Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2960931476EC11F183B461C6CE1D38B0.roa
File: 2960931476EC11F183B461C6CE1D38B0.roa (raw, json)
Hash identifier: QkQ19mF3pX1LZC4LteMuzU5KTYadmLuo2ZjWTn5G+Yw=
Subject key identifier: 1C:B7:2A:AC:04:0B:73:04:CD:C3:49:36:2D:38:A1:AB:65:C5:6E:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C29A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2960931476EC11F183B461C6CE1D38B0.roa
Signing time: Fri 03 Jul 2026 14:33:31 +0000
ROA not before: Fri 03 Jul 2026 14:33:25 +0000
ROA not after: Mon 10 Aug 2026 14:33:25 +0000
asID: 63139
IP address blocks: 45.197.64.0/24 maxlen: 24
45.197.65.0/24 maxlen: 24
45.197.115.0/24 maxlen: 24
45.197.116.0/24 maxlen: 24
45.197.117.0/24 maxlen: 24
45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115354 (0x1c29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 14:33:25 2026 GMT
Not After : Aug 10 14:33:25 2026 GMT
Subject: CN=6a47c83b-572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:be:d3:40:1f:56:d4:04:6a:a7:a7:3b:b9:
b6:e8:11:99:62:22:dd:21:93:c5:47:8f:4c:d2:48:
2e:39:44:da:1d:1b:9d:86:53:ce:63:56:cf:87:0a:
06:ae:14:13:93:a8:c9:8b:dc:83:2b:24:13:f3:22:
34:4a:56:21:64:5c:4e:03:c5:92:4f:02:5e:2a:20:
18:4f:40:66:3f:f6:ab:2f:8f:86:24:f0:1c:fd:1a:
3e:f8:46:f7:44:84:a8:27:2d:af:79:3d:30:25:1c:
d9:bf:8c:64:45:d2:57:2e:ee:f0:7b:a1:b5:4c:35:
04:26:b3:fa:93:e3:7a:0e:c3:ad:29:71:2b:75:dd:
d5:08:53:e2:7a:e1:88:28:2f:25:df:bc:65:32:9b:
38:10:29:da:7e:0e:88:db:5d:70:2c:33:7e:f3:f7:
7d:c0:98:29:81:fb:a2:9e:b4:df:b9:8f:8f:6e:c1:
ac:26:dd:67:7f:75:86:73:eb:c5:ce:f9:0d:2c:9c:
5c:d0:9b:dd:9d:90:8f:95:a5:4b:8c:65:4d:96:ec:
84:f3:53:71:43:a9:cc:25:cf:bb:ce:a3:40:3c:b6:
9b:d6:cf:b0:02:8b:28:fb:b9:76:c8:4b:f0:f6:05:
04:a5:35:f7:47:c6:47:9e:24:86:c0:e3:d6:89:df:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:2A:AC:04:0B:73:04:CD:C3:49:36:2D:38:A1:AB:65:C5:6E:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2960931476EC11F183B461C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0/23
45.197.115.0-45.197.122.255
Signature Algorithm: sha256WithRSAEncryption
63:5c:70:fe:54:9d:2c:c9:e7:9b:bf:c4:40:f5:51:f1:ec:e2:
0c:f4:4f:61:68:89:8e:15:b9:2f:8b:97:66:ff:6f:08:b2:f2:
be:cd:f2:a5:b4:34:f7:e5:7a:75:6b:a2:8b:b2:4e:43:2a:f5:
ff:b5:c2:3b:2b:ab:71:87:57:4c:08:5b:a6:b7:ca:84:3c:73:
16:4a:ad:19:ef:d1:00:4a:1a:5b:fd:80:d0:7d:d3:66:d1:0c:
8e:5c:9d:08:43:53:e1:08:b6:c2:05:8f:0c:2a:d4:18:7e:b5:
9f:bf:e1:b2:12:59:47:27:ae:bd:8e:2c:94:72:57:b0:35:b8:
2d:3a:1e:03:02:34:02:f1:91:6d:64:90:00:11:f1:13:2e:76:
24:6e:d2:0a:77:a1:51:a4:67:12:17:99:13:cf:b3:3f:c8:0b:
10:b5:ec:64:7c:08:48:84:dc:8c:0d:d3:e1:9c:c2:7f:fb:ab:
44:ee:5c:26:e4:ba:53:79:d0:bf:be:3d:0d:93:61:40:66:69:
c6:99:ac:5d:07:6c:33:b8:cf:0b:30:e7:28:40:01:57:37:5b:
3f:da:2f:32:4c:d4:f1:7e:be:71:44:9c:58:cb:5c:88:5e:4a:
43:14:c6:6c:a2:96:c0:63:4f:a1:ef:c3:7c:d4:6f:68:f0:19:
05:53:68:9a
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAcKaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAzMTQzMzI1WhcNMjYwODEwMTQzMzI1WjAYMRYw
FAYDVQQDEw02YTQ3YzgzYi01NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3vO+00AfVtQEaqenO7m26BGZYiLdIZPFR49M0kguOUTaHRudhlPOY1bP
hwoGrhQTk6jJi9yDKyQT8yI0SlYhZFxOA8WSTwJeKiAYT0BmP/arL4+GJPAc/Ro+
+Eb3RISoJy2veT0wJRzZv4xkRdJXLu7we6G1TDUEJrP6k+N6DsOtKXErdd3VCFPi
euGIKC8l37xlMps4ECnafg6I211wLDN+8/d9wJgpgfuinrTfuY+PbsGsJt1nf3WG
c+vFzvkNLJxc0JvdnZCPlaVLjGVNluyE81NxQ6nMJc+7zqNAPLab1s+wAoso+7l2
yEvw9gUEpTX3R8ZHniSGwOPWid9UgQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBy3
KqwEC3MEzcNJNi04oatlxW5rMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yOTYwOTMxNDc2RUMxMUYxODNCNDYxQzZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLcVAMAwDBAAtxXMDBAAtxXow
DQYJKoZIhvcNAQELBQADggEBAGNccP5UnSzJ55u/xED1UfHs4gz0T2FoiY4VuS+L
l2b/bwiy8r7N8qW0NPflenVroouyTkMq9f+1wjsrq3GHV0wIW6a3yoQ8cxZKrRnv
0QBKGlv9gNB902bRDI5cnQhDU+EItsIFjwwq1Bh+tZ+/4bISWUcnrr2OLJRyV7A1
uC06HgMCNALxkW1kkAAR8RMudiRu0gp3oVGkZxIXmRPPsz/ICxC17GR8CEiE3IwN
0+Gcwn/7q0TuXCbkulN50L++PQ2TYUBmacaZrF0HbDO4zwsw5yhAAVc3Wz/aLzJM
1PF+vnFEnFjLXIheSkMUxmyilsBjT6Hvw3zUb2jwGQVTaJo=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:45 2026 by rpki-client