Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E227AF259CE11F198DB1E06CF1D38B0.roa
File: 1E227AF259CE11F198DB1E06CF1D38B0.roa (raw, json)
Hash identifier: Zwg6SOearfdmPVdEybjPMy5m0o1yA0FVk4V1fGeBs/s=
Subject key identifier: 16:C2:B4:54:CD:17:09:C7:75:7D:5F:A7:B8:60:80:21:70:88:0C:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E227AF259CE11F198DB1E06CF1D38B0.roa
Signing time: Wed 27 May 2026 13:15:23 +0000
ROA not before: Wed 27 May 2026 13:15:17 +0000
ROA not after: Sat 04 Jul 2026 13:15:17 +0000
asID: 8796
IP address blocks: 45.194.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113215 (0x1ba3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 13:15:17 2026 GMT
Not After : Jul 4 13:15:17 2026 GMT
Subject: CN=6a16ee6b-7bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:a5:c0:89:2b:c0:da:14:24:9a:87:fd:be:
bc:af:28:c6:63:8b:38:d9:64:b0:eb:67:22:44:c7:
04:24:fd:cd:a8:46:d4:66:f2:e7:8d:fd:8d:60:40:
83:05:8b:73:0f:a7:2f:18:7d:77:7e:5a:df:81:c1:
fa:d2:25:48:99:55:a4:60:ca:3a:b7:5a:9a:23:e5:
29:63:d6:05:7a:96:84:0f:99:75:96:d9:90:76:67:
d4:58:63:3b:f4:58:45:68:68:16:de:eb:7b:2b:8d:
1e:f3:52:29:06:2b:e0:3f:43:1f:69:66:4e:a0:5d:
15:65:1a:c8:8d:2b:61:6b:3a:29:9f:6a:70:f0:1d:
a2:66:1c:bc:ff:22:5e:69:59:17:fd:64:d1:a9:f6:
61:d3:e0:1c:52:11:22:c0:b6:a2:e3:d4:20:c5:bb:
2c:15:28:dd:b9:b4:c6:9a:0d:90:b8:8b:74:70:f6:
a5:7e:52:9f:c1:ae:3c:f7:b4:b4:40:52:c3:da:af:
81:49:19:58:9d:ff:1e:0e:a6:9b:29:a6:ce:61:66:
7d:ab:90:a7:b7:21:eb:df:14:b8:b2:a3:9b:3f:60:
80:66:0c:ec:18:f0:81:19:40:20:19:9a:e1:60:c5:
58:fb:ba:96:ce:6e:05:ec:71:72:9b:15:90:93:60:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:B4:54:CD:17:09:C7:75:7D:5F:A7:B8:60:80:21:70:88:0C:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E227AF259CE11F198DB1E06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
41:65:19:0d:58:ff:9d:39:02:9b:71:91:1d:0a:fc:42:ad:75:
73:68:07:49:17:58:72:7c:3b:99:d5:ad:ae:ca:57:b3:bf:86:
ac:af:80:97:2a:2c:af:38:b1:0a:97:aa:b0:24:2e:3e:62:57:
88:46:e7:a6:78:d7:9c:73:85:ff:7b:a7:0a:24:a2:df:23:e8:
16:71:44:0b:b7:f7:ed:45:a6:54:5b:89:20:79:c4:20:8b:4e:
c1:32:90:04:db:df:9c:ad:70:04:8e:ca:f6:51:c7:f1:82:99:
b2:bd:16:65:da:d8:34:c7:b0:22:83:82:c5:0a:1c:12:17:af:
33:8d:3e:fa:4c:20:40:96:be:b9:f7:e7:2e:1a:6a:35:5b:b8:
51:97:39:14:1d:15:bf:66:f3:d5:54:c6:b5:9c:f3:f0:b8:6e:
b0:e6:1b:f0:ef:08:e0:af:fa:15:bc:bc:be:95:3d:34:0c:6d:
b1:93:8a:40:06:bd:93:1e:a8:ac:70:80:c1:af:9a:f8:9a:8e:
b5:da:85:d1:d2:2d:b0:79:46:d2:b6:f3:2d:2f:0c:5c:58:f5:
59:ca:e9:36:f1:04:55:be:24:a7:f5:02:3f:88:1f:d4:2e:26:
0a:df:93:fa:26:56:15:10:30:54:0f:a3:18:17:50:53:da:04:
2a:ee:5c:65
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbo/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI3MTMxNTE3WhcNMjYwNzA0MTMxNTE3WjAYMRYw
FAYDVQQDEw02YTE2ZWU2Yi03YmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxh+lwIkrwNoUJJqH/b68ryjGY4s42WSw62ciRMcEJP3NqEbUZvLnjf2N
YECDBYtzD6cvGH13flrfgcH60iVImVWkYMo6t1qaI+UpY9YFepaED5l1ltmQdmfU
WGM79FhFaGgW3ut7K40e81IpBivgP0MfaWZOoF0VZRrIjSthazopn2pw8B2iZhy8
/yJeaVkX/WTRqfZh0+AcUhEiwLai49QgxbssFSjdubTGmg2QuIt0cPalflKfwa48
97S0QFLD2q+BSRlYnf8eDqabKabOYWZ9q5CntyHr3xS4sqObP2CAZgzsGPCBGUAg
GZrhYMVY+7qWzm4F7HFymxWQk2D7QwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBbC
tFTNFwnHdX1fp7hggCFwiAwmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRTIyN0FGMjU5Q0UxMUYxOThEQjFFMDZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcIUMA0GCSqGSIb3DQEBCwUA
A4IBAQBBZRkNWP+dOQKbcZEdCvxCrXVzaAdJF1hyfDuZ1a2uylezv4asr4CXKiyv
OLEKl6qwJC4+YleIRuemeNecc4X/e6cKJKLfI+gWcUQLt/ftRaZUW4kgecQgi07B
MpAE29+crXAEjsr2UcfxgpmyvRZl2tg0x7Aig4LFChwSF68zjT76TCBAlr659+cu
Gmo1W7hRlzkUHRW/ZvPVVMa1nPPwuG6w5hvw7wjgr/oVvLy+lT00DG2xk4pABr2T
HqiscIDBr5r4mo612oXR0i2weUbStvMtLwxcWPVZyuk28QRVviSn9QI/iB/ULiYK
35P6JlYVEDBUD6MYF1BT2gQq7lxl
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:52 2026 by rpki-client