Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7E9246076DE11F1971F21F6CE1D38B0.roa
File: B7E9246076DE11F1971F21F6CE1D38B0.roa (raw, json)
Hash identifier: T53AkOJ+qIKVUAroCb9Tvj2UZBK44dbgTgvVFsEt5/M=
Subject key identifier: 89:63:E1:98:8A:85:93:6A:0A:0C:5F:2C:0E:5A:6C:84:C1:EE:BC:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C282
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7E9246076DE11F1971F21F6CE1D38B0.roa
Signing time: Fri 03 Jul 2026 12:57:17 +0000
ROA not before: Fri 03 Jul 2026 12:57:12 +0000
ROA not after: Sun 09 Aug 2026 12:57:12 +0000
asID: 263242
IP address blocks: 45.192.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115330 (0x1c282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:57:12 2026 GMT
Not After : Aug 9 12:57:12 2026 GMT
Subject: CN=6a47b1ad-3a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:d5:97:0a:93:ec:ec:73:bc:3b:85:9d:ce:
76:63:75:db:c5:66:6c:8a:10:b0:30:70:f2:f5:d8:
34:dd:00:d3:60:c3:35:d8:b9:70:2a:b1:95:91:3e:
4a:c7:8b:4b:a8:93:e9:81:99:59:0e:c0:9f:e3:63:
41:f5:50:94:af:eb:98:9f:bb:45:96:ad:a3:31:e3:
ca:f9:1c:df:6d:f7:27:68:92:4f:f5:43:48:b3:17:
12:ee:cb:3a:c2:99:7b:9a:e8:71:71:b6:0f:d7:d3:
d1:60:c1:0e:91:a2:ab:88:f8:3b:cd:8f:1a:bc:42:
cb:6f:d4:84:bf:2c:1f:9c:1c:54:c5:65:8b:a7:01:
44:67:4a:e4:bd:af:1e:7e:14:b0:54:b3:95:03:ad:
19:2d:80:6f:87:7b:08:e8:74:9d:cc:5a:59:a8:cd:
24:c1:87:a3:44:3c:3f:4f:ce:a1:27:64:6c:46:d7:
f0:72:5a:0d:4a:f9:87:5a:8a:40:7c:1d:98:ca:c9:
38:88:53:b4:04:5e:5a:73:ff:8f:8c:ff:18:6b:b3:
a4:91:9c:fd:25:fc:6d:75:53:7b:84:8c:7d:b1:4c:
f8:19:3f:c0:94:bb:0b:48:aa:ad:80:4f:a4:72:ed:
c3:fd:b9:85:20:7f:70:0e:c7:69:e8:fa:8a:8f:68:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:E1:98:8A:85:93:6A:0A:0C:5F:2C:0E:5A:6C:84:C1:EE:BC:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7E9246076DE11F1971F21F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9e:4a:dd:4b:67:c9:76:8a:8a:42:af:1d:87:c6:4c:0c:77:
c4:00:6e:29:6e:80:73:38:67:34:dd:2c:7b:bf:b7:0e:f3:e8:
7d:9a:c2:f3:e0:dd:34:28:ef:36:c8:6d:61:f5:f7:0d:c3:36:
7f:50:4a:8d:48:83:78:8b:24:6e:d9:6a:3c:7a:da:84:ca:f9:
7f:fe:eb:fe:40:89:41:a1:33:cc:1e:4a:d0:2a:68:28:4a:f8:
a6:37:d6:70:0d:69:91:bf:de:93:8e:71:d8:91:b2:e6:6c:69:
94:4c:44:61:2d:1c:a9:03:2c:b3:ae:cb:c2:ff:4c:de:0c:c1:
be:01:37:00:ea:2c:48:dd:2b:62:86:d5:87:8f:91:d5:b5:a8:
a1:be:2f:d7:b2:c5:16:38:84:74:e0:a9:57:58:8f:81:35:83:
f6:fb:ff:a0:c9:49:28:cb:da:b9:bf:4f:e8:81:4c:e5:74:d2:
5c:d6:2c:a6:79:dd:1b:1c:b0:57:78:46:5e:70:c9:3e:52:e1:
ea:68:1d:13:bb:1b:0d:b9:63:c6:0b:93:ab:55:81:d7:2a:7c:
1a:4c:71:ca:ac:60:32:2a:1c:46:89:28:19:71:c9:d1:a5:79:
cc:fa:c4:66:bf:2b:d0:73:0a:1c:a7:4d:40:27:21:6b:13:a5:
61:9a:be:64
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcKCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAzMTI1NzEyWhcNMjYwODA5MTI1NzEyWjAYMRYw
FAYDVQQDEw02YTQ3YjFhZC0zYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvk3VlwqT7OxzvDuFnc52Y3XbxWZsihCwMHDy9dg03QDTYMM12LlwKrGV
kT5Kx4tLqJPpgZlZDsCf42NB9VCUr+uYn7tFlq2jMePK+RzfbfcnaJJP9UNIsxcS
7ss6wpl7muhxcbYP19PRYMEOkaKriPg7zY8avELLb9SEvywfnBxUxWWLpwFEZ0rk
va8efhSwVLOVA60ZLYBvh3sI6HSdzFpZqM0kwYejRDw/T86hJ2RsRtfwcloNSvmH
WopAfB2Yysk4iFO0BF5ac/+PjP8Ya7OkkZz9JfxtdVN7hIx9sUz4GT/AlLsLSKqt
gE+kcu3D/bmFIH9wDsdp6PqKj2hSoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIlj
4ZiKhZNqCgxfLA5abITB7rykMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CN0U5MjQ2MDc2REUxMUYxOTcxRjIxRjZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCFMA0GCSqGSIb3DQEBCwUA
A4IBAQCdnkrdS2fJdoqKQq8dh8ZMDHfEAG4pboBzOGc03Sx7v7cO8+h9msLz4N00
KO82yG1h9fcNwzZ/UEqNSIN4iyRu2Wo8etqEyvl//uv+QIlBoTPMHkrQKmgoSvim
N9ZwDWmRv96TjnHYkbLmbGmUTERhLRypAyyzrsvC/0zeDMG+ATcA6ixI3StihtWH
j5HVtaihvi/XssUWOIR04KlXWI+BNYP2+/+gyUkoy9q5v0/ogUzldNJc1iymed0b
HLBXeEZecMk+UuHqaB0TuxsNuWPGC5OrVYHXKnwaTHHKrGAyKhxGiSgZccnRpXnM
+sRmvyvQcwocp01AJyFrE6Vhmr5k
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:33 2026 by rpki-client