Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B7C4A3E4ED911F19A4EB7CFCE1D38B0.roa
File: 2B7C4A3E4ED911F19A4EB7CFCE1D38B0.roa (raw, json)
Hash identifier: 8ye9vFcvJNTfymWPP1+64VrQdS1RlH3b3mkk2cUn180=
Subject key identifier: 4A:83:74:87:41:0A:EB:45:2A:B9:AB:F3:30:F1:6A:EA:94:05:3F:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B443
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B7C4A3E4ED911F19A4EB7CFCE1D38B0.roa
Signing time: Wed 13 May 2026 14:36:47 +0000
ROA not before: Wed 13 May 2026 14:36:42 +0000
ROA not after: Fri 19 Jun 2026 14:36:42 +0000
asID: 6079
IP address blocks: 45.205.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 02 Jun 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111683 (0x1b443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 14:36:42 2026 GMT
Not After : Jun 19 14:36:42 2026 GMT
Subject: CN=6a048c7f-923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:3e:03:e4:04:98:8e:e3:7c:fb:d1:f8:74:
f5:77:2e:39:5f:34:db:11:a2:5b:27:e7:1f:64:d4:
6a:cf:c0:fd:41:52:6e:78:ad:59:f5:29:69:09:08:
ec:68:a7:92:78:0e:58:e7:92:22:ee:b5:b6:c6:94:
33:bf:3f:4b:7f:ca:7d:5f:4a:13:2d:81:8c:6e:f8:
1b:ac:15:64:c7:ab:01:d6:43:17:5d:9c:3b:30:e9:
35:f9:7f:2c:96:e8:8d:7e:60:e1:55:e2:35:99:a8:
67:5f:cf:ff:2d:0c:7c:8d:e1:32:9c:5d:c7:d9:09:
af:c8:b3:f2:cb:0a:7e:88:05:49:bd:38:42:76:02:
3b:43:a6:81:11:5d:4d:e4:7e:69:32:d5:e6:4e:40:
45:c3:32:68:e7:71:05:c7:a5:16:40:c4:b8:34:7b:
a8:df:25:02:c1:be:05:ba:ed:6a:0e:a9:07:2c:0b:
c8:5e:b7:e6:86:8e:93:19:9c:85:f1:81:4c:25:3a:
dd:b8:36:43:09:f0:86:eb:f3:9c:f5:90:9e:57:cc:
96:8c:4f:05:93:f8:8e:7a:41:57:dc:c4:e2:10:f9:
18:3e:9e:4c:f1:ee:61:40:23:ef:58:2b:bf:1a:c6:
a2:e1:e6:88:4d:d3:c6:9f:68:92:89:cf:c9:14:a1:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:74:87:41:0A:EB:45:2A:B9:AB:F3:30:F1:6A:EA:94:05:3F:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B7C4A3E4ED911F19A4EB7CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.152.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ca:9d:80:0b:1f:02:07:c1:00:4b:3f:34:fe:27:66:eb:fd:
15:78:70:30:91:5e:e5:c4:21:a6:5d:75:56:28:d7:c8:92:de:
9b:77:e1:e4:93:a9:87:55:28:d0:78:62:e8:85:d0:8b:1e:8b:
bf:f9:7f:cd:b5:b3:29:c0:bb:03:c2:01:68:2a:92:21:de:82:
a1:e9:2f:ef:3b:af:4a:fe:35:34:e6:ea:37:13:69:71:1d:60:
60:e9:11:14:6f:81:f1:b9:ee:9e:66:51:01:4f:e2:cb:4c:b5:
1e:5c:18:b2:e4:68:aa:6b:13:d9:e0:02:1c:6f:fb:c4:07:dc:
bf:7c:58:10:ff:2d:7b:c5:70:50:71:d3:95:50:99:18:9e:ff:
98:87:27:cd:c7:9a:4e:81:43:2a:31:47:f5:90:21:ce:bf:22:
a7:a9:23:de:7f:e3:4f:f9:5e:a2:3b:bc:81:2b:9a:01:bd:dd:
14:7f:ce:be:f1:92:37:cd:0c:3f:a5:95:fc:c7:66:45:a2:25:
cc:b1:04:33:3d:a6:27:07:8c:97:5a:70:bf:29:2d:00:bd:d5:
ac:37:e0:2e:ba:23:28:8c:70:10:6b:22:58:34:a6:45:dd:99:
ae:82:a0:e9:9a:6d:47:4f:3f:df:66:9a:8a:b5:af:4a:22:6c:
51:69:f2:51
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbRDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTEzMTQzNjQyWhcNMjYwNjE5MTQzNjQyWjAYMRYw
FAYDVQQDEw02YTA0OGM3Zi05MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyrw+A+QEmI7jfPvR+HT1dy45XzTbEaJbJ+cfZNRqz8D9QVJueK1Z9Slp
CQjsaKeSeA5Y55Ii7rW2xpQzvz9Lf8p9X0oTLYGMbvgbrBVkx6sB1kMXXZw7MOk1
+X8sluiNfmDhVeI1mahnX8//LQx8jeEynF3H2QmvyLPyywp+iAVJvThCdgI7Q6aB
EV1N5H5pMtXmTkBFwzJo53EFx6UWQMS4NHuo3yUCwb4Fuu1qDqkHLAvIXrfmho6T
GZyF8YFMJTrduDZDCfCG6/Oc9ZCeV8yWjE8Fk/iOekFX3MTiEPkYPp5M8e5hQCPv
WCu/Gsai4eaITdPGn2iSic/JFKEVIwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEqD
dIdBCutFKrmr8zDxauqUBT8oMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQjdDNEEzRTRFRDkxMUYxOUE0RUI3Q0ZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc2YMA0GCSqGSIb3DQEBCwUA
A4IBAQAWyp2ACx8CB8EASz80/idm6/0VeHAwkV7lxCGmXXVWKNfIkt6bd+Hkk6mH
VSjQeGLohdCLHou/+X/NtbMpwLsDwgFoKpIh3oKh6S/vO69K/jU05uo3E2lxHWBg
6REUb4Hxue6eZlEBT+LLTLUeXBiy5GiqaxPZ4AIcb/vEB9y/fFgQ/y17xXBQcdOV
UJkYnv+YhyfNx5pOgUMqMUf1kCHOvyKnqSPef+NP+V6iO7yBK5oBvd0Uf86+8ZI3
zQw/pZX8x2ZFoiXMsQQzPaYnB4yXWnC/KS0AvdWsN+AuuiMojHAQayJYNKZF3Zmu
gqDpmm1HTz/fZpqKta9KImxRafJR
-----END CERTIFICATE-----
Generated at Sun May 31 06:53:09 2026 by rpki-client