Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F366076842A11F1AC50D5D7CE1D38B0.roa
File: 6F366076842A11F1AC50D5D7CE1D38B0.roa (raw, json)
Hash identifier: bIzbDpxLSGrLDepKLUh4wV6Dr/Bu/ZgSfSS2eB+KAAk=
Subject key identifier: A6:00:4E:D0:85:84:DA:98:10:59:CA:70:22:B7:42:0B:41:2C:F0:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C675
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F366076842A11F1AC50D5D7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:02:02 +0000
ROA not before: Mon 20 Jul 2026 11:01:58 +0000
ROA not after: Thu 27 Aug 2026 11:01:58 +0000
asID: 11427
IP address blocks: 45.198.188.0/22 maxlen: 24
45.203.240.0/22 maxlen: 24
45.203.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116341 (0x1c675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 11:01:58 2026 GMT
Not After : Aug 27 11:01:58 2026 GMT
Subject: CN=6a5e002a-4b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:d5:d6:d1:01:25:fb:b3:f3:9e:00:cd:ee:
13:5b:78:bb:71:7e:17:6e:42:27:d1:79:fc:45:6a:
a7:94:f3:ec:b8:79:b0:46:d3:5b:61:d3:93:33:76:
d6:8b:a3:7d:81:7f:48:7c:ec:6d:0a:a6:49:c4:cd:
e0:5f:7c:4a:e9:0b:4d:9c:e1:cd:b3:73:1d:49:01:
38:05:9a:39:d5:40:99:df:6d:2d:e2:99:51:d7:16:
e3:63:51:40:31:ca:09:02:d6:b8:75:49:bf:35:60:
16:0b:84:71:78:9d:22:0b:30:5a:f9:75:08:ba:f9:
91:0e:c2:60:9f:57:a1:a4:92:b8:f7:36:03:ee:09:
ba:4e:ba:bf:f3:66:bf:e6:37:2f:02:5c:65:73:7a:
a6:89:0e:c9:87:70:80:d0:85:ad:70:c6:18:e4:ed:
f3:00:81:6a:0f:19:40:c4:64:35:a7:0c:4f:4e:87:
b8:a8:cb:be:51:79:ef:c1:1c:01:77:b2:8b:ee:87:
63:f6:b1:4b:dc:c9:fb:b8:49:f8:bc:43:06:77:a7:
52:20:a9:38:4e:f4:7a:4a:5e:c8:3f:38:11:46:d4:
cb:8e:0b:f0:e9:99:34:c2:22:ca:e8:be:96:a0:e8:
a0:24:70:7d:28:e7:fa:55:0f:ea:c8:64:6f:34:60:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:4E:D0:85:84:DA:98:10:59:CA:70:22:B7:42:0B:41:2C:F0:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F366076842A11F1AC50D5D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.188.0/22
45.203.240.0/22
45.203.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:77:ed:73:43:72:df:fd:47:6b:ae:cf:df:db:6b:1c:aa:2c:
e0:77:5b:08:c9:0f:cd:b8:c2:d9:eb:82:2d:9e:55:d8:35:8d:
40:94:36:0a:27:e7:d0:a5:57:50:7f:66:ee:90:47:e7:2a:08:
2e:7a:2f:69:97:bc:2a:02:fd:cf:a1:6f:7f:2c:51:6a:2d:de:
12:9b:e7:a9:0e:87:a5:f0:f6:71:e4:5a:b4:c5:91:50:bd:0b:
37:a4:bb:04:bb:db:9e:df:19:c7:e5:89:b5:72:6e:65:19:f0:
6d:8d:0c:a0:3e:69:4e:79:66:14:a1:59:9e:d5:a5:22:8e:09:
ca:31:22:2c:d6:43:6d:5a:74:0c:e7:6b:ba:c8:f4:0f:45:81:
db:89:43:04:63:f6:31:b2:2d:e8:69:e6:06:5e:52:af:18:bb:
70:35:57:12:fe:4c:ac:9c:bb:62:86:f8:0a:28:cc:1d:7e:c9:
3c:f9:e2:ab:4f:59:8d:8a:d7:81:4a:e0:0b:8d:cd:ef:e4:a4:
f3:bc:41:7b:48:b6:f5:e0:82:b7:52:8b:7b:25:db:9a:cf:ae:
15:26:10:16:50:ff:42:8f:e1:1a:e3:d0:7c:09:b0:3e:50:68:
d4:90:b8:09:72:8d:30:93:db:f3:8b:9d:fb:04:cc:fe:f8:3d:
27:13:31:f9
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAcZ1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIwMTEwMTU4WhcNMjYwODI3MTEwMTU4WjAYMRYw
FAYDVQQDEw02YTVlMDAyYS00YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvKPV1tEBJfuz854Aze4TW3i7cX4XbkIn0Xn8RWqnlPPsuHmwRtNbYdOT
M3bWi6N9gX9IfOxtCqZJxM3gX3xK6QtNnOHNs3MdSQE4BZo51UCZ320t4plR1xbj
Y1FAMcoJAta4dUm/NWAWC4RxeJ0iCzBa+XUIuvmRDsJgn1ehpJK49zYD7gm6Trq/
82a/5jcvAlxlc3qmiQ7Jh3CA0IWtcMYY5O3zAIFqDxlAxGQ1pwxPToe4qMu+UXnv
wRwBd7KL7odj9rFL3Mn7uEn4vEMGd6dSIKk4TvR6Sl7IPzgRRtTLjgvw6Zk0wiLK
6L6WoOigJHB9KOf6VQ/qyGRvNGBF/QIDAQABo4ICrjCCAqowHQYDVR0OBBYEFKYA
TtCFhNqYEFnKcCK3QgtBLPDXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RjM2NjA3Njg0MkExMUYxQUM1MEQ1RDdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLca8AwQCLcvwAwQCLcv8MA0G
CSqGSIb3DQEBCwUAA4IBAQBrd+1zQ3Lf/Udrrs/f22scqizgd1sIyQ/NuMLZ64It
nlXYNY1AlDYKJ+fQpVdQf2bukEfnKgguei9pl7wqAv3PoW9/LFFqLd4Sm+epDoel
8PZx5Fq0xZFQvQs3pLsEu9ue3xnH5Ym1cm5lGfBtjQygPmlOeWYUoVme1aUijgnK
MSIs1kNtWnQM52u6yPQPRYHbiUMEY/Yxsi3oaeYGXlKvGLtwNVcS/kysnLtihvgK
KMwdfsk8+eKrT1mNiteBSuALjc3v5KTzvEF7SLb14IK3Uot7Jduaz64VJhAWUP9C
j+Ea49B8CbA+UGjUkLgJco0wk9vzi537BMz++D0nEzH5
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:48 2026 by rpki-client