Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DFD6190510111F1A30545F5CE1D38B0.roa
File: 4DFD6190510111F1A30545F5CE1D38B0.roa (raw, json)
Hash identifier: iMA8FDPV//7FxXND/tpvtRI4IkqIl2AV+tvw6nLXFjg=
Subject key identifier: 10:E0:65:E2:63:D7:B3:76:19:5F:F6:EC:EA:E3:37:CF:1A:CD:83:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B505
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DFD6190510111F1A30545F5CE1D38B0.roa
Signing time: Sat 16 May 2026 08:29:07 +0000
ROA not before: Sat 16 May 2026 08:29:03 +0000
ROA not after: Mon 22 Jun 2026 08:29:03 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111877 (0x1b505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 08:29:03 2026 GMT
Not After : Jun 22 08:29:03 2026 GMT
Subject: CN=6a082ad3-e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:0f:77:b9:c6:2a:38:c7:a2:8d:3a:c4:60:
77:6c:35:e0:6b:c6:7e:76:96:e3:72:82:39:9e:a2:
91:1b:b8:29:83:8f:85:40:53:dc:ad:f9:d6:dd:ed:
d7:b9:6a:88:46:6f:46:51:29:fc:58:b1:1e:e9:a2:
ef:b8:51:d4:a9:63:91:ec:95:aa:3b:6c:9c:63:e6:
bb:56:85:89:e1:9a:17:dc:f8:b8:d9:ed:04:8f:f1:
3e:e6:57:e9:12:5b:47:80:c8:58:88:ef:72:99:b3:
4c:ee:5f:ac:4b:af:77:a6:8c:1b:02:ea:9c:89:9c:
59:e6:93:6f:25:fd:d5:78:0e:18:cb:eb:70:26:ef:
87:a1:94:a0:41:5e:b5:08:1b:fd:b0:6b:92:9f:85:
fd:db:9b:7f:01:75:e6:53:d9:3e:f8:56:d7:60:4d:
d5:b5:79:bc:5c:14:9a:30:09:9b:32:0c:85:32:85:
07:7f:e3:d8:9f:b4:02:0b:49:9f:d8:90:64:06:67:
eb:7c:35:c2:2d:cd:71:f4:70:26:18:ba:cc:a4:2c:
ac:ba:90:52:58:92:ee:63:d7:31:c5:3c:35:0f:9a:
4b:f9:f5:66:fb:39:90:ce:74:65:fc:56:10:27:1b:
af:b0:2b:81:80:d8:56:ac:f3:b0:32:3f:f1:49:ab:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:65:E2:63:D7:B3:76:19:5F:F6:EC:EA:E3:37:CF:1A:CD:83:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DFD6190510111F1A30545F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:7d:32:b7:5e:27:6a:f1:11:0f:1c:26:df:45:cf:32:dc:20:
56:d2:30:b9:5a:b0:10:24:da:ca:f8:de:79:f0:1c:43:19:d8:
71:33:80:5c:81:3f:05:29:39:ae:36:e5:d7:d2:a9:51:d9:b6:
81:4f:ae:95:81:44:59:53:c9:6a:ed:d8:4c:85:47:21:30:27:
8d:2b:db:77:4c:df:a4:9b:7b:12:2b:8d:7a:21:d4:db:61:68:
a2:69:1f:59:27:ee:b2:8e:f7:46:87:69:aa:b7:69:33:0b:81:
c9:bf:d2:2f:58:99:6f:70:1a:a6:90:19:63:74:82:a6:55:79:
f0:d7:f4:41:c7:68:d4:82:a7:e9:1d:f9:f6:91:00:92:89:36:
5f:6d:47:8b:64:38:7f:6e:83:a0:6f:bc:6d:c2:f0:a5:96:e4:
ae:05:42:e6:41:23:72:18:57:84:66:65:1a:14:09:a4:ae:65:
3a:3c:8a:5c:42:02:50:02:a8:2e:2c:f1:00:79:f7:81:2d:1b:
92:85:4e:2e:d4:3c:53:f4:5b:99:00:67:6a:ee:fc:05:86:a4:
9d:d5:29:d1:a0:92:43:c3:3b:df:53:fa:a6:f2:0d:84:bc:50:
10:be:a3:2d:a1:48:23:d4:74:74:61:ff:1e:82:f5:b3:64:ab:
00:52:f6:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbUFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE2MDgyOTAzWhcNMjYwNjIyMDgyOTAzWjAYMRYw
FAYDVQQDEw02YTA4MmFkMy1lMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwC8Pd7nGKjjHoo06xGB3bDXga8Z+dpbjcoI5nqKRG7gpg4+FQFPcrfnW
3e3XuWqIRm9GUSn8WLEe6aLvuFHUqWOR7JWqO2ycY+a7VoWJ4ZoX3Pi42e0Ej/E+
5lfpEltHgMhYiO9ymbNM7l+sS693powbAuqciZxZ5pNvJf3VeA4Yy+twJu+HoZSg
QV61CBv9sGuSn4X925t/AXXmU9k++FbXYE3VtXm8XBSaMAmbMgyFMoUHf+PYn7QC
C0mf2JBkBmfrfDXCLc1x9HAmGLrMpCysupBSWJLuY9cxxTw1D5pL+fVm+zmQznRl
/FYQJxuvsCuBgNhWrPOwMj/xSatXlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBDg
ZeJj17N2GV/27OrjN88azYMPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80REZENjE5MDUxMDExMUYxQTMwNTQ1RjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQCmfTK3Xidq8REPHCbfRc8y3CBW0jC5WrAQJNrK+N558BxDGdhxM4BcgT8F
KTmuNuXX0qlR2baBT66VgURZU8lq7dhMhUchMCeNK9t3TN+km3sSK416IdTbYWii
aR9ZJ+6yjvdGh2mqt2kzC4HJv9IvWJlvcBqmkBljdIKmVXnw1/RBx2jUgqfpHfn2
kQCSiTZfbUeLZDh/boOgb7xtwvClluSuBULmQSNyGFeEZmUaFAmkrmU6PIpcQgJQ
AqguLPEAefeBLRuShU4u1DxT9FuZAGdq7vwFhqSd1SnRoJJDwzvfU/qm8g2EvFAQ
vqMtoUgj1HR0Yf8egvWzZKsAUva0
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:14 2026 by rpki-client