Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/988324AC4F6711F1A737B1BBCE1D38B0.roa
File: 988324AC4F6711F1A737B1BBCE1D38B0.roa (raw, json)
Hash identifier: GmkSuZm57+L5eiYclcIeEr65QXnSPQzQw63ScHIkEO4=
Subject key identifier: 5B:9B:8C:5C:E9:3E:E8:F4:BC:28:B9:BF:5F:36:30:68:B6:EE:1E:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B477
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/988324AC4F6711F1A737B1BBCE1D38B0.roa
Signing time: Thu 14 May 2026 07:36:19 +0000
ROA not before: Thu 14 May 2026 07:36:14 +0000
ROA not after: Fri 03 Jul 2026 07:36:14 +0000
asID: 135222
IP address blocks: 45.195.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111735 (0x1b477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 07:36:14 2026 GMT
Not After : Jul 3 07:36:14 2026 GMT
Subject: CN=6a057b73-ce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:73:70:b4:04:21:2d:97:02:3d:b5:6f:a0:
19:eb:ec:62:6f:bb:c8:b5:15:18:93:fe:96:47:94:
a2:95:e5:5b:88:e0:ca:c8:d6:52:9e:32:a2:cf:0a:
37:7a:d5:9d:77:ff:0b:9e:61:dc:ac:16:30:ac:65:
fa:86:06:46:80:11:ca:2d:bf:54:c7:ab:13:68:81:
6e:f1:d6:d3:55:4b:e3:51:35:5b:95:21:17:8c:51:
cb:e7:35:b7:4a:79:89:82:94:44:8c:f6:e4:71:a9:
3c:db:17:67:2f:56:9f:1c:80:68:d0:38:a5:51:b0:
13:07:bb:d6:b8:a9:e0:59:bb:03:3a:87:12:71:da:
a6:e7:85:a9:bd:62:6b:d0:61:f6:b7:fa:8d:e2:d1:
eb:06:a6:59:c4:5a:69:6f:3f:74:e9:a6:a5:8a:73:
9c:bd:40:3e:5c:0d:46:22:c4:6e:2f:de:5a:f5:d2:
71:33:5a:73:30:e1:8b:d6:81:ff:81:86:45:f5:76:
f0:91:a6:97:94:85:cf:f6:ad:29:91:4f:3a:2e:63:
be:d7:97:5a:6f:0e:44:c3:ad:9c:f5:f6:7f:9b:0c:
51:dd:f2:8c:8f:61:5f:c0:a7:9c:af:13:40:e0:5a:
ab:d2:b1:5a:2c:d7:0e:42:71:18:7f:9f:72:13:e7:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:8C:5C:E9:3E:E8:F4:BC:28:B9:BF:5F:36:30:68:B6:EE:1E:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/988324AC4F6711F1A737B1BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f3:5c:ff:cf:82:2a:38:bc:0c:d6:47:22:c2:fb:a3:c9:a7:
1e:f2:0c:3e:70:93:4c:63:38:9f:a5:eb:ef:bf:1d:d9:0b:ce:
0b:3c:95:07:35:0c:70:9d:e4:77:7c:fc:45:9c:94:ca:c1:90:
18:23:17:2a:44:5c:ed:11:e7:65:58:e3:c1:6b:23:14:0b:c1:
4f:d2:4b:00:dd:67:06:0f:83:57:93:89:c8:58:9d:60:dd:73:
a5:d8:b4:5f:54:26:06:bc:5c:e8:ea:06:aa:dd:6e:9b:90:ae:
c3:e7:d1:fe:3f:c7:ad:45:80:89:6e:18:6f:5b:06:41:26:64:
46:4e:da:98:5d:0e:84:b9:e5:0e:12:2c:fa:e1:bd:b2:65:7b:
6b:44:73:51:63:c8:c8:d0:14:f1:1f:60:34:4d:44:7e:6f:8a:
ff:3c:73:3b:01:7c:cb:e5:bd:a8:1a:05:8d:bb:90:f7:1f:b9:
a6:10:5f:c8:a3:32:fb:d2:b6:96:01:80:f3:ae:4b:f3:09:fc:
f2:7e:7e:3c:4c:ab:e4:62:b3:69:a6:86:82:4b:ce:6b:b0:cc:
3f:42:a4:b3:a3:bc:73:41:b0:67:fd:7e:9c:8f:db:5e:41:fd:
86:46:a4:e2:48:00:ad:ae:96:b8:6b:f7:14:36:8d:ff:db:0c:
03:70:aa:90
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbR3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE0MDczNjE0WhcNMjYwNzAzMDczNjE0WjAYMRYw
FAYDVQQDEw02YTA1N2I3My1jZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ZRzcLQEIS2XAj21b6AZ6+xib7vItRUYk/6WR5SileVbiODKyNZSnjKi
zwo3etWdd/8LnmHcrBYwrGX6hgZGgBHKLb9Ux6sTaIFu8dbTVUvjUTVblSEXjFHL
5zW3SnmJgpREjPbkcak82xdnL1afHIBo0DilUbATB7vWuKngWbsDOocScdqm54Wp
vWJr0GH2t/qN4tHrBqZZxFppbz906aalinOcvUA+XA1GIsRuL95a9dJxM1pzMOGL
1oH/gYZF9XbwkaaXlIXP9q0pkU86LmO+15dabw5Ew62c9fZ/mwxR3fKMj2FfwKec
rxNA4Fqr0rFaLNcOQnEYf59yE+cv6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFub
jFzpPuj0vCi5v182MGi27h4SMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85ODgzMjRBQzRGNjcxMUYxQTczN0IxQkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOfMA0GCSqGSIb3DQEBCwUA
A4IBAQBd81z/z4IqOLwM1kciwvujyace8gw+cJNMYzifpevvvx3ZC84LPJUHNQxw
neR3fPxFnJTKwZAYIxcqRFztEedlWOPBayMUC8FP0ksA3WcGD4NXk4nIWJ1g3XOl
2LRfVCYGvFzo6gaq3W6bkK7D59H+P8etRYCJbhhvWwZBJmRGTtqYXQ6EueUOEiz6
4b2yZXtrRHNRY8jI0BTxH2A0TUR+b4r/PHM7AXzL5b2oGgWNu5D3H7mmEF/IozL7
0raWAYDzrkvzCfzyfn48TKvkYrNppoaCS85rsMw/QqSzo7xzQbBn/X6cj9teQf2G
RqTiSACtrpa4a/cUNo3/2wwDcKqQ
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:57 2026 by rpki-client