WiH1O5HxWFa1rhqGbmnlRYJKkRAAKookwY1Fg0P8Hh0
LriXUIU6PM+IbIqXvIE8HGtuKapL
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:14 2026 by rpki-client