Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F771A5E7AB711F1A688AED9CE1D38B0.roa
File: 9F771A5E7AB711F1A688AED9CE1D38B0.roa (raw, json)
Hash identifier: qvYPC0pm9hUHtzzj5cAr+Du/5Q/4c/Z/ggvYxq9dMA0=
Subject key identifier: F3:4C:D3:8C:00:0E:FD:C3:71:32:16:BC:19:9F:FF:DD:4C:9B:23:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F771A5E7AB711F1A688AED9CE1D38B0.roa
Signing time: Wed 08 Jul 2026 10:27:30 +0000
ROA not before: Wed 08 Jul 2026 10:27:26 +0000
ROA not after: Sat 15 Aug 2026 10:27:26 +0000
asID: 63023
IP address blocks: 45.206.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115642 (0x1c3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 10:27:26 2026 GMT
Not After : Aug 15 10:27:26 2026 GMT
Subject: CN=6a4e2612-9fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:7b:5a:79:d8:7d:55:0b:08:77:9e:ff:73:
71:33:6b:60:76:fd:be:a6:1a:45:0e:29:d5:ad:b7:
02:08:34:cc:4c:f1:bd:b7:6e:b3:2a:b5:4c:6e:7d:
d3:e5:9e:f7:70:f4:54:4f:63:98:43:b8:2d:e8:8f:
93:6b:2d:f5:e8:db:a3:90:22:7b:ea:a4:9c:af:f4:
c2:27:40:46:bd:d4:b0:cd:1f:10:77:8e:64:45:cf:
d1:2b:83:9f:65:c1:5d:cf:76:ca:cc:8f:33:84:1b:
90:b3:3b:f8:89:4f:ba:35:eb:60:cf:fa:b5:f4:18:
a5:7b:e8:21:c9:9a:1f:4b:7a:e7:ec:49:aa:1a:d9:
34:60:1d:4e:72:30:8a:b5:b0:62:a8:67:83:04:64:
e6:7c:69:a2:c0:81:a6:55:4d:e2:17:30:cb:b8:fa:
36:11:0a:70:87:26:dd:0a:31:76:b1:6e:9a:5f:df:
0c:1b:f8:d0:c2:02:99:b9:0a:94:4c:fd:22:91:79:
d7:f1:a1:c9:43:b0:7a:4b:77:2f:d4:84:1c:f8:84:
76:f5:de:11:10:da:f6:e0:bb:9e:cd:5d:5b:09:11:
f1:bd:13:bd:33:ad:9d:a8:70:0c:25:82:e3:7d:d0:
e5:95:2b:03:3f:d7:d9:92:e3:af:a7:61:30:fd:fa:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4C:D3:8C:00:0E:FD:C3:71:32:16:BC:19:9F:FF:DD:4C:9B:23:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F771A5E7AB711F1A688AED9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b2:85:8d:a3:de:a3:cd:ca:9b:78:ed:80:38:9e:c6:ed:47:
3a:28:f5:39:1d:58:71:9b:71:1e:a4:b9:8f:7f:c6:55:0e:96:
57:c2:d3:7b:bb:cc:f1:3e:6f:d9:ea:d2:a0:fa:35:93:f5:5f:
6e:9f:10:f1:aa:32:55:41:68:1d:dc:83:04:95:38:cb:57:35:
73:08:99:8d:e1:95:43:7e:98:49:3d:ea:d6:a4:05:28:d9:7d:
3e:1a:48:ff:2e:8b:a7:9c:25:de:33:5f:4b:c1:61:72:4f:8a:
24:7f:31:d2:57:02:bc:a2:fd:90:88:2d:b8:83:52:46:30:54:
63:9e:04:56:78:ba:a2:89:2d:66:ee:33:87:6a:83:09:17:e2:
38:41:4c:42:61:c8:3d:02:f5:bf:c4:3f:ec:a8:e7:6b:8d:5d:
fe:b8:a6:54:31:c4:41:b7:28:d5:7a:c1:92:67:59:54:57:24:
18:f6:94:c8:ec:8f:1a:3c:1d:f9:83:a0:2f:4b:9a:25:3c:a9:
9d:51:82:41:da:05:22:c2:f0:c5:6f:b0:db:b8:df:63:3e:af:
6c:53:21:0b:a1:83:08:79:c7:c4:8e:35:5e:df:84:91:3f:6a:
3f:10:1c:db:bd:b8:ed:cd:19:35:99:d4:b3:20:95:fd:88:b0:
d4:fc:e1:9f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcO6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA4MTAyNzI2WhcNMjYwODE1MTAyNzI2WjAYMRYw
FAYDVQQDEw02YTRlMjYxMi05ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt617WnnYfVULCHee/3NxM2tgdv2+phpFDinVrbcCCDTMTPG9t26zKrVM
bn3T5Z73cPRUT2OYQ7gt6I+Tay316NujkCJ76qScr/TCJ0BGvdSwzR8Qd45kRc/R
K4OfZcFdz3bKzI8zhBuQszv4iU+6Netgz/q19Bile+ghyZofS3rn7EmqGtk0YB1O
cjCKtbBiqGeDBGTmfGmiwIGmVU3iFzDLuPo2EQpwhybdCjF2sW6aX98MG/jQwgKZ
uQqUTP0ikXnX8aHJQ7B6S3cv1IQc+IR29d4RENr24LuezV1bCRHxvRO9M62dqHAM
JYLjfdDllSsDP9fZkuOvp2Ew/fqgnwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPNM
04wADv3DcTIWvBmf/91MmyMfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85Rjc3MUE1RTdBQjcxMUYxQTY4OEFFRDlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc4AMA0GCSqGSIb3DQEBCwUA
A4IBAQBtsoWNo96jzcqbeO2AOJ7G7Uc6KPU5HVhxm3EepLmPf8ZVDpZXwtN7u8zx
Pm/Z6tKg+jWT9V9unxDxqjJVQWgd3IMElTjLVzVzCJmN4ZVDfphJPerWpAUo2X0+
Gkj/LounnCXeM19LwWFyT4okfzHSVwK8ov2QiC24g1JGMFRjngRWeLqiiS1m7jOH
aoMJF+I4QUxCYcg9AvW/xD/sqOdrjV3+uKZUMcRBtyjVesGSZ1lUVyQY9pTI7I8a
PB35g6AvS5olPKmdUYJB2gUiwvDFb7DbuN9jPq9sUyELoYMIecfEjjVe34SRP2o/
EBzbvbjtzRk1mdSzIJX9iLDU/OGf
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:32 2026 by rpki-client