Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50E786A06A4D11F1B8242CCACE1D38B0.roa
File: 50E786A06A4D11F1B8242CCACE1D38B0.roa (raw, json)
Hash identifier: 6J5AvFCa+GfVEbEVSH5Bzv5WrM7omrrdcHR9UH2r+Ss=
Subject key identifier: 50:DE:AA:3E:2E:6B:EA:B7:02:2C:53:EA:82:57:B9:39:BD:51:A4:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50E786A06A4D11F1B8242CCACE1D38B0.roa
Signing time: Wed 17 Jun 2026 13:06:13 +0000
ROA not before: Wed 17 Jun 2026 13:06:08 +0000
ROA not after: Fri 24 Jul 2026 13:06:08 +0000
asID: 174
IP address blocks: 45.195.244.0/23 maxlen: 24
45.202.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114356 (0x1beb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 13:06:08 2026 GMT
Not After : Jul 24 13:06:08 2026 GMT
Subject: CN=6a329bc5-9911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:db:0c:26:72:90:43:3f:8f:7a:cd:a6:b5:
a0:00:53:b2:b9:bf:3f:f8:1f:a0:7a:a3:98:d5:2d:
38:1d:43:c8:a8:f8:29:a0:98:69:2b:bf:a9:e7:ee:
4c:cc:c5:01:03:21:8c:66:c4:e1:02:8f:f3:48:b5:
47:32:6f:df:20:20:c9:0d:e6:af:99:9f:c0:f1:5b:
a1:c5:a3:a8:7e:b3:cd:1f:86:fa:4c:f1:88:fb:6f:
7f:df:3b:3b:14:72:45:4e:a8:0f:fd:d3:ca:a3:73:
b1:74:d9:74:6b:fb:0f:f0:1a:2f:3e:d9:c3:0b:f8:
79:ed:1c:9a:47:10:ea:6d:42:7e:45:af:b2:28:c0:
c4:f9:ea:29:2e:25:5b:49:68:b7:2f:5d:ba:69:24:
a1:18:0c:b1:0d:5f:36:30:7e:6a:f0:10:98:12:53:
45:bf:a5:32:7b:ec:35:0d:27:1d:b7:d1:ff:33:62:
c9:61:8c:d5:6a:51:c0:87:2f:49:81:62:45:61:a1:
79:72:c1:32:8a:12:7e:b3:2d:9a:7b:1d:67:d4:a0:
3a:3b:55:cf:72:99:48:48:9c:53:8c:f2:d6:0c:50:
ec:94:ad:46:dc:bf:33:74:22:c5:0d:a0:8b:8f:f2:
31:57:2d:28:0f:63:e1:d9:1e:ca:03:2d:88:d6:fe:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:AA:3E:2E:6B:EA:B7:02:2C:53:EA:82:57:B9:39:BD:51:A4:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50E786A06A4D11F1B8242CCACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.244.0/23
45.202.112.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0e:05:e5:55:03:32:ea:b5:9f:ff:a2:bb:85:c8:d2:1a:d1:
25:64:66:9c:3b:62:31:98:cb:79:b7:c0:42:1b:c6:0c:94:bb:
81:c8:7d:6e:bb:bb:69:9b:ae:d1:6b:c9:92:3b:8e:5c:b0:4d:
85:2e:6b:30:e4:3d:e9:10:51:e7:1e:8d:df:dc:2b:0a:f1:55:
3e:8e:67:5b:07:16:c3:5f:d1:54:93:a7:7a:92:e4:1b:60:10:
de:9b:15:1c:79:54:c7:1a:8b:ed:cb:52:39:a3:5a:e1:f2:d6:
7b:ff:f0:d9:dc:e1:ad:9b:6e:a2:85:7a:30:6a:18:67:c6:c8:
fc:a2:32:ad:58:76:af:06:6b:bb:7a:42:03:6e:32:ce:0c:94:
6e:eb:02:58:e0:b1:7f:9e:ad:24:97:f1:b3:49:29:91:cf:ec:
99:fc:e0:02:3a:09:86:7e:73:5d:4e:6e:c9:2a:bb:60:9c:bb:
a7:e8:ea:96:0b:67:4a:b1:2d:37:23:14:5f:a9:a7:99:1b:13:
72:8d:69:0d:de:0a:69:2f:71:d8:7c:ea:78:ba:0c:70:5b:9e:
9c:1d:61:36:b2:1c:c7:a6:07:42:08:a8:89:65:08:d4:12:8c:
26:81:0c:a7:95:f1:db:2e:f4:cc:32:8a:73:78:54:3f:98:fe:
84:54:af:d1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAb60MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE3MTMwNjA4WhcNMjYwNzI0MTMwNjA4WjAYMRYw
FAYDVQQDEw02YTMyOWJjNS05OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsE/bDCZykEM/j3rNprWgAFOyub8/+B+geqOY1S04HUPIqPgpoJhpK7+p
5+5MzMUBAyGMZsThAo/zSLVHMm/fICDJDeavmZ/A8VuhxaOofrPNH4b6TPGI+29/
3zs7FHJFTqgP/dPKo3OxdNl0a/sP8BovPtnDC/h57RyaRxDqbUJ+Ra+yKMDE+eop
LiVbSWi3L126aSShGAyxDV82MH5q8BCYElNFv6Uye+w1DScdt9H/M2LJYYzValHA
hy9JgWJFYaF5csEyihJ+sy2aex1n1KA6O1XPcplISJxTjPLWDFDslK1G3L8zdCLF
DaCLj/IxVy0oD2Ph2R7KAy2I1v5x7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDe
qj4ua+q3AixT6oJXuTm9UaQcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MEU3ODZBMDZBNEQxMUYxQjgyNDJDQ0FDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLcP0AwQALcpwMA0GCSqGSIb3
DQEBCwUAA4IBAQBADgXlVQMy6rWf/6K7hcjSGtElZGacO2IxmMt5t8BCG8YMlLuB
yH1uu7tpm67Ra8mSO45csE2FLmsw5D3pEFHnHo3f3CsK8VU+jmdbBxbDX9FUk6d6
kuQbYBDemxUceVTHGovty1I5o1rh8tZ7//DZ3OGtm26ihXowahhnxsj8ojKtWHav
Bmu7ekIDbjLODJRu6wJY4LF/nq0kl/GzSSmRz+yZ/OACOgmGfnNdTm7JKrtgnLun
6OqWC2dKsS03IxRfqaeZGxNyjWkN3gppL3HYfOp4ugxwW56cHWE2shzHpgdCCKiJ
ZQjUEowmgQynlfHbLvTMMopzeFQ/mP6EVK/R
-----END CERTIFICATE-----
Generated at Tue Jun 30 10:15:50 2026 by rpki-client