Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94840C18740111F1817AC902CF1D38B0.roa
File: 94840C18740111F1817AC902CF1D38B0.roa (raw, json)
Hash identifier: v1kBB/NA6JlH6KtkY56AsLmQoumMq32FSz5foO1nE08=
Subject key identifier: E2:AF:2B:C4:D4:F4:24:8D:C0:C4:33:25:77:1B:36:56:C5:C5:D0:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94840C18740111F1817AC902CF1D38B0.roa
Signing time: Mon 29 Jun 2026 21:29:16 +0000
ROA not before: Mon 29 Jun 2026 21:29:12 +0000
ROA not after: Tue 04 Aug 2026 21:29:12 +0000
asID: 202662
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115152 (0x1c1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 21:29:12 2026 GMT
Not After : Aug 4 21:29:12 2026 GMT
Subject: CN=6a42e3ac-ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:fd:f5:9c:31:e3:3c:90:a7:27:9c:d2:fa:
ca:a5:9e:77:9d:d8:44:ae:86:78:3f:b3:f5:aa:62:
72:0a:e5:ad:2d:45:e0:8b:9d:4a:f4:35:fe:2a:cd:
f1:29:98:b5:36:1e:5c:54:a7:e2:58:a5:94:9e:18:
a6:57:9f:c5:ae:0c:6a:8d:31:4d:52:e3:4d:20:a1:
85:40:99:1d:35:51:cf:e1:6c:ad:5c:35:4b:6d:51:
83:b0:c7:a1:7e:a1:27:04:80:7e:df:e5:01:a4:0e:
37:e7:1c:a8:23:41:d4:fb:19:a7:ef:ff:15:d9:eb:
fe:15:11:58:d6:68:ce:75:af:71:32:b8:94:66:ff:
c1:11:94:0f:92:35:96:d2:30:d9:4e:d1:d3:78:4e:
b3:30:ba:b8:6e:18:53:8c:c6:eb:60:3a:bc:94:c6:
cc:f4:b3:2f:7f:19:7f:a5:2a:07:fb:a4:20:73:e7:
39:b4:ce:94:f2:a8:57:7c:6b:8f:15:ee:da:fb:a1:
f4:29:70:01:5e:8b:f7:80:3b:7e:94:52:ed:4e:8d:
52:0b:6b:e8:fe:26:2a:63:66:da:8d:58:9b:71:e0:
69:bf:09:a5:db:31:2c:aa:b2:43:09:ce:27:91:dc:
33:06:af:d8:fc:38:45:21:6d:46:32:a9:54:af:ea:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AF:2B:C4:D4:F4:24:8D:C0:C4:33:25:77:1B:36:56:C5:C5:D0:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94840C18740111F1817AC902CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
42:95:c7:44:ad:50:01:71:1f:e9:73:10:a7:59:c8:5e:ff:67:
32:f4:70:28:bd:01:8d:77:a7:9e:ae:50:f0:d7:cc:ae:ac:9f:
b5:be:7a:10:a2:64:c7:1a:36:0b:73:b9:a9:cc:17:f8:68:90:
93:a3:ed:cf:d3:62:1d:6b:7c:35:9c:9c:de:48:9e:41:68:b4:
12:1d:58:5e:3f:41:91:90:47:9d:2c:df:71:4c:68:46:a8:0b:
33:b5:86:1c:68:5a:34:14:1b:e6:a6:ba:f0:b1:8c:50:b3:37:
a5:92:6f:ba:d6:18:05:d0:8f:00:d4:9b:08:23:bf:9d:25:95:
c6:a8:1b:a8:a3:51:74:93:57:c8:2b:b3:c7:2f:b8:68:d6:99:
42:0d:6f:b5:3d:62:1d:5e:b3:09:f8:53:2d:24:54:a9:6c:cd:
2a:12:7d:50:05:b7:a1:1d:b1:83:bf:13:9f:ea:9b:bb:56:af:
bd:49:66:53:d7:8e:78:16:f0:d5:97:eb:3c:42:3f:ed:f3:01:
a7:49:67:73:a0:d8:fb:0c:49:cc:9d:88:83:3e:48:53:9b:a3:
5d:25:31:a2:24:0b:71:c0:04:df:01:ae:16:71:ac:04:eb:7b:
80:a1:92:c3:fd:93:2f:51:39:84:06:e2:a3:c2:0e:09:74:66:
f3:13:68:92
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcHQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI5MjEyOTEyWhcNMjYwODA0MjEyOTEyWjAYMRYw
FAYDVQQDEw02YTQyZTNhYy1jZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzbT99Zwx4zyQpyec0vrKpZ53ndhEroZ4P7P1qmJyCuWtLUXgi51K9DX+
Ks3xKZi1Nh5cVKfiWKWUnhimV5/FrgxqjTFNUuNNIKGFQJkdNVHP4WytXDVLbVGD
sMehfqEnBIB+3+UBpA435xyoI0HU+xmn7/8V2ev+FRFY1mjOda9xMriUZv/BEZQP
kjWW0jDZTtHTeE6zMLq4bhhTjMbrYDq8lMbM9LMvfxl/pSoH+6Qgc+c5tM6U8qhX
fGuPFe7a+6H0KXABXov3gDt+lFLtTo1SC2vo/iYqY2bajVibceBpvwml2zEsqrJD
Cc4nkdwzBq/Y/DhFIW1GMqlUr+rqYQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOKv
K8TU9CSNwMQzJXcbNlbFxdCRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NDg0MEMxODc0MDExMUYxODE3QUM5MDJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8oMA0GCSqGSIb3DQEBCwUA
A4IBAQBClcdErVABcR/pcxCnWche/2cy9HAovQGNd6eerlDw18yurJ+1vnoQomTH
GjYLc7mpzBf4aJCTo+3P02Ida3w1nJzeSJ5BaLQSHVheP0GRkEedLN9xTGhGqAsz
tYYcaFo0FBvmprrwsYxQszelkm+61hgF0I8A1JsII7+dJZXGqBuoo1F0k1fIK7PH
L7ho1plCDW+1PWIdXrMJ+FMtJFSpbM0qEn1QBbehHbGDvxOf6pu7Vq+9SWZT1454
FvDVl+s8Qj/t8wGnSWdzoNj7DEnMnYiDPkhTm6NdJTGiJAtxwATfAa4WcawE63uA
oZLD/ZMvUTmEBuKjwg4JdGbzE2iS
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:31 2026 by rpki-client