Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/751FB278551111F19E942EAECE1D38B0.roa
File: 751FB278551111F19E942EAECE1D38B0.roa (raw, json)
Hash identifier: qhAqY2Wahx9O2VQvBx1n5acdLSOKQ/BqK3sjdnEGJFo=
Subject key identifier: 81:7A:F1:C5:21:C9:FD:3B:C9:19:30:E7:2D:2B:60:EB:88:E5:DD:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/751FB278551111F19E942EAECE1D38B0.roa
Signing time: Thu 21 May 2026 12:34:50 +0000
ROA not before: Thu 21 May 2026 12:34:45 +0000
ROA not after: Sun 28 Jun 2026 12:34:45 +0000
asID: 206127
IP address blocks: 45.202.204.0/24 maxlen: 24
45.204.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112381 (0x1b6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 12:34:45 2026 GMT
Not After : Jun 28 12:34:45 2026 GMT
Subject: CN=6a0efbe9-cd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:39:d2:23:60:76:88:0d:b5:25:9e:26:b3:
9c:ff:61:08:d1:9a:03:57:72:6e:ee:34:53:85:62:
4e:83:35:4d:b0:2c:97:53:88:8e:6d:19:21:b6:3b:
07:82:33:9d:ee:30:79:3f:c2:06:ab:21:70:db:a6:
b6:6f:ae:97:d5:fb:4a:02:c2:66:41:57:63:4d:e1:
46:3f:99:17:7c:d6:4e:0a:43:2e:90:9e:a0:8a:8b:
ee:34:79:ac:94:77:83:b6:49:9d:1b:14:31:5a:31:
1b:8d:bb:85:39:66:fd:29:bf:8b:17:f8:78:ac:41:
34:c5:f8:a7:fe:0c:7a:53:49:24:c0:02:a5:41:38:
47:7a:d2:62:de:22:27:38:8a:a8:d2:9b:0c:e8:11:
84:83:6f:c2:2b:43:43:cc:67:82:d9:14:72:2f:85:
ae:55:38:11:f4:75:1a:8f:9d:89:3a:f6:bd:b4:e7:
f2:3c:2a:ab:41:d4:df:aa:93:3c:db:61:fb:c0:fe:
11:1c:71:ff:48:f9:06:50:b3:d1:70:04:0f:6d:d9:
f9:27:59:c6:bf:bb:40:c8:46:c5:01:03:a5:05:6a:
d4:68:ef:a2:bd:32:6d:4e:e9:9c:4c:3c:91:08:98:
e3:a8:e0:c7:de:d4:f5:80:8b:a2:d8:44:f7:46:54:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:F1:C5:21:C9:FD:3B:C9:19:30:E7:2D:2B:60:EB:88:E5:DD:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/751FB278551111F19E942EAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.204.0/24
45.204.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b2:a0:ad:bf:92:97:ec:2a:30:4d:38:4b:79:57:a5:10:10:
8d:3f:8f:69:0f:51:61:d7:46:cf:ae:22:7b:98:e3:76:85:99:
b5:3b:81:9c:05:ec:32:8d:0a:69:ee:cf:96:11:3f:6b:c1:65:
13:da:06:a7:9c:ce:5b:2f:2a:2d:af:46:4e:cf:4c:12:28:f2:
a4:d8:50:a9:91:bf:12:6f:03:98:2b:73:57:9f:ae:0d:00:b2:
4a:5e:7a:7b:24:8a:d6:5b:8b:5f:00:1f:a7:07:f3:e1:26:af:
b5:96:6d:95:30:81:45:cf:ae:6b:37:9f:e8:bf:40:13:c3:bc:
5c:f3:f4:e5:f0:0c:3e:94:01:f1:dd:6f:c9:ff:bb:82:d1:b2:
ec:38:2b:b8:9d:cf:8f:18:5b:c1:a7:6e:c1:99:a8:3e:49:57:
f0:b3:fd:3b:e8:20:d0:f1:c2:56:2e:f0:22:34:dd:e7:b1:21:
a9:d7:ff:ba:a2:2f:a2:e2:ae:c6:5e:ad:da:e0:8e:c8:59:09:
fd:98:86:7a:5a:9a:76:8e:d5:a3:dd:f4:57:96:90:2a:fa:98:
74:cf:76:09:20:6d:52:14:9b:6c:7e:72:0a:b1:d8:97:52:47:
df:17:70:d6:4c:35:25:1c:b4:a7:24:c9:2a:a0:a1:75:4c:30:
32:b8:ec:e6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAbb9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTIzNDQ1WhcNMjYwNjI4MTIzNDQ1WjAYMRYw
FAYDVQQDEw02YTBlZmJlOS1jZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtL050iNgdogNtSWeJrOc/2EI0ZoDV3Ju7jRThWJOgzVNsCyXU4iObRkh
tjsHgjOd7jB5P8IGqyFw26a2b66X1ftKAsJmQVdjTeFGP5kXfNZOCkMukJ6giovu
NHmslHeDtkmdGxQxWjEbjbuFOWb9Kb+LF/h4rEE0xfin/gx6U0kkwAKlQThHetJi
3iInOIqo0psM6BGEg2/CK0NDzGeC2RRyL4WuVTgR9HUaj52JOva9tOfyPCqrQdTf
qpM822H7wP4RHHH/SPkGULPRcAQPbdn5J1nGv7tAyEbFAQOlBWrUaO+ivTJtTumc
TDyRCJjjqODH3tT1gIui2ET3RlQhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF6
8cUhyf07yRkw5y0rYOuI5d0KMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTFGQjI3ODU1MTExMUYxOUU5NDJFQUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcrMAwQALcxGMA0GCSqGSIb3
DQEBCwUAA4IBAQA7sqCtv5KX7CowTThLeVelEBCNP49pD1Fh10bPriJ7mON2hZm1
O4GcBewyjQpp7s+WET9rwWUT2gannM5bLyotr0ZOz0wSKPKk2FCpkb8SbwOYK3NX
n64NALJKXnp7JIrWW4tfAB+nB/PhJq+1lm2VMIFFz65rN5/ov0ATw7xc8/Tl8Aw+
lAHx3W/J/7uC0bLsOCu4nc+PGFvBp27Bmag+SVfws/076CDQ8cJWLvAiNN3nsSGp
1/+6oi+i4q7GXq3a4I7IWQn9mIZ6Wpp2jtWj3fRXlpAq+ph0z3YJIG1SFJtsfnIK
sdiXUkffF3DWTDUlHLSnJMkqoKF1TDAyuOzm
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:31 2026 by rpki-client