Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B00B52A536411F19E8480F5CE1D38B0.roa
File: 6B00B52A536411F19E8480F5CE1D38B0.roa (raw, json)
Hash identifier: OX94ZR6rwTVFfHkb/aAIOZknyVNOm8+S4s1mPrl/rWg=
Subject key identifier: 31:3E:F0:81:9C:60:92:DC:2C:5B:6C:2A:F0:37:B0:49:0F:B7:B3:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B00B52A536411F19E8480F5CE1D38B0.roa
Signing time: Tue 19 May 2026 09:23:38 +0000
ROA not before: Tue 19 May 2026 09:23:34 +0000
ROA not after: Wed 19 Aug 2026 09:23:34 +0000
asID: 54600
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112083 (0x1b5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 09:23:34 2026 GMT
Not After : Aug 19 09:23:34 2026 GMT
Subject: CN=6a0c2c1a-cbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:25:38:77:8a:53:e5:f8:f2:ae:ff:f1:cd:
e8:da:44:d3:d7:b1:d0:5f:14:92:81:7d:31:91:1a:
6c:f7:db:60:f0:25:90:e3:b4:e6:de:3d:0c:a2:b1:
d5:39:59:b3:92:52:11:09:26:ba:a4:e0:2d:a3:f6:
93:75:2a:7a:d5:56:63:0c:56:36:16:07:28:e5:e2:
79:9c:5e:18:f6:f7:22:b0:26:2b:a3:c0:6a:a1:76:
3f:ab:16:d0:18:95:ac:e0:95:de:cd:d5:3e:1b:2e:
0a:ba:35:04:ab:63:f2:60:95:8b:49:9e:be:dd:3b:
1c:0e:e0:4b:f3:f1:c7:39:08:1e:b5:34:d3:5f:0d:
d0:2a:cc:b2:9a:0c:31:5f:bc:ac:11:87:95:ac:0c:
88:a5:2c:f7:d6:38:03:75:b3:a7:ac:7d:c2:8c:25:
4b:0c:b7:a5:5b:60:0a:35:cd:79:5e:2e:c5:2d:c3:
48:a3:25:55:c6:de:46:b5:b2:a3:50:50:d2:66:da:
54:c9:06:4d:29:7c:8b:12:c4:ec:c3:bc:5f:6c:42:
95:7a:5c:01:f7:2b:78:df:b9:65:7a:14:4b:49:c4:
24:55:6f:ac:3b:35:cb:ad:47:a4:59:52:eb:66:74:
48:d6:68:e1:d9:2b:fd:01:de:73:b7:0f:a4:3c:33:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:F0:81:9C:60:92:DC:2C:5B:6C:2A:F0:37:B0:49:0F:B7:B3:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B00B52A536411F19E8480F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
58:b0:66:9a:e3:3d:6a:50:6b:0c:26:63:f1:fc:ac:4a:f5:a1:
2c:de:5f:dc:6d:a0:dc:9d:a6:cb:ba:35:35:17:cc:6b:ab:09:
5e:30:95:5f:0f:fd:2a:6a:97:15:67:09:d5:35:57:91:23:59:
08:cc:f5:67:5b:94:ad:27:fd:9d:d7:7b:80:68:44:9a:dc:d9:
c8:9a:5d:9e:4c:14:da:94:47:6b:f4:b0:a1:a6:43:10:e0:fa:
87:aa:f7:94:a3:4b:a2:06:35:da:2d:53:64:ac:ee:09:08:0d:
f6:48:af:c4:3e:d1:a2:5b:5d:1d:bc:33:5c:90:76:9c:83:b9:
2c:70:31:5e:9e:49:6a:d3:6f:6a:40:c7:6c:89:50:1c:af:f3:
4b:ab:93:a8:d7:04:fa:1e:da:fb:99:75:9c:dd:c6:e9:d0:ad:
62:ea:aa:9e:7e:21:bc:b2:35:61:b7:da:2f:18:1b:4a:68:31:
21:34:47:b5:49:e5:7f:18:27:d6:18:34:c3:79:e1:33:93:88:
42:66:b1:a3:c8:75:c2:3b:c1:2a:97:6d:5e:0f:d3:1d:df:aa:
37:9b:7d:29:ed:7c:9f:79:1d:83:c1:6f:0f:ef:7e:4d:b5:0d:
ce:48:80:46:9e:f9:1f:84:ab:e8:a5:54:9f:c5:03:15:ed:c2:
a8:48:17:f9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbXTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE5MDkyMzM0WhcNMjYwODE5MDkyMzM0WjAYMRYw
FAYDVQQDEw02YTBjMmMxYS1jYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyzUlOHeKU+X48q7/8c3o2kTT17HQXxSSgX0xkRps99tg8CWQ47Tm3j0M
orHVOVmzklIRCSa6pOAto/aTdSp61VZjDFY2Fgco5eJ5nF4Y9vcisCYro8BqoXY/
qxbQGJWs4JXezdU+Gy4KujUEq2PyYJWLSZ6+3TscDuBL8/HHOQgetTTTXw3QKsyy
mgwxX7ysEYeVrAyIpSz31jgDdbOnrH3CjCVLDLelW2AKNc15Xi7FLcNIoyVVxt5G
tbKjUFDSZtpUyQZNKXyLEsTsw7xfbEKVelwB9yt437llehRLScQkVW+sOzXLrUek
WVLrZnRI1mjh2Sv9Ad5ztw+kPDOHpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDE+
8IGcYJLcLFtsKvA3sEkPt7O8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QjAwQjUyQTUzNjQxMUYxOUU4NDgwRjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQBYsGaa4z1qUGsMJmPx/KxK9aEs3l/cbaDcnabLujU1F8xrqwleMJVfD/0q
apcVZwnVNVeRI1kIzPVnW5StJ/2d13uAaESa3NnIml2eTBTalEdr9LChpkMQ4PqH
qveUo0uiBjXaLVNkrO4JCA32SK/EPtGiW10dvDNckHacg7kscDFenklq029qQMds
iVAcr/NLq5Oo1wT6Htr7mXWc3cbp0K1i6qqefiG8sjVht9ovGBtKaDEhNEe1SeV/
GCfWGDTDeeEzk4hCZrGjyHXCO8Eql21eD9Md36o3m30p7XyfeR2DwW8P735NtQ3O
SIBGnvkfhKvopVSfxQMV7cKoSBf5
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:28 2026 by rpki-client