Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F325668770C11F18C4B2006CF1D38B0.roa
File: 7F325668770C11F18C4B2006CF1D38B0.roa (raw, json)
Hash identifier: RECYcP3tKVHBSN6k2eZ3IZQkpXK56BWJT4NxBxqS/+o=
Subject key identifier: 4D:29:D6:9F:A6:CC:7D:4B:1D:23:8F:79:1D:1B:AC:75:18:40:C8:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F325668770C11F18C4B2006CF1D38B0.roa
Signing time: Fri 03 Jul 2026 18:24:58 +0000
ROA not before: Fri 03 Jul 2026 18:24:53 +0000
ROA not after: Thu 03 Sep 2026 18:24:53 +0000
asID: 140227
IP address blocks: 45.194.16.0/21 maxlen: 24
45.207.9.0/24 maxlen: 24
45.207.10.0/24 maxlen: 24
45.207.11.0/24 maxlen: 24
45.207.12.0/24 maxlen: 24
45.207.13.0/24 maxlen: 24
45.207.14.0/24 maxlen: 24
45.207.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115392 (0x1c2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 18:24:53 2026 GMT
Not After : Sep 3 18:24:53 2026 GMT
Subject: CN=6a47fe7a-3b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:32:0f:5e:1d:58:d1:20:5d:15:31:97:d3:5d:
d3:0d:0d:ed:e5:7a:ff:98:74:31:f8:78:25:86:b9:
55:da:6f:17:55:bd:88:57:7d:72:bf:4e:22:8b:1f:
3d:3c:5e:83:2a:76:e6:5e:ef:c9:18:0d:bd:4b:e3:
5c:3a:1d:f7:63:df:75:ea:9e:0f:7e:ff:5b:c9:b8:
f4:7d:b1:1c:61:5e:bd:71:0e:d4:d2:12:71:6b:46:
41:43:01:c1:fc:b0:8c:24:60:85:a3:e5:87:bd:aa:
b6:df:1c:fe:fc:ac:0d:6a:0a:cb:b0:84:e5:ce:b9:
7f:42:7f:2a:5f:9b:e2:ce:37:bb:c2:2c:7d:e2:3e:
35:1a:37:07:16:bb:49:69:41:28:37:db:69:1c:88:
b4:ef:f3:fc:bc:82:f1:84:8a:6d:46:d4:33:30:f7:
69:47:22:89:fa:08:b5:42:ec:cc:7b:ab:5f:cd:e7:
af:de:8d:9d:7d:1e:06:d4:a2:90:67:07:d0:2d:74:
79:7b:93:ca:80:ba:20:6d:ba:1e:6b:8d:6f:45:2a:
14:e1:34:d3:18:98:9b:d2:b8:1f:04:ba:0f:50:b6:
b2:a9:97:76:02:89:17:99:f9:b3:58:7d:14:56:91:
b8:2b:53:a4:71:57:09:2f:85:b7:70:f6:49:08:9e:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:29:D6:9F:A6:CC:7D:4B:1D:23:8F:79:1D:1B:AC:75:18:40:C8:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F325668770C11F18C4B2006CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
45.207.9.0-45.207.15.255
Signature Algorithm: sha256WithRSAEncryption
3c:f1:2e:3c:93:b3:84:d0:48:d9:bc:9b:9a:cd:5a:a0:b1:3e:
7f:64:6f:96:35:2a:f0:68:4c:dc:8a:05:f2:ce:1c:15:56:8c:
37:5a:ff:13:1e:3e:a6:5d:d9:eb:7b:b4:37:c5:43:77:b4:71:
0e:ab:e0:49:c1:36:50:0f:70:d4:ad:21:79:4c:91:fd:d8:e5:
3a:49:a0:87:18:ba:3b:f3:c6:99:d8:bc:bd:8d:c8:b1:b0:e2:
b3:0e:4b:87:14:57:82:48:48:41:3f:c3:3b:04:98:54:79:71:
b4:20:5c:96:60:76:ce:db:0d:19:97:e8:6d:cd:73:89:6b:3c:
1b:bd:51:20:41:99:be:48:f8:88:99:eb:b0:9c:36:6e:76:be:
e1:d4:2e:f0:ba:f3:cf:77:f4:dd:a3:22:7f:7d:61:32:c7:e5:
06:a4:d2:19:26:3d:a5:80:e1:3e:8d:6f:57:dc:a9:a6:21:14:
67:ac:4a:2b:43:25:3b:61:79:ea:ac:c4:ae:41:30:1c:36:f6:
9e:4e:49:25:e9:92:01:ae:0a:56:b4:25:17:79:c3:ea:05:dc:
26:b0:83:42:5e:c8:ec:a7:e1:ba:a6:f6:55:aa:79:0e:80:7c:
1d:b0:82:6c:e2:a4:fc:53:4b:b2:4f:8c:af:dd:a3:42:54:0a:
84:27:c6:46
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAcLAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAzMTgyNDUzWhcNMjYwOTAzMTgyNDUzWjAYMRYw
FAYDVQQDEw02YTQ3ZmU3YS0zYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8zIPXh1Y0SBdFTGX013TDQ3t5Xr/mHQx+HglhrlV2m8XVb2IV31yv04i
ix89PF6DKnbmXu/JGA29S+NcOh33Y9916p4Pfv9bybj0fbEcYV69cQ7U0hJxa0ZB
QwHB/LCMJGCFo+WHvaq23xz+/KwNagrLsITlzrl/Qn8qX5vizje7wix94j41GjcH
FrtJaUEoN9tpHIi07/P8vILxhIptRtQzMPdpRyKJ+gi1QuzMe6tfzeev3o2dfR4G
1KKQZwfQLXR5e5PKgLogbboea41vRSoU4TTTGJib0rgfBLoPULayqZd2AokXmfmz
WH0UVpG4K1OkcVcJL4W3cPZJCJ4l9wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFE0p
1p+mzH1LHSOPeR0brHUYQMi2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RjMyNTY2ODc3MEMxMUYxOEM0QjIwMDZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDLcIQMAwDBAAtzwkDBAQtzwAw
DQYJKoZIhvcNAQELBQADggEBADzxLjyTs4TQSNm8m5rNWqCxPn9kb5Y1KvBoTNyK
BfLOHBVWjDda/xMePqZd2et7tDfFQ3e0cQ6r4EnBNlAPcNStIXlMkf3Y5TpJoIcY
ujvzxpnYvL2NyLGw4rMOS4cUV4JISEE/wzsEmFR5cbQgXJZgds7bDRmX6G3Nc4lr
PBu9USBBmb5I+IiZ67CcNm52vuHULvC688939N2jIn99YTLH5Qak0hkmPaWA4T6N
b1fcqaYhFGesSitDJTtheeqsxK5BMBw29p5OSSXpkgGuCla0JRd5w+oF3Cawg0Je
yOyn4bqm9lWqeQ6AfB2wgmzipPxTS7JPjK/do0JUCoQnxkY=
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:35 2026 by rpki-client