Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EEFAA1055E111F1BAB754A5CE1D38B0.roa
File: 9EEFAA1055E111F1BAB754A5CE1D38B0.roa (raw, json)
Hash identifier: azj3w2t/txFDGLH9eluaFm08an49bpexSFlPglrTclE=
Subject key identifier: AD:E2:DF:20:B0:2D:79:46:72:75:5E:00:1C:68:F3:63:2D:C9:51:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B7FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EEFAA1055E111F1BAB754A5CE1D38B0.roa
Signing time: Fri 22 May 2026 13:24:55 +0000
ROA not before: Fri 22 May 2026 13:24:49 +0000
ROA not after: Sat 08 Aug 2026 13:24:49 +0000
asID: 63787
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/24 maxlen: 24
45.192.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112639 (0x1b7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 13:24:49 2026 GMT
Not After : Aug 8 13:24:49 2026 GMT
Subject: CN=6a105927-044a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:44:bd:c9:b6:90:0c:26:27:29:f9:04:79:
e8:5e:66:90:ed:65:3c:a7:0b:78:31:4a:af:53:94:
0f:bc:a7:80:ec:1d:2c:0e:2f:fc:78:d1:7a:27:cf:
d2:bb:39:02:fe:e7:40:b0:23:d8:73:b0:03:65:6d:
bb:62:a3:d2:52:ba:87:71:98:f6:35:dd:e2:d7:57:
30:d1:04:cd:31:4e:7f:b0:98:b9:1c:0b:45:cc:ef:
af:0c:8e:48:5a:8d:9d:2c:11:56:03:07:a8:71:4c:
f2:fa:79:86:87:cb:7e:3c:84:a4:e5:bc:a7:7c:78:
a0:a7:3b:c6:ea:38:5d:d6:34:64:de:fe:0d:50:7c:
46:d8:cd:57:ba:0e:8e:2f:e1:ab:3d:3d:6b:20:a2:
db:83:28:c9:2a:9c:e1:e2:8f:1e:bd:9c:d7:ea:92:
9b:70:ce:33:c4:f5:eb:da:5f:28:60:66:c8:16:a1:
f7:8a:9b:26:06:cb:d7:a8:da:e4:2d:d2:00:e6:f7:
99:1e:e3:5b:b8:c8:4b:fd:47:99:d6:92:38:18:35:
b7:8e:74:4b:ad:da:02:d3:98:f6:5a:3f:6b:27:fc:
27:d6:ff:fb:c8:24:a6:0d:6f:ff:4f:1e:52:2d:ec:
79:3c:3f:82:82:60:82:c7:08:ab:13:52:89:58:75:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E2:DF:20:B0:2D:79:46:72:75:5E:00:1C:68:F3:63:2D:C9:51:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EEFAA1055E111F1BAB754A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:eb:41:06:eb:17:1b:31:81:7d:04:82:96:b0:62:72:a9:df:
2f:7c:dc:0a:e9:2b:6c:80:5d:df:dc:e1:ae:55:ba:1e:fa:5b:
77:d2:45:4a:a4:e7:87:84:ae:db:6c:52:d5:0c:12:6d:20:f5:
6c:32:97:07:0a:e6:c7:33:65:05:79:ff:ef:95:fd:c8:c6:f6:
15:a6:06:3f:2f:28:09:3e:f1:9e:61:20:20:64:23:e9:06:d3:
46:81:b4:55:2d:eb:4f:75:be:ff:5f:f4:d2:26:ff:e3:fe:fc:
06:50:0e:e3:51:9e:67:e6:ae:61:a2:e8:ab:cb:63:86:61:06:
82:81:f7:95:c8:03:24:b9:d5:b5:0a:29:2a:68:6d:21:83:35:
ef:16:1c:13:de:34:57:40:1a:36:00:91:cf:90:02:9b:85:f5:
ef:4d:45:01:51:53:6d:75:8d:6f:4d:4e:be:0a:b9:e2:25:1e:
da:eb:80:b0:37:8d:e8:62:66:09:45:3a:f2:4b:bb:46:c9:b1:
be:ad:5a:67:86:b6:33:5a:e7:43:7d:81:bf:eb:ca:10:a4:37:
84:d7:ed:8a:c3:00:06:21:3d:ad:12:0c:2a:0f:06:ad:d3:6b:
70:21:80:67:34:db:c0:b6:73:5c:fe:9f:b0:5a:92:8d:ac:94:
24:0b:6e:cb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbf/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIyMTMyNDQ5WhcNMjYwODA4MTMyNDQ5WjAYMRYw
FAYDVQQDEw02YTEwNTkyNy0wNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3QNEvcm2kAwmJyn5BHnoXmaQ7WU8pwt4MUqvU5QPvKeA7B0sDi/8eNF6
J8/SuzkC/udAsCPYc7ADZW27YqPSUrqHcZj2Nd3i11cw0QTNMU5/sJi5HAtFzO+v
DI5IWo2dLBFWAweocUzy+nmGh8t+PISk5bynfHigpzvG6jhd1jRk3v4NUHxG2M1X
ug6OL+GrPT1rIKLbgyjJKpzh4o8evZzX6pKbcM4zxPXr2l8oYGbIFqH3ipsmBsvX
qNrkLdIA5veZHuNbuMhL/UeZ1pI4GDW3jnRLrdoC05j2Wj9rJ/wn1v/7yCSmDW//
Tx5SLex5PD+CgmCCxwirE1KJWHWyRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK3i
3yCwLXlGcnVeABxo82MtyVFNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUVGQUExMDU1RTExMUYxQkFCNzU0QTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcCwMA0GCSqGSIb3DQEBCwUA
A4IBAQCd60EG6xcbMYF9BIKWsGJyqd8vfNwK6StsgF3f3OGuVboe+lt30kVKpOeH
hK7bbFLVDBJtIPVsMpcHCubHM2UFef/vlf3IxvYVpgY/LygJPvGeYSAgZCPpBtNG
gbRVLetPdb7/X/TSJv/j/vwGUA7jUZ5n5q5houiry2OGYQaCgfeVyAMkudW1Cikq
aG0hgzXvFhwT3jRXQBo2AJHPkAKbhfXvTUUBUVNtdY1vTU6+CrniJR7a64CwN43o
YmYJRTryS7tGybG+rVpnhrYzWudDfYG/68oQpDeE1+2KwwAGIT2tEgwqDwat02tw
IYBnNNvAtnNc/p+wWpKNrJQkC27L
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:57 2026 by rpki-client