Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD66C4707D6E11F1A9F32B09CF1D38B0.roa
File: AD66C4707D6E11F1A9F32B09CF1D38B0.roa (raw, json)
Hash identifier: b2k3YYfK/R8hjK839fA90FHdxpfWdyFm5x0gOJpeQ5c=
Subject key identifier: 9F:54:79:F2:00:FD:D7:3F:6A:0B:9B:FC:7F:94:22:36:DE:89:18:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C499
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD66C4707D6E11F1A9F32B09CF1D38B0.roa
Signing time: Sat 11 Jul 2026 21:22:54 +0000
ROA not before: Sat 11 Jul 2026 21:22:49 +0000
ROA not after: Sat 10 Jul 2027 21:22:49 +0000
asID: 328608
IP address blocks: 45.205.62.0/24 maxlen: 24
45.205.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115865 (0x1c499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 21:22:49 2026 GMT
Not After : Jul 10 21:22:49 2027 GMT
Subject: CN=6a52b42e-d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:16:0f:ff:ac:38:73:22:a7:7e:19:3e:f2:
00:46:4c:9c:9c:a1:93:26:f0:e8:c9:f9:4a:1d:69:
c4:12:a7:53:24:d7:e2:8e:48:24:53:7c:f4:b9:e0:
79:b3:d4:f6:42:9a:4d:3e:dd:aa:b4:2a:f1:98:b3:
9f:35:db:4a:ef:93:a0:fb:a5:22:fe:b8:b2:f4:6a:
e0:27:ea:3c:26:d5:33:b3:75:38:4f:5a:49:64:83:
dc:06:16:f6:b3:2f:79:d8:42:da:12:ab:db:23:56:
16:34:81:80:bb:c3:fb:0f:44:58:35:ff:2d:f2:41:
fe:dc:83:58:15:55:05:f1:c6:3f:a2:37:cf:a2:19:
31:ba:c1:1e:78:83:71:3c:6a:a6:9b:eb:ab:40:2f:
f4:28:12:64:b5:8a:fb:cf:60:af:8b:5f:9f:9a:77:
f8:37:b0:dd:05:eb:b1:3a:22:47:8e:e5:6f:b5:6f:
cc:f1:e7:2d:1e:6b:df:a6:c4:55:68:1b:ae:7f:f9:
3f:e1:02:5e:88:a1:9e:cb:cf:0c:a2:df:f2:79:67:
72:2a:c4:fd:95:42:b2:5d:f8:e8:d8:98:cd:71:89:
41:0d:d8:4d:5a:29:ad:02:3f:49:14:b4:74:18:88:
ed:98:a4:49:47:a6:0c:17:11:c8:d9:88:21:f5:8e:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:79:F2:00:FD:D7:3F:6A:0B:9B:FC:7F:94:22:36:DE:89:18:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD66C4707D6E11F1A9F32B09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.62.0/23
Signature Algorithm: sha256WithRSAEncryption
41:ee:44:c5:8f:30:3f:98:5e:fd:05:0a:9c:e5:ba:d0:a6:7f:
c8:33:e1:2a:60:8d:29:bb:38:b1:2f:96:53:1b:3d:f8:e6:c8:
3a:72:3b:64:a7:74:1c:72:91:81:72:f1:e8:a4:c6:c3:4e:cd:
86:8c:46:6c:f4:9a:25:90:d9:de:97:0b:33:ff:04:12:d2:0d:
9a:37:8d:89:7b:9f:1f:7b:ef:f5:72:ca:b0:c9:7d:a6:3d:f6:
9c:2d:2d:da:f5:92:70:d7:0c:61:89:a6:2e:43:d7:9b:99:74:
c2:5b:21:c8:c0:18:e4:f5:8a:9f:02:25:30:80:70:fc:77:58:
9c:7e:56:b3:a5:3e:1b:39:67:ba:af:f3:66:34:ae:a8:06:f0:
8c:9e:d4:80:a0:df:ba:df:22:f2:cc:90:91:f2:06:42:9b:b7:
c4:ad:28:52:6e:d9:e2:09:61:d6:ee:94:3b:1f:50:9c:70:63:
73:d6:3a:45:d9:33:7d:6d:23:9e:4f:8a:e2:b8:9c:61:48:0d:
40:f0:92:42:22:50:99:21:d7:d4:6d:0b:49:3a:ac:7a:4f:53:
3f:ba:77:bd:4e:85:ca:ed:c4:24:e2:fe:4c:45:33:96:e0:e5:
08:61:1a:9c:c8:21:96:ef:40:e4:47:d3:5a:83:c8:3d:ac:38:
f6:31:f9:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcSZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzExMjEyMjQ5WhcNMjcwNzEwMjEyMjQ5WjAYMRYw
FAYDVQQDEw02YTUyYjQyZS1kOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtOUWD/+sOHMip34ZPvIARkycnKGTJvDoyflKHWnEEqdTJNfijkgkU3z0
ueB5s9T2QppNPt2qtCrxmLOfNdtK75Og+6Ui/riy9GrgJ+o8JtUzs3U4T1pJZIPc
Bhb2sy952ELaEqvbI1YWNIGAu8P7D0RYNf8t8kH+3INYFVUF8cY/ojfPohkxusEe
eINxPGqmm+urQC/0KBJktYr7z2Cvi1+fmnf4N7DdBeuxOiJHjuVvtW/M8ectHmvf
psRVaBuuf/k/4QJeiKGey88Mot/yeWdyKsT9lUKyXfjo2JjNcYlBDdhNWimtAj9J
FLR0GIjtmKRJR6YMFxHI2Ygh9Y6oIwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ9U
efIA/dc/agub/H+UIjbeiRjGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDY2QzQ3MDdENkUxMUYxQTlGMzJCMDlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc0+MA0GCSqGSIb3DQEBCwUA
A4IBAQBB7kTFjzA/mF79BQqc5brQpn/IM+EqYI0puzixL5ZTGz345sg6cjtkp3Qc
cpGBcvHopMbDTs2GjEZs9JolkNnelwsz/wQS0g2aN42Je58fe+/1csqwyX2mPfac
LS3a9ZJw1wxhiaYuQ9ebmXTCWyHIwBjk9YqfAiUwgHD8d1icflazpT4bOWe6r/Nm
NK6oBvCMntSAoN+63yLyzJCR8gZCm7fErShSbtniCWHW7pQ7H1CccGNz1jpF2TN9
bSOeT4riuJxhSA1A8JJCIlCZIdfUbQtJOqx6T1M/une9ToXK7cQk4v5MRTOW4OUI
YRqcyCGW70DkR9Nag8g9rDj2Mflo
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:11 2026 by rpki-client