Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49C06D20690711F1BC5FC5F9CE1D38B0.roa
File: 49C06D20690711F1BC5FC5F9CE1D38B0.roa (raw, json)
Hash identifier: ID9v1iES/4yXgkbqKHY9TxrGIPGK4vfKMf+bq7Ub6eE=
Subject key identifier: B2:9C:8B:28:3D:EB:68:0D:3B:B0:42:F6:D9:71:02:AF:8C:0D:81:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BD9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49C06D20690711F1BC5FC5F9CE1D38B0.roa
Signing time: Mon 15 Jun 2026 22:12:25 +0000
ROA not before: Mon 15 Jun 2026 22:12:20 +0000
ROA not after: Sun 19 Jul 2026 22:12:20 +0000
asID: 6079
IP address blocks: 45.205.80.0/23 maxlen: 24
45.205.86.0/23 maxlen: 24
45.205.96.0/23 maxlen: 24
45.205.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114077 (0x1bd9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 22:12:20 2026 GMT
Not After : Jul 19 22:12:20 2026 GMT
Subject: CN=6a3078c9-bf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:34:2c:4b:85:d8:b1:56:fd:6a:b7:66:7f:
4d:76:19:6d:b7:c6:94:72:2c:b1:95:07:2e:47:4e:
d9:6e:86:d6:b3:04:11:cc:2b:0d:0b:03:88:27:84:
7a:95:42:02:87:ba:89:ce:8f:90:f0:85:04:c9:33:
75:ef:c8:e5:bc:a0:6d:e6:df:43:f4:f5:a9:3d:b3:
05:d0:9a:c2:de:e1:31:f3:4f:f9:03:3e:f3:4e:0c:
6f:2c:2c:93:d5:d7:a6:fb:fa:61:75:7c:c4:7d:1b:
4c:b0:55:81:19:33:b3:73:81:2e:52:c1:d2:b8:90:
bd:5d:52:98:44:e2:ca:05:f7:99:bb:ef:4f:7b:f9:
71:29:a7:46:38:2b:86:08:8e:c0:f1:bb:72:4b:9f:
ce:f0:b2:62:fe:b3:73:04:c0:b0:d8:2f:e6:d4:20:
32:df:18:f2:ff:00:88:f3:33:99:77:de:1f:a0:c8:
35:18:4e:d2:91:10:06:51:33:d6:88:c3:25:40:42:
23:32:7b:bf:1b:bd:bb:66:5a:7b:a5:c8:b1:24:fd:
c5:c9:e2:f9:ed:24:ff:54:5b:2e:42:df:86:5d:3b:
4d:36:94:2e:f8:ba:59:04:8f:80:c0:2c:00:77:7c:
a7:02:95:7e:13:c1:e4:19:67:35:0b:75:4d:ed:86:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:8B:28:3D:EB:68:0D:3B:B0:42:F6:D9:71:02:AF:8C:0D:81:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49C06D20690711F1BC5FC5F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.80.0/23
45.205.86.0/23
45.205.96.0/23
45.205.152.0/23
Signature Algorithm: sha256WithRSAEncryption
36:64:ed:45:ee:2c:ab:23:6f:7c:e9:4b:65:84:8b:3c:64:9c:
5c:ac:0b:ef:89:7d:10:1a:a2:7b:db:94:0d:1b:2a:c1:b7:b2:
68:dd:b6:76:61:78:7a:44:24:f6:8c:47:29:b4:4d:fa:09:f5:
1a:39:1e:27:10:eb:95:7d:59:be:64:a7:1b:c1:83:08:84:70:
44:6d:40:37:93:1d:46:8c:83:9c:92:b2:96:b3:4e:f5:c3:a3:
2e:88:b6:bc:82:2a:84:b3:67:45:4c:a3:53:59:9d:5d:a9:32:
ce:bc:61:af:19:9d:60:9e:f7:5c:98:7a:3d:7f:b3:1d:7b:20:
23:51:be:82:32:b4:cf:d1:16:13:34:4f:16:32:53:f6:65:42:
b3:6b:de:14:1c:87:6a:43:e4:02:59:7b:ae:dc:e5:49:97:0b:
1a:d0:9c:f5:89:0e:7e:d7:99:cc:27:87:8e:53:82:bc:11:66:
7c:4d:78:57:83:3f:80:5b:91:20:b2:5b:c7:82:a0:71:50:d7:
71:9e:e2:5d:b2:7c:1b:36:2b:6c:cc:32:95:cf:75:b9:53:99:
2b:b2:a6:63:a1:73:e6:cf:91:02:f1:d3:61:b9:72:97:61:10:
dc:be:fd:be:27:fb:a5:d5:8e:e4:e2:d4:de:4e:b9:0b:ba:ea:
04:65:f3:e3
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAb2dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE1MjIxMjIwWhcNMjYwNzE5MjIxMjIwWjAYMRYw
FAYDVQQDEw02YTMwNzhjOS1iZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtzY0LEuF2LFW/Wq3Zn9Ndhltt8aUciyxlQcuR07ZbobWswQRzCsNCwOI
J4R6lUICh7qJzo+Q8IUEyTN178jlvKBt5t9D9PWpPbMF0JrC3uEx80/5Az7zTgxv
LCyT1dem+/phdXzEfRtMsFWBGTOzc4EuUsHSuJC9XVKYROLKBfeZu+9Pe/lxKadG
OCuGCI7A8btyS5/O8LJi/rNzBMCw2C/m1CAy3xjy/wCI8zOZd94foMg1GE7SkRAG
UTPWiMMlQEIjMnu/G727Zlp7pcixJP3FyeL57ST/VFsuQt+GXTtNNpQu+LpZBI+A
wCwAd3ynApV+E8HkGWc1C3VN7YYMYwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLKc
iyg962gNO7BC9tlxAq+MDYFwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OUMwNkQyMDY5MDcxMUYxQkM1RkM1RjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLc1QAwQBLc1WAwQBLc1gAwQB
Lc2YMA0GCSqGSIb3DQEBCwUAA4IBAQA2ZO1F7iyrI2986UtlhIs8ZJxcrAvviX0Q
GqJ725QNGyrBt7Jo3bZ2YXh6RCT2jEcptE36CfUaOR4nEOuVfVm+ZKcbwYMIhHBE
bUA3kx1GjIOckrKWs071w6MuiLa8giqEs2dFTKNTWZ1dqTLOvGGvGZ1gnvdcmHo9
f7MdeyAjUb6CMrTP0RYTNE8WMlP2ZUKza94UHIdqQ+QCWXuu3OVJlwsa0Jz1iQ5+
15nMJ4eOU4K8EWZ8TXhXgz+AW5EgslvHgqBxUNdxnuJdsnwbNitszDKVz3W5U5kr
sqZjoXPmz5EC8dNhuXKXYRDcvv2+J/ul1Y7k4tTeTrkLuuoEZfPj
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:02 2026 by rpki-client