Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C2C521E5C5611F180B90BE2CE1D38B0.roa
File: 2C2C521E5C5611F180B90BE2CE1D38B0.roa (raw, json)
Hash identifier: nGrus/yUacyhbWvZ7ontQLQLDmy4DDprT+Oik2kQq0c=
Subject key identifier: B9:09:92:DA:6C:FF:C3:66:8C:E7:9E:78:95:FC:FA:A0:33:C6:6D:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C2C521E5C5611F180B90BE2CE1D38B0.roa
Signing time: Sat 30 May 2026 18:34:21 +0000
ROA not before: Sat 30 May 2026 18:34:16 +0000
ROA not after: Sat 06 Jun 2026 18:34:16 +0000
asID: 23764
IP address blocks: 45.196.24.0/24 maxlen: 24
45.196.25.0/24 maxlen: 24
45.196.26.0/24 maxlen: 24
45.196.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113392 (0x1baf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 18:34:16 2026 GMT
Not After : Jun 6 18:34:16 2026 GMT
Subject: CN=6a1b2dac-4de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:08:64:4f:32:04:54:11:67:c4:bc:8a:7a:
a4:a5:1c:db:21:eb:49:b1:1f:9d:fb:73:4a:19:47:
29:a9:2b:61:44:17:df:d5:d6:ae:d8:a1:6d:30:36:
09:26:e0:68:bb:a0:1d:c3:79:e0:8e:ff:ae:a2:ef:
ad:aa:f8:d4:0e:55:d7:7c:c2:b2:f7:a0:34:bb:70:
d5:c8:c7:a1:36:d6:ca:2b:7f:17:66:16:7f:93:40:
68:34:2f:f1:62:57:99:2c:0e:26:30:9b:60:2c:18:
ca:f3:d1:5f:37:f0:04:1a:b1:67:c3:f2:cb:1d:4d:
09:df:c9:c5:5f:74:29:8f:c8:ef:00:70:bf:e0:30:
4e:17:28:9e:65:42:78:1b:25:f6:0d:91:27:7f:54:
54:8b:92:73:f0:e5:46:f4:d2:86:1a:c6:52:3d:d9:
69:b8:1c:9c:00:62:db:79:54:55:39:21:25:0e:97:
7f:d2:c6:27:f1:2f:f0:0b:16:ad:cb:ab:58:7b:be:
a4:29:9c:88:48:77:a3:0c:41:7c:69:c5:0d:62:b5:
50:35:f1:f8:5a:69:cc:17:e5:a2:e1:73:c3:1f:77:
96:12:cd:18:f1:5a:be:67:89:90:29:d4:5c:8a:2a:
a5:31:ab:c6:53:cc:08:1e:64:36:a7:3e:04:a7:bb:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:92:DA:6C:FF:C3:66:8C:E7:9E:78:95:FC:FA:A0:33:C6:6D:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C2C521E5C5611F180B90BE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.24.0/22
Signature Algorithm: sha256WithRSAEncryption
38:2a:f1:cf:f7:e2:f9:20:22:9e:00:7a:7e:06:4b:ba:83:e1:
1f:c2:12:ff:72:98:d4:23:ce:f2:0b:9a:54:01:3c:25:81:bd:
f3:33:9c:88:15:8a:cd:f7:0e:0e:f9:fb:78:3b:cb:d2:87:fc:
43:78:2b:5a:3f:11:63:21:cd:f3:5b:4d:1c:31:a6:a9:a3:50:
e2:fc:95:4a:2f:e9:5f:f3:ec:6e:38:b3:49:54:30:a8:f3:5b:
40:0f:a4:88:72:b8:dd:41:12:fc:9f:06:c5:5e:77:65:18:bc:
75:b9:7f:1b:6b:db:e2:35:86:43:d4:c7:c6:eb:45:a2:6f:f8:
e9:04:7a:da:77:4f:b2:12:88:8c:3e:e3:f3:07:2c:07:4f:75:
72:a1:98:03:5a:cf:de:9a:e8:46:6a:92:bb:6a:db:9b:a7:3d:
54:2d:7e:21:b4:d8:6b:fa:85:be:65:19:98:65:91:7b:27:a1:
b8:8f:1d:a0:82:ea:b5:38:e1:4e:b6:37:4a:e7:0d:e8:e1:4f:
5a:fb:e9:cb:7e:81:a3:70:65:91:c6:12:cb:3d:23:e5:cb:8f:
5f:11:82:1f:11:a2:59:21:14:85:83:2a:44:37:36:bd:ca:8f:
4d:ce:5a:1f:9a:0d:9d:95:67:d1:94:43:79:2a:ca:7e:ca:2c:
2b:f9:c9:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbrwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTMwMTgzNDE2WhcNMjYwNjA2MTgzNDE2WjAYMRYw
FAYDVQQDEw02YTFiMmRhYy00ZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtvoIZE8yBFQRZ8S8inqkpRzbIetJsR+d+3NKGUcpqSthRBff1dau2KFt
MDYJJuBou6Adw3ngjv+uou+tqvjUDlXXfMKy96A0u3DVyMehNtbKK38XZhZ/k0Bo
NC/xYleZLA4mMJtgLBjK89FfN/AEGrFnw/LLHU0J38nFX3Qpj8jvAHC/4DBOFyie
ZUJ4GyX2DZEnf1RUi5Jz8OVG9NKGGsZSPdlpuBycAGLbeVRVOSElDpd/0sYn8S/w
Cxaty6tYe76kKZyISHejDEF8acUNYrVQNfH4WmnMF+Wi4XPDH3eWEs0Y8Vq+Z4mQ
KdRciiqlMavGU8wIHmQ2pz4Ep7tjcQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLkJ
ktps/8NmjOeeeJX8+qAzxm1dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQzJDNTIxRTVDNTYxMUYxODBCOTBCRTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcQYMA0GCSqGSIb3DQEBCwUA
A4IBAQA4KvHP9+L5ICKeAHp+Bku6g+EfwhL/cpjUI87yC5pUATwlgb3zM5yIFYrN
9w4O+ft4O8vSh/xDeCtaPxFjIc3zW00cMaapo1Di/JVKL+lf8+xuOLNJVDCo81tA
D6SIcrjdQRL8nwbFXndlGLx1uX8ba9viNYZD1MfG60Wib/jpBHrad0+yEoiMPuPz
BywHT3VyoZgDWs/emuhGapK7atubpz1ULX4htNhr+oW+ZRmYZZF7J6G4jx2gguq1
OOFOtjdK5w3o4U9a++nLfoGjcGWRxhLLPSPly49fEYIfEaJZIRSFgypENza9yo9N
zlofmg2dlWfRlEN5Ksp+yiwr+ckN
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:08 2026 by rpki-client