Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE2572455D311F1B2A4E2CFCE1D38B0.roa
File: 8FE2572455D311F1B2A4E2CFCE1D38B0.roa (raw, json)
Hash identifier: BNgTwqSuPiheJWWZTqkiGgVIcEc1vf9PWoj9bn6Akag=
Subject key identifier: E6:AA:0A:10:AC:0A:DA:49:5E:92:2E:5A:57:78:05:88:8E:69:36:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B7E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE2572455D311F1B2A4E2CFCE1D38B0.roa
Signing time: Fri 22 May 2026 11:44:17 +0000
ROA not before: Fri 22 May 2026 11:44:12 +0000
ROA not after: Sat 27 Jun 2026 11:44:12 +0000
asID: 9121
IP address blocks: 45.196.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112615 (0x1b7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 11:44:12 2026 GMT
Not After : Jun 27 11:44:12 2026 GMT
Subject: CN=6a104191-11ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:b2:25:54:fd:70:71:61:5d:7b:f0:40:07:
3d:a9:17:67:67:43:78:0c:8c:e5:71:fc:0d:8c:30:
d1:98:2d:f9:77:57:4a:3e:2e:e9:a6:d6:1e:f8:90:
af:36:77:5b:95:ad:de:90:23:dc:03:51:4b:e5:d5:
25:8e:91:cf:e0:46:51:5a:2d:80:0c:28:b8:a3:59:
fe:1c:de:0b:03:ce:88:b3:98:a1:9f:b3:e2:5a:4e:
4e:59:a1:aa:59:da:5e:22:d3:ac:a3:04:59:73:fd:
35:91:d0:96:63:6b:21:1a:8a:1c:96:3f:13:87:99:
c2:ad:a0:ac:f1:6d:93:c9:19:d6:78:74:51:9c:64:
13:91:f1:f9:a2:7c:4b:93:d5:99:10:06:02:51:6c:
c4:7b:e7:9e:22:5c:94:c2:93:25:8f:70:8b:11:b4:
3e:12:9e:60:7b:88:b4:ef:c4:99:14:98:d8:14:f2:
20:57:7f:e8:c1:01:1d:eb:20:ab:98:9d:1d:70:ab:
5a:30:7e:a1:b3:a8:a0:9a:55:a9:28:c8:49:85:d4:
d3:ab:3e:1a:8b:4e:91:55:c0:dd:e3:fe:10:13:67:
05:1a:2d:9a:17:83:53:dd:16:02:90:d3:13:16:31:
d3:fa:85:2c:46:5b:bc:3c:9f:3b:86:b6:f2:86:ad:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:0A:10:AC:0A:DA:49:5E:92:2E:5A:57:78:05:88:8E:69:36:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE2572455D311F1B2A4E2CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4a:57:79:f6:e9:7d:74:2e:04:43:bd:9a:da:19:94:e0:5f:
f6:47:d9:95:48:85:81:6d:6c:e3:cb:7e:e3:aa:82:77:ea:ed:
54:86:84:36:23:7c:2d:2f:12:59:18:c0:10:ad:76:a6:72:e4:
00:54:c2:b2:a6:2e:f8:bc:75:eb:35:6d:49:b9:c5:f9:ca:cf:
b1:ff:24:ad:26:b9:5f:fe:d3:eb:36:be:4a:fc:f0:36:c0:7f:
d2:6f:07:63:bd:88:03:82:1f:20:ab:4f:af:fa:aa:41:c1:96:
d5:42:0a:b9:5c:bf:0f:b1:05:1c:37:80:c4:6d:0d:a7:dd:60:
f0:22:73:3c:fd:18:07:df:27:d6:3f:89:50:4d:c6:10:37:1a:
a3:eb:37:c2:7a:15:23:7a:5c:63:57:52:47:2c:50:b3:d1:b6:
32:d4:0e:43:78:4f:33:9e:9b:2f:9e:be:e4:62:cc:b2:6f:a1:
7d:df:21:93:21:5f:68:81:cb:53:e9:5e:a1:6d:43:4c:c2:d8:
f9:0b:7e:70:34:e2:59:7b:c0:b8:7e:02:86:c4:00:73:96:ce:
d9:dd:15:f9:03:3a:13:b6:60:09:96:92:30:a6:5b:21:45:c3:
1e:2c:8c:13:25:e2:f3:fc:bf:f7:22:51:92:b1:66:b2:7a:33:
73:cf:e5:b8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbfnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIyMTE0NDEyWhcNMjYwNjI3MTE0NDEyWjAYMRYw
FAYDVQQDEw02YTEwNDE5MS0xMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvBqyJVT9cHFhXXvwQAc9qRdnZ0N4DIzlcfwNjDDRmC35d1dKPi7pptYe
+JCvNndbla3ekCPcA1FL5dUljpHP4EZRWi2ADCi4o1n+HN4LA86Is5ihn7PiWk5O
WaGqWdpeItOsowRZc/01kdCWY2shGooclj8Th5nCraCs8W2TyRnWeHRRnGQTkfH5
onxLk9WZEAYCUWzEe+eeIlyUwpMlj3CLEbQ+Ep5ge4i078SZFJjYFPIgV3/owQEd
6yCrmJ0dcKtaMH6hs6igmlWpKMhJhdTTqz4ai06RVcDd4/4QE2cFGi2aF4NT3RYC
kNMTFjHT+oUsRlu8PJ87hrbyhq39FwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOaq
ChCsCtpJXpIuWld4BYiOaTbCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RkUyNTcyNDU1RDMxMUYxQjJBNEUyQ0ZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcSjMA0GCSqGSIb3DQEBCwUA
A4IBAQBvSld59ul9dC4EQ72a2hmU4F/2R9mVSIWBbWzjy37jqoJ36u1UhoQ2I3wt
LxJZGMAQrXamcuQAVMKypi74vHXrNW1JucX5ys+x/yStJrlf/tPrNr5K/PA2wH/S
bwdjvYgDgh8gq0+v+qpBwZbVQgq5XL8PsQUcN4DEbQ2n3WDwInM8/RgH3yfWP4lQ
TcYQNxqj6zfCehUjelxjV1JHLFCz0bYy1A5DeE8znpsvnr7kYsyyb6F93yGTIV9o
gctT6V6hbUNMwtj5C35wNOJZe8C4fgKGxABzls7Z3RX5AzoTtmAJlpIwplshRcMe
LIwTJeLz/L/3IlGSsWayejNzz+W4
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:36 2026 by rpki-client