Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA21E82785311F1BCCF2AD6CE1D38B0.roa
File: 4EA21E82785311F1BCCF2AD6CE1D38B0.roa (raw, json)
Hash identifier: NworTEf3JYWUcT6QQMHrfxCdQZiqe/1kmdCdHdIf4jY=
Subject key identifier: 1F:90:F2:8D:0C:8C:F8:76:14:56:CE:4E:5B:67:F0:72:EA:C2:8C:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C30C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA21E82785311F1BCCF2AD6CE1D38B0.roa
Signing time: Sun 05 Jul 2026 09:24:22 +0000
ROA not before: Sun 05 Jul 2026 09:24:18 +0000
ROA not after: Sat 22 Aug 2026 09:24:18 +0000
asID: 142032
IP address blocks: 45.192.96.0/20 maxlen: 24
45.192.96.0/21 maxlen: 24
45.192.96.0/22 maxlen: 24
45.192.100.0/22 maxlen: 24
45.192.104.0/21 maxlen: 24
45.192.104.0/22 maxlen: 24
45.192.108.0/22 maxlen: 24
45.205.16.0/21 maxlen: 24
45.205.24.0/21 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115468 (0x1c30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 09:24:18 2026 GMT
Not After : Aug 22 09:24:18 2026 GMT
Subject: CN=6a4a22c6-972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:6a:65:2f:fd:59:42:7f:91:0e:29:77:f6:
5f:a1:dc:b3:0b:31:2a:c5:40:d6:0c:b3:6b:b3:f8:
f3:21:99:28:e8:fb:12:ef:cc:52:75:91:5d:fb:3f:
94:e4:ca:21:54:17:6c:df:c0:35:6c:66:64:0a:ec:
e2:be:c0:e0:f7:34:16:9a:32:a3:02:ba:61:fd:df:
35:1b:83:cb:c8:1b:99:d6:22:88:03:89:13:24:fd:
4e:48:c4:7c:22:af:47:a8:33:64:77:49:ce:99:e6:
87:08:0d:3e:37:93:c0:cb:2a:2e:a2:be:37:9f:12:
7d:ec:12:9a:72:0d:f1:db:94:f4:11:3f:0b:66:97:
32:8e:c4:92:a8:53:ae:3f:d1:1b:43:04:d6:3d:72:
e6:c3:c9:55:9b:c4:1f:71:1c:9c:a3:aa:4f:d9:0a:
01:57:da:c7:47:4c:17:68:7d:df:63:5d:dc:0c:64:
5a:d7:d7:3b:a4:bd:7c:37:11:d7:a2:2c:ed:7c:30:
69:1f:3a:d4:b1:fb:c6:16:89:79:1b:de:7a:d5:7c:
85:41:44:77:8c:ff:ab:44:f0:87:26:39:7d:70:e4:
97:e2:1b:19:18:81:54:ea:17:9d:77:60:83:e3:2c:
6a:69:21:68:d7:eb:32:f8:45:e5:74:cc:09:76:6b:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:90:F2:8D:0C:8C:F8:76:14:56:CE:4E:5B:67:F0:72:EA:C2:8C:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA21E82785311F1BCCF2AD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
54:78:9b:7f:10:c9:4d:a3:f2:0d:98:cd:ba:5c:b9:ca:9c:a5:
16:03:10:cd:3e:23:51:4f:70:62:8e:54:6b:81:4e:44:95:49:
9b:dd:cb:d9:e9:45:71:16:12:a1:68:33:f4:27:19:ad:ac:e8:
bf:ca:1b:8e:7a:4e:76:2b:71:22:6c:88:ec:71:79:0a:be:e6:
1f:f4:09:2d:e7:70:07:4c:49:f2:dc:fc:7f:06:a3:85:03:bb:
b6:20:2c:8c:2b:c3:61:00:cc:d1:55:87:9b:81:d4:e0:2d:90:
54:30:f6:71:0a:10:e5:7c:0c:fa:b3:fe:2c:11:43:12:dd:db:
e2:24:cf:31:1b:fe:e8:68:66:5b:b0:df:3b:56:49:db:a2:17:
76:e2:27:99:cf:1c:c3:3f:0d:24:fd:0b:9d:e7:6f:e2:ae:47:
d3:1a:2b:d4:d9:02:e9:68:d3:4e:1f:62:50:01:43:c1:9c:35:
0a:7b:f6:19:48:6c:9c:db:28:25:eb:db:9e:a2:65:1e:da:d7:
3c:d5:55:4d:14:33:86:5e:d0:40:60:fa:93:4c:83:6b:b1:e6:
df:09:c2:05:b1:1b:81:55:7b:44:5c:f6:9c:dd:dc:12:c1:0d:
3b:95:ef:be:b0:72:76:19:36:76:76:df:85:d0:29:35:54:09:
33:c3:e3:57
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAcMMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA1MDkyNDE4WhcNMjYwODIyMDkyNDE4WjAYMRYw
FAYDVQQDEw02YTRhMjJjNi05NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv8NqZS/9WUJ/kQ4pd/ZfodyzCzEqxUDWDLNrs/jzIZko6PsS78xSdZFd
+z+U5MohVBds38A1bGZkCuzivsDg9zQWmjKjArph/d81G4PLyBuZ1iKIA4kTJP1O
SMR8Iq9HqDNkd0nOmeaHCA0+N5PAyyouor43nxJ97BKacg3x25T0ET8LZpcyjsSS
qFOuP9EbQwTWPXLmw8lVm8QfcRyco6pP2QoBV9rHR0wXaH3fY13cDGRa19c7pL18
NxHXoiztfDBpHzrUsfvGFol5G9561XyFQUR3jP+rRPCHJjl9cOSX4hsZGIFU6hed
d2CD4yxqaSFo1+sy+EXldMwJdmvZXwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFB+Q
8o0MjPh2FFbOTltn8HLqwozuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RUEyMUU4Mjc4NTMxMUYxQkNDRjJBRDZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELcBgAwQELc0QAwQFLc/AMA0G
CSqGSIb3DQEBCwUAA4IBAQBUeJt/EMlNo/INmM26XLnKnKUWAxDNPiNRT3BijlRr
gU5ElUmb3cvZ6UVxFhKhaDP0JxmtrOi/yhuOek52K3EibIjscXkKvuYf9Akt53AH
TEny3Px/BqOFA7u2ICyMK8NhAMzRVYebgdTgLZBUMPZxChDlfAz6s/4sEUMS3dvi
JM8xG/7oaGZbsN87Vknbohd24ieZzxzDPw0k/Qud52/irkfTGivU2QLpaNNOH2JQ
AUPBnDUKe/YZSGyc2ygl69ueomUe2tc81VVNFDOGXtBAYPqTTINrsebfCcIFsRuB
VXtEXPac3dwSwQ07le++sHJ2GTZ2dt+F0Ck1VAkzw+NX
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:41 2026 by rpki-client