Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48EA137A583F11F19F1E1E0DCF1D38B0.roa
File: 48EA137A583F11F19F1E1E0DCF1D38B0.roa (raw, json)
Hash identifier: Q3siHlir0R7HK5mwSZ8dDAMTPM49MqldDl0noO/C2Ig=
Subject key identifier: 5C:C2:CD:95:B4:84:DE:E1:57:8F:A0:51:1E:02:61:98:98:DE:BF:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48EA137A583F11F19F1E1E0DCF1D38B0.roa
Signing time: Mon 25 May 2026 13:40:26 +0000
ROA not before: Mon 25 May 2026 13:40:21 +0000
ROA not after: Wed 19 Aug 2026 13:40:21 +0000
asID: 402169
IP address blocks: 45.195.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113062 (0x1b9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 13:40:21 2026 GMT
Not After : Aug 19 13:40:21 2026 GMT
Subject: CN=6a14514a-db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:8b:90:57:2d:3e:35:ca:5d:2e:c2:66:19:
5f:bf:09:d8:e5:24:d9:57:b5:12:98:15:26:9e:b4:
a6:71:46:8b:8b:f2:e1:08:1c:88:af:30:0e:6b:52:
cf:53:eb:39:3d:c6:e6:96:d6:5b:4d:6b:f1:ad:d9:
bf:43:0b:fb:fd:82:07:ed:4d:1b:b1:e6:82:95:a6:
f0:b6:ee:5e:c3:af:86:1f:85:2f:05:f5:d5:c3:5c:
e9:73:96:49:80:be:85:5c:db:e4:99:1c:9c:01:e4:
e8:da:30:6e:d8:7c:59:fa:f9:a4:c9:cc:05:3f:83:
07:bb:60:6f:6c:c2:80:08:1f:ec:29:a7:82:bc:0e:
4e:80:f3:b6:98:fb:bf:01:2c:08:d9:e5:df:f6:b8:
5e:c8:16:47:f9:a6:b9:64:75:2c:b9:38:b9:42:1c:
cc:15:71:4c:23:8d:2a:6a:0a:09:61:d0:9a:da:bf:
a9:f3:15:6f:00:2a:48:f2:40:3a:79:9c:e2:6b:5d:
19:bf:53:e6:5e:32:d7:e1:b0:c4:5f:e3:c9:77:c8:
3a:b9:02:42:55:e0:ad:f7:e1:c0:4a:ad:8f:76:8c:
38:ae:4c:61:17:70:90:4d:49:06:e5:ea:8e:12:3b:
68:4e:0e:80:12:2e:44:89:9a:74:b4:b7:74:03:80:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:CD:95:B4:84:DE:E1:57:8F:A0:51:1E:02:61:98:98:DE:BF:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48EA137A583F11F19F1E1E0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/21
Signature Algorithm: sha256WithRSAEncryption
04:ef:89:37:80:c2:d2:d5:91:17:72:7a:3c:be:be:50:59:32:
0b:77:2f:9a:27:39:08:ac:f8:18:c2:e3:55:38:ba:27:cb:dc:
b4:25:e3:79:9f:98:72:e4:57:38:de:13:d3:93:22:ad:dc:ba:
dc:52:b9:cd:f4:f9:97:d9:9f:d6:db:79:5d:21:b0:55:d3:ef:
b8:50:28:f0:de:63:78:40:c4:13:26:75:8b:4f:53:56:17:92:
a1:c5:af:f7:82:1b:5f:3f:b9:cd:20:2d:84:e8:91:ae:b1:2f:
d0:14:fb:49:ed:c8:bf:99:f9:18:59:3b:55:b8:59:0f:9d:c9:
f3:85:24:60:23:43:46:34:ff:a2:38:53:cd:b8:d7:8b:d7:f0:
c0:13:b9:e1:90:22:44:10:b6:ba:9a:ec:b1:9f:d6:5e:0d:36:
ec:7b:91:96:7c:11:19:ea:25:90:9b:64:3c:8f:d9:f4:dc:15:
e7:a6:f5:eb:2c:4b:1f:38:b7:9e:80:24:b1:9a:0a:aa:4f:66:
cf:03:59:55:0f:67:61:77:92:bc:03:d8:9c:af:be:e6:f6:a5:
6b:8c:e6:66:69:9d:a2:e0:e8:75:91:97:2e:6f:1a:89:e3:8b:
a1:e3:b5:81:6d:ed:06:d1:5e:70:0b:32:99:d6:0a:df:72:43:
54:07:06:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbmmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI1MTM0MDIxWhcNMjYwODE5MTM0MDIxWjAYMRYw
FAYDVQQDEw02YTE0NTE0YS1kYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo1+LkFctPjXKXS7CZhlfvwnY5STZV7USmBUmnrSmcUaLi/LhCByIrzAO
a1LPU+s5PcbmltZbTWvxrdm/Qwv7/YIH7U0bseaClabwtu5ew6+GH4UvBfXVw1zp
c5ZJgL6FXNvkmRycAeTo2jBu2HxZ+vmkycwFP4MHu2BvbMKACB/sKaeCvA5OgPO2
mPu/ASwI2eXf9rheyBZH+aa5ZHUsuTi5QhzMFXFMI40qagoJYdCa2r+p8xVvACpI
8kA6eZzia10Zv1PmXjLX4bDEX+PJd8g6uQJCVeCt9+HASq2Pdow4rkxhF3CQTUkG
5eqOEjtoTg6AEi5EiZp0tLd0A4AegwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFzC
zZW0hN7hV4+gUR4CYZiY3r/kMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OEVBMTM3QTU4M0YxMUYxOUYxRTFFMERDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQAE74k3gMLS1ZEXcno8vr5QWTILdy+aJzkIrPgYwuNVOLony9y0JeN5n5hy
5Fc43hPTkyKt3LrcUrnN9PmX2Z/W23ldIbBV0++4UCjw3mN4QMQTJnWLT1NWF5Kh
xa/3ghtfP7nNIC2E6JGusS/QFPtJ7ci/mfkYWTtVuFkPncnzhSRgI0NGNP+iOFPN
uNeL1/DAE7nhkCJEELa6muyxn9ZeDTbse5GWfBEZ6iWQm2Q8j9n03BXnpvXrLEsf
OLeegCSxmgqqT2bPA1lVD2dhd5K8A9icr77m9qVrjOZmaZ2i4Oh1kZcubxqJ44uh
47WBbe0G0V5wCzKZ1grfckNUBwba
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:31 2026 by rpki-client