Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/331EA724507711F1A00E2AA4CE1D38B0.roa
File: 331EA724507711F1A00E2AA4CE1D38B0.roa (raw, json)
Hash identifier: WNuvY3yVE5FD2xYeMsaS0BxTyeiyf1UPyLdbn8bN4M4=
Subject key identifier: C8:06:AE:3B:47:F6:18:57:CA:D5:F0:8E:21:9A:B5:69:31:2E:0D:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/331EA724507711F1A00E2AA4CE1D38B0.roa
Signing time: Fri 15 May 2026 16:00:32 +0000
ROA not before: Fri 15 May 2026 16:00:27 +0000
ROA not after: Mon 22 Jun 2026 16:00:27 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
45.205.16.0/24 maxlen: 24
45.205.17.0/24 maxlen: 24
45.205.18.0/24 maxlen: 24
45.205.19.0/24 maxlen: 24
45.205.20.0/24 maxlen: 24
45.205.21.0/24 maxlen: 24
45.205.22.0/24 maxlen: 24
45.205.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111822 (0x1b4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 16:00:27 2026 GMT
Not After : Jun 22 16:00:27 2026 GMT
Subject: CN=6a074320-c629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:30:7c:87:28:fe:36:f6:0c:8a:8b:2b:fb:
29:20:fd:db:8d:b9:2d:05:9c:f3:71:37:43:c8:33:
37:f4:a2:23:9d:f4:3f:11:4b:66:01:21:b2:09:4d:
05:c8:94:4a:21:fc:81:c1:98:60:93:7e:04:60:3a:
d4:7d:85:f7:82:b8:42:3c:74:ac:1e:a3:0d:2f:2a:
ea:f6:a4:93:fc:88:6b:0b:73:de:29:c5:d4:81:6b:
fa:a5:b7:2a:30:48:42:4e:93:0f:18:e1:8c:46:53:
13:e2:fc:96:64:59:0b:9e:81:41:f2:2c:3e:82:f0:
f8:01:b7:c7:1f:0a:a8:ed:cd:ed:6e:87:11:43:40:
8d:c7:35:da:2c:5f:de:bd:e8:fb:ff:41:7c:8e:d9:
75:be:54:31:09:8c:9c:85:c5:cc:34:29:47:0f:f7:
09:59:9f:c4:b6:d2:fc:57:0d:99:b1:8c:62:f4:af:
5a:c9:e6:89:1a:e0:70:71:45:86:95:4b:1c:3b:2f:
0f:d1:c5:f5:8c:ad:3c:55:c5:34:4e:58:92:0c:08:
c2:7a:82:6a:dd:25:4b:83:08:aa:63:c1:ab:bb:d4:
7f:43:4f:ab:59:35:52:88:48:af:aa:c6:5d:a0:a4:
df:78:c1:63:67:f7:26:66:d0:7b:9a:e4:13:dc:d4:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:AE:3B:47:F6:18:57:CA:D5:F0:8E:21:9A:B5:69:31:2E:0D:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/331EA724507711F1A00E2AA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
63:5d:bd:da:b8:38:61:fb:92:19:ba:5a:10:cf:25:58:e5:da:
bd:00:61:60:0e:4d:6e:fb:b7:9d:4c:07:16:54:23:53:55:6f:
5e:cb:ed:1a:6b:a4:60:98:3d:28:f2:54:83:e0:2a:b7:3d:be:
1d:b5:a5:c9:39:e0:03:52:3b:59:6f:aa:20:ff:c3:38:60:df:
c8:36:b7:af:9e:69:ea:21:b7:26:a2:48:10:5a:66:a9:cb:c8:
55:88:4c:aa:0c:60:9a:d7:e9:4c:5a:1a:a2:5f:83:47:f7:be:
b2:a6:17:27:ca:d1:da:70:5f:4e:a9:82:55:39:9f:33:d7:b0:
66:eb:19:75:57:09:9f:4e:5f:ae:5d:0b:4e:2e:b4:bc:db:0b:
f5:0d:91:70:30:a8:c4:65:9e:fa:0f:60:9c:ae:85:e0:f5:5e:
69:83:70:ff:25:8f:9f:1d:2f:ee:41:75:1f:4a:ac:dc:14:b0:
71:24:57:ac:06:af:2e:14:98:e6:8f:95:1e:fc:d4:a0:1f:8d:
34:b3:0d:f9:d3:57:55:21:76:69:a7:8f:95:18:51:07:85:ca:
67:84:70:ab:d7:e6:e3:6a:e0:3e:c0:82:db:27:a1:69:77:c0:
be:50:f8:c9:32:93:37:44:d8:c7:d6:f0:aa:39:ff:42:94:c1:
cd:31:db:97
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbTOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE1MTYwMDI3WhcNMjYwNjIyMTYwMDI3WjAYMRYw
FAYDVQQDEw02YTA3NDMyMC1jNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2o8wfIco/jb2DIqLK/spIP3bjbktBZzzcTdDyDM39KIjnfQ/EUtmASGy
CU0FyJRKIfyBwZhgk34EYDrUfYX3grhCPHSsHqMNLyrq9qST/IhrC3PeKcXUgWv6
pbcqMEhCTpMPGOGMRlMT4vyWZFkLnoFB8iw+gvD4AbfHHwqo7c3tbocRQ0CNxzXa
LF/evej7/0F8jtl1vlQxCYychcXMNClHD/cJWZ/EttL8Vw2ZsYxi9K9ayeaJGuBw
cUWGlUscOy8P0cX1jK08VcU0TliSDAjCeoJq3SVLgwiqY8Gru9R/Q0+rWTVSiEiv
qsZdoKTfeMFjZ/cmZtB7muQT3NSbQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMgG
rjtH9hhXytXwjiGatWkxLg3AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzFFQTcyNDUwNzcxMUYxQTAwRTJBQTRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQBjXb3auDhh+5IZuloQzyVY5dq9AGFgDk1u+7edTAcWVCNTVW9ey+0aa6Rg
mD0o8lSD4Cq3Pb4dtaXJOeADUjtZb6og/8M4YN/INrevnmnqIbcmokgQWmapy8hV
iEyqDGCa1+lMWhqiX4NH976yphcnytHacF9OqYJVOZ8z17Bm6xl1VwmfTl+uXQtO
LrS82wv1DZFwMKjEZZ76D2CcroXg9V5pg3D/JY+fHS/uQXUfSqzcFLBxJFesBq8u
FJjmj5Ue/NSgH400sw3501dVIXZpp4+VGFEHhcpnhHCr1+bjauA+wILbJ6Fpd8C+
UPjJMpM3RNjH1vCqOf9ClMHNMduX
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:18 2026 by rpki-client