Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D218CCA6FF411F183BDEDE0CE1D38B0.roa
File: 5D218CCA6FF411F183BDEDE0CE1D38B0.roa (raw, json)
Hash identifier: njpJzeaicWh4xWiSi1DwH041fzC2o5ThGHrObxg/+t0=
Subject key identifier: CE:DA:05:9C:16:81:46:67:AD:03:30:15:E0:AF:B5:D9:EB:DD:6B:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C03E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D218CCA6FF411F183BDEDE0CE1D38B0.roa
Signing time: Wed 24 Jun 2026 17:44:35 +0000
ROA not before: Wed 24 Jun 2026 17:44:31 +0000
ROA not after: Sun 09 Aug 2026 17:44:31 +0000
asID: 63099
IP address blocks: 45.192.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114750 (0x1c03e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 17:44:31 2026 GMT
Not After : Aug 9 17:44:31 2026 GMT
Subject: CN=6a3c1783-cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:91:d9:c3:aa:d4:91:42:40:7b:ac:8d:31:
54:c5:16:e7:4d:bf:bf:3f:ec:ff:08:38:47:be:f1:
0e:a4:14:42:32:dc:9b:fa:cd:63:f0:b7:72:a4:62:
04:7b:88:a4:48:a8:ee:e7:38:64:00:4d:02:0d:52:
ac:92:cb:5c:54:ce:20:9b:f1:7b:bb:94:eb:98:3b:
f9:33:13:37:8c:55:99:22:41:47:36:5a:d6:e1:41:
9c:a4:68:cb:66:84:04:8d:23:a8:cd:3a:2e:32:ee:
2e:13:1f:5d:73:53:ef:fe:e5:73:61:f9:d9:28:c3:
81:24:b7:2d:0f:8e:29:09:3c:0b:53:10:2e:42:08:
31:f8:53:ba:4f:f2:61:e9:28:d5:f6:46:00:f6:3b:
e3:1d:c9:6f:1d:fb:f9:73:5c:9d:ca:8f:45:ef:b4:
2a:a9:e5:ba:34:68:31:bc:93:27:79:81:0e:bf:2a:
3c:83:4d:af:c9:c7:be:58:44:47:9e:bc:a3:c4:45:
62:a9:9e:b3:70:eb:6b:ff:70:38:f4:9a:7d:c9:33:
cb:2a:30:9b:bd:e4:ac:46:04:97:3f:8c:f8:41:1e:
8c:32:5b:69:11:14:75:b5:1d:cb:be:dc:13:50:35:
ee:5f:17:26:ea:bb:32:52:53:3b:c9:3a:17:41:d8:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DA:05:9C:16:81:46:67:AD:03:30:15:E0:AF:B5:D9:EB:DD:6B:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D218CCA6FF411F183BDEDE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ca:45:06:1a:c4:bd:ea:09:3e:09:54:c6:74:ca:08:8f:3c:
80:37:0a:01:db:b8:eb:b3:63:43:4d:49:52:7a:eb:56:4f:0e:
5a:e8:7f:66:d9:6e:cd:e5:a2:3b:50:2b:03:7a:68:21:08:c7:
43:73:60:3a:a0:ca:a1:f3:75:19:22:e0:9b:bc:70:3f:8c:e3:
62:f9:15:b9:b0:46:61:63:50:8d:cd:f9:e9:b2:17:65:9d:e6:
cc:cb:8b:24:a1:8d:1b:24:f7:40:2b:f7:37:9c:2c:65:d3:90:
26:21:70:45:7b:e6:cb:aa:dd:ff:98:80:55:da:dc:1e:ef:2b:
e4:cc:27:3c:2e:c4:a6:0a:2c:33:04:d3:78:c9:e6:79:2f:20:
90:e1:f0:54:d6:20:d3:1f:28:90:54:10:b8:43:e1:54:bf:a6:
ed:67:23:48:bd:61:52:52:2b:8b:c4:b3:53:2a:b1:86:ab:8f:
dc:b6:62:56:17:5c:30:c3:e1:40:9c:6c:3c:a7:c4:d9:bd:4c:
cb:d9:dd:c4:91:9a:ea:16:f3:60:38:73:c9:75:0b:32:ef:e9:
59:3c:4b:c1:8f:aa:08:89:b0:32:d4:a3:2c:2b:f1:17:c2:7c:
41:74:c2:bb:ac:8e:52:8a:14:a0:41:42:0d:a0:ff:71:49:4e:
2a:cc:ac:fc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcA+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI0MTc0NDMxWhcNMjYwODA5MTc0NDMxWjAYMRYw
FAYDVQQDEw02YTNjMTc4My1jYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqdCR2cOq1JFCQHusjTFUxRbnTb+/P+z/CDhHvvEOpBRCMtyb+s1j8Ldy
pGIEe4ikSKju5zhkAE0CDVKskstcVM4gm/F7u5TrmDv5MxM3jFWZIkFHNlrW4UGc
pGjLZoQEjSOozTouMu4uEx9dc1Pv/uVzYfnZKMOBJLctD44pCTwLUxAuQggx+FO6
T/Jh6SjV9kYA9jvjHclvHfv5c1ydyo9F77QqqeW6NGgxvJMneYEOvyo8g02vyce+
WERHnryjxEViqZ6zcOtr/3A49Jp9yTPLKjCbveSsRgSXP4z4QR6MMltpERR1tR3L
vtwTUDXuXxcm6rsyUlM7yToXQdiSQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM7a
BZwWgUZnrQMwFeCvtdnr3WtUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RDIxOENDQTZGRjQxMUYxODNCREVERTBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcClMA0GCSqGSIb3DQEBCwUA
A4IBAQCfykUGGsS96gk+CVTGdMoIjzyANwoB27jrs2NDTUlSeutWTw5a6H9m2W7N
5aI7UCsDemghCMdDc2A6oMqh83UZIuCbvHA/jONi+RW5sEZhY1CNzfnpshdlnebM
y4skoY0bJPdAK/c3nCxl05AmIXBFe+bLqt3/mIBV2twe7yvkzCc8LsSmCiwzBNN4
yeZ5LyCQ4fBU1iDTHyiQVBC4Q+FUv6btZyNIvWFSUiuLxLNTKrGGq4/ctmJWF1ww
w+FAnGw8p8TZvUzL2d3EkZrqFvNgOHPJdQsy7+lZPEvBj6oIibAy1KMsK/EXwnxB
dMK7rI5SihSgQUINoP9xSU4qzKz8
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:35 2026 by rpki-client