Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760CF180770511F1AF7A73DDCE1D38B0.roa
File: 760CF180770511F1AF7A73DDCE1D38B0.roa (raw, json)
Hash identifier: ov/iYbVycf3dRku19/o7aM4+mhdJzcg6xGI8HVJt0UQ=
Subject key identifier: 47:FF:41:AE:2A:F1:79:1B:14:95:05:91:0A:D4:55:0A:05:CB:2E:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760CF180770511F1AF7A73DDCE1D38B0.roa
Signing time: Fri 03 Jul 2026 17:34:37 +0000
ROA not before: Fri 03 Jul 2026 17:34:32 +0000
ROA not after: Sat 10 Jul 2027 17:34:32 +0000
asID: 262167
IP address blocks: 45.199.158.0/24 maxlen: 24
45.199.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115378 (0x1c2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 17:34:32 2026 GMT
Not After : Jul 10 17:34:32 2027 GMT
Subject: CN=6a47f2ad-3555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:7d:11:e5:75:ba:a5:ff:b0:4e:94:9f:45:
33:70:11:df:03:be:a4:b0:24:63:1d:17:68:89:f3:
bf:0f:f1:fc:d0:3e:24:0e:69:eb:e0:08:46:42:0d:
a7:30:18:6d:34:1d:77:b7:7f:59:c9:7e:55:cd:7f:
d5:a5:47:6f:4e:11:b7:2d:e0:18:b9:9a:c2:77:28:
0c:7e:6c:ad:5e:d5:a3:c2:4e:de:29:a5:34:ca:3b:
d3:b8:7d:c2:1c:73:72:45:6d:44:8a:35:5a:25:b7:
c0:4a:e1:4e:d1:f5:4d:30:b4:f2:da:11:db:54:81:
82:7c:01:67:47:5e:a8:02:3d:62:c9:58:d0:4f:76:
96:07:47:c7:e5:a1:c1:d3:ac:22:84:b2:2b:d3:c4:
fe:52:75:fc:02:dc:0e:ea:58:75:f8:54:7c:7c:a4:
e9:3b:c4:76:e4:c3:db:6c:84:19:72:af:47:5c:e3:
eb:34:f5:f1:1e:fc:c0:d9:25:51:3b:93:81:5f:b5:
af:6d:c8:d3:ff:06:d3:4d:59:95:57:83:87:44:6e:
e5:d9:2a:31:a5:ef:a5:7e:ae:28:28:0d:a2:53:3b:
e9:a7:53:f9:87:77:af:30:22:30:09:f8:47:05:d4:
c9:80:6d:99:a9:c9:83:79:ff:71:29:e9:ed:97:ff:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FF:41:AE:2A:F1:79:1B:14:95:05:91:0A:D4:55:0A:05:CB:2E:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760CF180770511F1AF7A73DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
07:a5:42:c9:ef:14:e4:95:c7:35:a9:6b:9c:42:57:6a:d0:e4:
da:8c:ab:44:5d:1e:f6:87:2a:dd:14:58:1a:10:00:0e:e7:ee:
54:99:12:ea:2c:8c:57:46:a4:f1:e2:3e:68:d6:5d:90:ad:23:
ae:14:c8:f9:fa:1d:06:a2:40:8b:bd:0f:18:77:98:f4:1a:0f:
04:53:fa:15:36:ab:5f:4e:0e:0f:98:b3:c4:39:28:3b:c4:6e:
ae:22:af:88:30:dc:ae:47:7f:09:f2:fd:0f:f8:f8:34:19:36:
2a:9d:61:4c:90:f7:75:f3:0a:30:dc:d9:1a:0c:6c:7a:92:08:
62:75:35:ba:95:7e:90:fd:3a:8a:95:75:5f:26:3e:d5:c8:1b:
fa:8d:8c:68:2c:5d:f8:6a:1b:ed:13:23:6a:b2:71:7b:13:fd:
bc:ae:67:a4:37:7c:9b:d7:15:38:57:42:cd:f7:37:1a:c0:d6:
68:39:fb:44:cb:35:98:de:82:7f:ca:98:af:c5:a1:c1:00:9b:
fb:8d:06:02:ec:28:a6:f7:ad:3e:c1:ff:e8:d1:4e:db:8a:a5:
a3:8c:96:91:8c:0a:a8:a5:ba:b4:19:f3:de:ec:b8:4c:6a:a0:
09:3e:b6:6c:80:7a:c7:d7:08:77:b7:a8:a6:1b:32:f2:3b:ca:
5d:b8:83:74
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcKyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAzMTczNDMyWhcNMjcwNzEwMTczNDMyWjAYMRYw
FAYDVQQDEw02YTQ3ZjJhZC0zNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsUh9EeV1uqX/sE6Un0UzcBHfA76ksCRjHRdoifO/D/H80D4kDmnr4AhG
Qg2nMBhtNB13t39ZyX5VzX/VpUdvThG3LeAYuZrCdygMfmytXtWjwk7eKaU0yjvT
uH3CHHNyRW1EijVaJbfASuFO0fVNMLTy2hHbVIGCfAFnR16oAj1iyVjQT3aWB0fH
5aHB06wihLIr08T+UnX8AtwO6lh1+FR8fKTpO8R25MPbbIQZcq9HXOPrNPXxHvzA
2SVRO5OBX7WvbcjT/wbTTVmVV4OHRG7l2Soxpe+lfq4oKA2iUzvpp1P5h3evMCIw
CfhHBdTJgG2ZqcmDef9xKentl/+vSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEf/
Qa4q8XkbFJUFkQrUVQoFyy6nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NjBDRjE4MDc3MDUxMUYxQUY3QTczRERDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLceeMA0GCSqGSIb3DQEBCwUA
A4IBAQAHpULJ7xTklcc1qWucQldq0OTajKtEXR72hyrdFFgaEAAO5+5UmRLqLIxX
RqTx4j5o1l2QrSOuFMj5+h0GokCLvQ8Yd5j0Gg8EU/oVNqtfTg4PmLPEOSg7xG6u
Iq+IMNyuR38J8v0P+Pg0GTYqnWFMkPd18wow3NkaDGx6kghidTW6lX6Q/TqKlXVf
Jj7VyBv6jYxoLF34ahvtEyNqsnF7E/28rmekN3yb1xU4V0LN9zcawNZoOftEyzWY
3oJ/ypivxaHBAJv7jQYC7Cim960+wf/o0U7biqWjjJaRjAqopbq0GfPe7LhMaqAJ
PrZsgHrH1wh3t6imGzLyO8pduIN0
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:40 2026 by rpki-client