Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/685DD8C6720D11F1B07C1FAECE1D38B0.roa
File: 685DD8C6720D11F1B07C1FAECE1D38B0.roa (raw, json)
Hash identifier: j3ggWKN6XA11SazYCYgq25YUUrk+ShymjtaGbdC7+XU=
Subject key identifier: 93:91:4E:25:09:3D:AB:A4:EB:C7:87:A2:0F:13:E1:F3:97:71:BF:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/685DD8C6720D11F1B07C1FAECE1D38B0.roa
Signing time: Sat 27 Jun 2026 09:48:54 +0000
ROA not before: Sat 27 Jun 2026 09:48:49 +0000
ROA not after: Tue 04 Aug 2026 09:48:49 +0000
asID: 202662
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114922 (0x1c0ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 09:48:49 2026 GMT
Not After : Aug 4 09:48:49 2026 GMT
Subject: CN=6a3f9c86-a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:e0:d4:5d:ed:01:da:c3:73:98:36:8d:3e:
42:e0:e4:90:94:d6:cb:9c:d6:67:2e:30:35:de:6e:
b3:ce:8c:36:25:84:1f:3d:2f:e0:21:45:41:dd:46:
55:24:b9:c3:73:0c:af:fb:8d:b5:5e:b9:ea:df:62:
2d:3b:45:5b:65:d8:75:38:02:14:a6:67:c8:5a:6e:
db:78:58:1c:76:0e:99:a0:cb:86:f5:5a:72:9c:8a:
ae:32:5f:5a:ad:70:81:5d:00:5f:5f:7a:ba:6f:64:
1b:42:27:f7:5b:5e:b0:db:92:2a:7f:c6:f0:cb:c7:
ba:42:fa:3e:63:1e:dc:e3:d8:30:f1:eb:fd:22:cd:
bb:1d:9f:8e:ef:d4:89:6a:b0:b7:16:b4:e9:dd:f6:
52:d9:4d:46:4f:ff:23:b0:00:5e:ea:94:72:b3:cc:
a4:a0:23:22:f1:41:db:84:1f:a2:79:c7:cf:35:95:
7b:c9:48:e0:6c:15:aa:d9:61:8b:b8:41:6e:1c:ac:
0e:c7:1d:ce:38:59:91:dc:20:66:2a:ff:05:b8:16:
6d:25:54:32:30:d7:da:18:d1:f8:8d:a9:73:53:ca:
24:8f:60:f5:1b:22:74:61:f4:eb:2f:46:24:6e:d6:
b1:79:f6:1e:36:ec:6d:68:c0:5b:83:9a:a1:c1:bb:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:4E:25:09:3D:AB:A4:EB:C7:87:A2:0F:13:E1:F3:97:71:BF:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/685DD8C6720D11F1B07C1FAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
74:07:60:16:95:97:78:16:a8:ba:d0:e7:10:bc:1a:2a:58:8a:
5b:55:ed:31:86:ec:c5:6c:0b:32:36:45:97:14:a2:35:c2:06:
b6:94:a8:d8:79:33:bb:84:47:a1:55:9c:c8:b0:02:6e:9c:b9:
55:1c:1f:e6:11:de:48:e5:30:81:d2:6c:85:1d:f2:d7:d8:16:
80:83:a6:32:3e:9d:0a:3f:98:d5:f5:95:69:e1:64:eb:39:3a:
dc:de:48:ea:86:6c:aa:0f:32:ba:3f:86:8f:d8:93:5c:94:b7:
16:ef:ed:6c:91:fc:bb:8f:f4:67:fb:81:8e:97:77:2e:f3:86:
45:47:71:1e:43:4d:6f:ec:a1:27:9d:8b:46:66:54:d3:14:41:
24:ec:b1:cf:fd:35:41:7d:b2:10:a6:34:bc:d5:96:bb:da:4e:
48:21:62:8e:b5:5e:ad:bb:14:53:e4:cd:c2:d2:cb:5b:42:c6:
6c:27:68:11:d0:a3:19:e4:81:34:5d:27:c8:89:47:4f:0d:89:
e3:a5:65:7a:76:73:52:c2:c6:c0:6a:23:f3:1c:b2:a9:55:1b:
94:ff:86:6c:e4:0f:f6:a5:02:14:00:c7:18:6c:36:9f:45:42:
1c:53:57:84:57:59:34:bb:e9:28:74:8e:0d:27:17:aa:09:d1:
4f:2e:6c:7a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcDqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI3MDk0ODQ5WhcNMjYwODA0MDk0ODQ5WjAYMRYw
FAYDVQQDEw02YTNmOWM4Ni1hNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA17Xg1F3tAdrDc5g2jT5C4OSQlNbLnNZnLjA13m6zzow2JYQfPS/gIUVB
3UZVJLnDcwyv+421Xrnq32ItO0VbZdh1OAIUpmfIWm7beFgcdg6ZoMuG9VpynIqu
Ml9arXCBXQBfX3q6b2QbQif3W16w25Iqf8bwy8e6Qvo+Yx7c49gw8ev9Is27HZ+O
79SJarC3FrTp3fZS2U1GT/8jsABe6pRys8ykoCMi8UHbhB+iecfPNZV7yUjgbBWq
2WGLuEFuHKwOxx3OOFmR3CBmKv8FuBZtJVQyMNfaGNH4jalzU8okj2D1GyJ0YfTr
L0YkbtaxefYeNuxtaMBbg5qhwbu0SwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJOR
TiUJPauk68eHog8T4fOXcb/AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82ODVERDhDNjcyMEQxMUYxQjA3QzFGQUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8oMA0GCSqGSIb3DQEBCwUA
A4IBAQB0B2AWlZd4Fqi60OcQvBoqWIpbVe0xhuzFbAsyNkWXFKI1wga2lKjYeTO7
hEehVZzIsAJunLlVHB/mEd5I5TCB0myFHfLX2BaAg6YyPp0KP5jV9ZVp4WTrOTrc
3kjqhmyqDzK6P4aP2JNclLcW7+1skfy7j/Rn+4GOl3cu84ZFR3EeQ01v7KEnnYtG
ZlTTFEEk7LHP/TVBfbIQpjS81Za72k5IIWKOtV6tuxRT5M3C0stbQsZsJ2gR0KMZ
5IE0XSfIiUdPDYnjpWV6dnNSwsbAaiPzHLKpVRuU/4Zs5A/2pQIUAMcYbDafRUIc
U1eEV1k0u+kodI4NJxeqCdFPLmx6
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:59 2026 by rpki-client