Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9276749C583B11F18D8266F8CE1D38B0.roa
File: 9276749C583B11F18D8266F8CE1D38B0.roa (raw, json)
Hash identifier: wcoFddJ5DsdZbh+WPgOzekzyhvUA8UlQfxw7EzCzhbU=
Subject key identifier: E5:E6:56:38:99:67:73:4C:86:66:AC:96:C3:89:38:A5:D7:D3:89:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B996
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9276749C583B11F18D8266F8CE1D38B0.roa
Signing time: Mon 25 May 2026 13:13:51 +0000
ROA not before: Mon 25 May 2026 13:13:45 +0000
ROA not after: Wed 19 Aug 2026 13:13:45 +0000
asID: 54600
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113046 (0x1b996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 13:13:45 2026 GMT
Not After : Aug 19 13:13:45 2026 GMT
Subject: CN=6a144b0f-a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:2a:3b:3e:38:1c:29:09:83:13:9d:a9:b9:
1e:97:ee:63:7a:16:71:38:92:72:17:68:79:1e:cc:
5f:cb:a0:a9:99:41:72:33:c2:6b:5b:4c:79:fb:50:
4f:42:e5:22:ba:25:17:a2:7c:24:5c:74:c7:29:ff:
f6:18:64:14:b8:bd:36:d4:f9:a1:9f:b5:c7:6d:d5:
5b:1c:59:cd:5a:c6:fc:7a:15:66:4c:c7:fb:f8:22:
50:7b:c5:7d:c6:f6:be:9c:60:47:d7:6d:02:6f:d7:
61:17:91:19:64:68:51:8c:45:ac:5d:5d:08:4b:4b:
83:5d:be:88:d7:80:96:f4:fb:81:19:b2:63:57:90:
9b:0a:35:2d:60:cb:5d:bf:ec:d2:39:a3:8f:58:b4:
47:06:b7:51:41:b2:f0:e3:0f:a5:81:fd:aa:4f:4f:
71:16:b8:64:7d:0e:dd:a8:2d:14:33:2b:d5:3a:e7:
39:c6:18:82:fe:35:68:34:bd:38:e4:dc:cd:e7:54:
e2:35:39:c7:04:64:0e:16:48:02:09:fb:41:33:90:
60:95:cc:de:a3:e4:19:09:ad:09:90:ff:bb:48:37:
7d:33:c5:f6:14:78:48:7f:36:7d:f9:2e:d0:bc:47:
85:d1:54:f7:27:67:de:38:a1:2c:48:b0:d1:cf:a8:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E6:56:38:99:67:73:4C:86:66:AC:96:C3:89:38:A5:D7:D3:89:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9276749C583B11F18D8266F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:26:4d:50:9d:19:5c:ee:b7:54:a2:a3:6b:f0:a1:44:f6:61:
e7:4d:f0:f9:0e:65:c1:0d:f0:a1:ad:be:26:24:9f:46:ef:2b:
44:c1:ad:16:75:c2:13:f8:e9:79:50:d5:cf:67:45:1f:83:5e:
3a:d8:c2:c4:58:03:52:02:49:24:13:73:1d:af:cc:31:d1:94:
ee:ce:f4:fb:82:d1:48:b0:d2:b8:7d:f3:cd:f5:7e:85:41:4f:
f7:63:1a:f2:f9:36:ea:8f:47:1c:4d:c2:5c:fe:31:3a:36:71:
4a:e8:a7:65:87:ac:aa:6e:67:7a:9e:cd:7b:0b:e8:1a:b9:2b:
e3:72:f5:55:c3:ed:f6:fe:31:2f:f9:b8:f0:48:a0:0b:6d:28:
23:be:f1:ea:9e:16:b6:63:3c:dd:77:cf:14:42:d4:0d:49:63:
ec:24:df:9f:b1:54:aa:d9:47:40:af:c2:f3:de:90:23:64:a0:
cf:d9:69:df:18:69:14:ac:8d:6b:47:03:2e:6c:1a:81:2f:52:
dd:4d:4c:72:cb:a3:48:22:90:48:52:72:4e:4f:7d:98:f0:f0:
51:11:62:f1:cb:25:d4:d9:77:56:f1:a4:62:52:a7:df:07:50:
e0:3a:e3:4a:87:1d:d8:e5:75:c0:d4:6d:48:fc:92:93:2a:3b:
08:7d:15:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbmWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI1MTMxMzQ1WhcNMjYwODE5MTMxMzQ1WjAYMRYw
FAYDVQQDEw02YTE0NGIwZi1hNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvDMqOz44HCkJgxOdqbkel+5jehZxOJJyF2h5Hsxfy6CpmUFyM8JrW0x5
+1BPQuUiuiUXonwkXHTHKf/2GGQUuL021Pmhn7XHbdVbHFnNWsb8ehVmTMf7+CJQ
e8V9xva+nGBH120Cb9dhF5EZZGhRjEWsXV0IS0uDXb6I14CW9PuBGbJjV5CbCjUt
YMtdv+zSOaOPWLRHBrdRQbLw4w+lgf2qT09xFrhkfQ7dqC0UMyvVOuc5xhiC/jVo
NL045NzN51TiNTnHBGQOFkgCCftBM5Bglczeo+QZCa0JkP+7SDd9M8X2FHhIfzZ9
+S7QvEeF0VT3J2feOKEsSLDRz6ia7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOXm
VjiZZ3NMhmaslsOJOKXX04kLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85Mjc2NzQ5QzU4M0IxMUYxOEQ4MjY2RjhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQCOJk1QnRlc7rdUoqNr8KFE9mHnTfD5DmXBDfChrb4mJJ9G7ytEwa0WdcIT
+Ol5UNXPZ0Ufg1462MLEWANSAkkkE3Mdr8wx0ZTuzvT7gtFIsNK4ffPN9X6FQU/3
Yxry+Tbqj0ccTcJc/jE6NnFK6Kdlh6yqbmd6ns17C+gauSvjcvVVw+32/jEv+bjw
SKALbSgjvvHqnha2Yzzdd88UQtQNSWPsJN+fsVSq2UdAr8Lz3pAjZKDP2WnfGGkU
rI1rRwMubBqBL1LdTUxyy6NIIpBIUnJOT32Y8PBREWLxyyXU2XdW8aRiUqffB1Dg
OuNKhx3Y5XXA1G1I/JKTKjsIfRWa
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:13 2026 by rpki-client