Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AEAEEC552D11F1B2C583D4CE1D38B0.roa
File: 40AEAEEC552D11F1B2C583D4CE1D38B0.roa (raw, json)
Hash identifier: TAR+buww8rDjIJsmlu85ndWSWdOi1uuUO8wDT6gDvRA=
Subject key identifier: 7A:33:EB:64:E1:9E:11:8F:07:24:CD:6B:FA:3F:32:F9:9C:1E:98:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B759
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AEAEEC552D11F1B2C583D4CE1D38B0.roa
Signing time: Thu 21 May 2026 15:53:48 +0000
ROA not before: Thu 21 May 2026 15:53:43 +0000
ROA not after: Sat 08 Aug 2026 15:53:43 +0000
asID: 149014
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.160.0/24 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112473 (0x1b759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:53:43 2026 GMT
Not After : Aug 8 15:53:43 2026 GMT
Subject: CN=6a0f2a8b-48ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:dd:6e:57:49:b9:56:1c:47:86:64:1b:75:
8d:5b:2b:a8:13:e0:c1:b4:cf:f7:97:64:44:07:20:
2c:96:d1:1a:46:a8:72:93:72:24:20:0c:3a:8f:67:
fc:a4:22:0b:cb:00:04:7a:d3:99:68:56:a3:d3:a2:
04:1f:0f:3f:6e:3a:71:bf:bd:9a:2d:a7:3b:31:98:
26:2c:ba:6d:c4:2e:84:d4:45:f7:b0:50:a7:2e:1a:
63:72:79:63:3f:86:2f:63:c9:23:9f:f0:27:c5:1c:
dc:fd:ad:a8:37:44:72:4f:c8:d4:5e:7f:4e:e6:71:
5d:ba:f6:db:c0:7b:4d:07:cc:df:33:3e:c9:0a:23:
5e:7c:6d:79:3a:97:7b:14:32:c2:9f:39:7d:da:6a:
1e:44:24:24:ca:8e:60:9c:2e:1f:51:33:dd:07:7d:
b7:4e:c9:34:47:d0:12:97:cd:0e:4c:1f:14:de:fd:
ae:3a:e3:18:3b:7a:eb:20:7d:ec:b6:be:a2:ae:fc:
85:97:e6:d8:f7:6f:06:22:bb:6f:c1:f2:52:83:22:
dd:fc:de:9b:7b:51:33:de:33:a0:19:29:75:9e:94:
79:98:b4:6b:9c:8c:a8:09:cf:20:ee:22:dd:46:bf:
8d:55:ed:e3:dd:0d:df:30:d8:90:f5:db:e9:e1:35:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:33:EB:64:E1:9E:11:8F:07:24:CD:6B:FA:3F:32:F9:9C:1E:98:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AEAEEC552D11F1B2C583D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
5a:7e:5c:7e:98:b5:ed:0f:a7:66:62:a1:df:67:05:50:e7:77:
d6:c4:e4:26:db:b8:3e:f6:c8:b8:2b:86:db:ef:05:a8:41:c8:
71:7b:a3:65:0d:47:97:9a:a2:f1:ba:95:4c:0b:8e:d5:e6:73:
ad:88:e6:87:7b:df:c5:2e:c1:ad:dc:21:7a:c5:99:d0:65:a7:
b5:b0:51:4e:6c:a4:9d:c0:95:d6:ed:5d:39:eb:76:61:40:97:
7a:5a:28:b6:14:f1:cc:39:a2:3a:1a:98:65:02:c4:3e:f8:0d:
18:1d:75:f2:5c:39:b7:e3:a1:97:87:4c:ba:ab:a9:24:f5:ab:
48:f5:2a:07:0b:04:38:e8:91:62:d3:6c:07:1c:98:f4:52:9a:
e4:ff:22:da:b2:86:14:4f:16:1e:f1:c3:03:21:67:18:b0:31:
a6:27:6a:92:37:9c:d5:c5:27:b1:c6:7c:34:88:48:43:bc:b9:
f9:c6:e0:db:f5:40:df:03:24:98:b1:33:cd:b0:4a:84:47:1e:
4d:9d:a4:3d:88:61:a1:00:42:32:af:99:76:e9:10:ce:c3:24:
58:1b:48:94:82:c4:1d:a9:88:3b:fb:dd:74:2e:71:06:49:13:
89:46:bf:aa:cc:0a:9c:b8:57:79:1a:07:26:11:9b:a5:1b:c2:
26:5d:ab:b1
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAbdZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTU1MzQzWhcNMjYwODA4MTU1MzQzWjAYMRYw
FAYDVQQDEw02YTBmMmE4Yi00OGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2EbdbldJuVYcR4ZkG3WNWyuoE+DBtM/3l2REByAsltEaRqhyk3IkIAw6
j2f8pCILywAEetOZaFaj06IEHw8/bjpxv72aLac7MZgmLLptxC6E1EX3sFCnLhpj
cnljP4YvY8kjn/AnxRzc/a2oN0RyT8jUXn9O5nFduvbbwHtNB8zfMz7JCiNefG15
Opd7FDLCnzl92moeRCQkyo5gnC4fUTPdB323Tsk0R9ASl80OTB8U3v2uOuMYO3rr
IH3str6irvyFl+bY928GIrtvwfJSgyLd/N6be1Ez3jOgGSl1npR5mLRrnIyoCc8g
7iLdRr+NVe3j3Q3fMNiQ9dvp4TVnPQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHoz
62ThnhGPByTNa/o/MvmcHpgxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MEFFQUVFQzU1MkQxMUYxQjJDNTgzRDRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLcCgMAwDBAItwKwDBAYtwIAw
DQYJKoZIhvcNAQELBQADggEBAFp+XH6Yte0Pp2Ziod9nBVDnd9bE5CbbuD72yLgr
htvvBahByHF7o2UNR5eaovG6lUwLjtXmc62I5od738Uuwa3cIXrFmdBlp7WwUU5s
pJ3AldbtXTnrdmFAl3paKLYU8cw5ojoamGUCxD74DRgddfJcObfjoZeHTLqrqST1
q0j1KgcLBDjokWLTbAccmPRSmuT/ItqyhhRPFh7xwwMhZxiwMaYnapI3nNXFJ7HG
fDSISEO8ufnG4Nv1QN8DJJixM82wSoRHHk2dpD2IYaEAQjKvmXbpEM7DJFgbSJSC
xB2piDv73XQucQZJE4lGv6rMCpy4V3kaByYRm6UbwiZdq7E=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:04 2026 by rpki-client