Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B765B254D511F1A95587C2CE1D38B0.roa
File: B8B765B254D511F1A95587C2CE1D38B0.roa (raw, json)
Hash identifier: UucdyU+7tYarXEC5+Rfr0TMBklBM3+ujPGF3kb3J9Qo=
Subject key identifier: 10:B5:02:F7:4D:C9:D4:E3:41:60:0D:41:2B:F8:FF:28:2A:C9:BF:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B765B254D511F1A95587C2CE1D38B0.roa
Signing time: Thu 21 May 2026 05:27:13 +0000
ROA not before: Thu 21 May 2026 05:27:08 +0000
ROA not after: Fri 10 Jul 2026 05:27:08 +0000
asID: 7018
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112313 (0x1b6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 05:27:08 2026 GMT
Not After : Jul 10 05:27:08 2026 GMT
Subject: CN=6a0e97b1-4ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:4b:21:97:6a:fb:15:3e:21:7d:87:0f:82:
9f:04:d5:67:c0:a1:af:cd:a7:ce:7d:73:43:a4:a9:
c5:ed:0f:b2:d0:61:75:25:02:2d:98:ac:1c:93:54:
36:85:3e:d5:93:5a:47:68:20:a8:e7:b7:0e:15:12:
13:fb:12:d1:c7:97:61:c8:40:3a:4b:ba:05:52:81:
d3:72:52:73:7c:79:0b:3d:41:1a:ff:bc:29:0c:70:
61:b2:33:01:09:34:3b:45:4b:88:ea:a9:2e:0a:a8:
73:db:61:e6:2e:e3:d1:4c:0c:61:74:c8:cc:7b:dc:
7f:1a:4a:95:c2:a0:15:e2:e1:53:18:71:66:de:56:
ec:11:ed:7c:b2:6d:36:80:0c:48:5a:d6:fc:bb:6b:
c7:ab:f3:66:38:cf:7d:cc:7f:4a:7f:11:0c:e1:75:
de:0f:99:a8:ce:24:03:56:f1:b6:fe:fc:9c:0c:57:
37:e3:72:2d:64:08:95:a6:59:e9:96:22:09:a0:a2:
d4:50:5c:2f:62:26:4e:2e:2d:06:0b:79:71:d2:f6:
20:65:05:49:c5:0c:58:ab:69:67:5f:fc:dd:bf:5c:
77:5a:c5:d6:fd:17:d5:1b:61:1f:85:92:23:09:06:
6f:1d:e2:cf:ed:12:c4:1f:93:c5:49:1d:53:c5:bd:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B5:02:F7:4D:C9:D4:E3:41:60:0D:41:2B:F8:FF:28:2A:C9:BF:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B765B254D511F1A95587C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
45:31:43:1f:56:1d:6d:53:12:89:10:5e:fc:0b:11:f5:1b:2a:
47:b9:97:0f:73:87:19:4d:3f:34:1b:e2:be:5d:dd:f2:97:e1:
87:26:b0:30:4b:bf:8e:e9:f1:d2:63:4c:fd:45:4e:b1:5d:c2:
cf:d0:8c:57:af:1e:36:ad:be:86:20:f0:60:02:ef:6f:a0:b4:
f1:9f:bd:15:95:36:89:19:0c:af:7b:a0:3a:df:39:ae:aa:e7:
49:ba:11:a4:f9:09:76:69:83:63:cd:6f:57:36:23:6c:bb:db:
fe:69:d5:9d:d9:44:85:f5:d1:72:0b:c8:b5:e1:be:2d:6e:4a:
26:ac:ed:04:8f:4c:8f:da:28:7e:3c:be:ab:bd:c5:19:93:5e:
49:c0:43:a2:f0:44:01:2a:b4:a5:32:07:c5:de:90:ae:ea:4d:
db:0d:b9:d7:f3:67:21:5a:e0:45:2d:ad:af:56:84:9f:c3:3e:
d9:48:01:a7:94:e6:79:de:4a:6d:04:ed:0a:22:67:a1:32:f3:
ce:24:6e:e9:63:9d:05:bc:74:8b:1f:64:a4:73:49:de:e7:1f:
80:4c:a3:85:0f:72:5d:37:92:5e:2e:67:97:99:01:5c:72:d7:
ae:e3:59:53:e5:c8:34:01:39:9e:e1:3e:74:4e:4a:62:85:1c:
17:05:0b:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAba5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMDUyNzA4WhcNMjYwNzEwMDUyNzA4WjAYMRYw
FAYDVQQDEw02YTBlOTdiMS00YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApAVLIZdq+xU+IX2HD4KfBNVnwKGvzafOfXNDpKnF7Q+y0GF1JQItmKwc
k1Q2hT7Vk1pHaCCo57cOFRIT+xLRx5dhyEA6S7oFUoHTclJzfHkLPUEa/7wpDHBh
sjMBCTQ7RUuI6qkuCqhz22HmLuPRTAxhdMjMe9x/GkqVwqAV4uFTGHFm3lbsEe18
sm02gAxIWtb8u2vHq/NmOM99zH9KfxEM4XXeD5moziQDVvG2/vycDFc343ItZAiV
plnpliIJoKLUUFwvYiZOLi0GC3lx0vYgZQVJxQxYq2lnX/zdv1x3WsXW/RfVG2Ef
hZIjCQZvHeLP7RLEH5PFSR1Txb1XmwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBC1
AvdNydTjQWANQSv4/ygqyb9hMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COEI3NjVCMjU0RDUxMUYxQTk1NTg3QzJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpKMA0GCSqGSIb3DQEBCwUA
A4IBAQBFMUMfVh1tUxKJEF78CxH1GypHuZcPc4cZTT80G+K+Xd3yl+GHJrAwS7+O
6fHSY0z9RU6xXcLP0IxXrx42rb6GIPBgAu9voLTxn70VlTaJGQyve6A63zmuqudJ
uhGk+Ql2aYNjzW9XNiNsu9v+adWd2USF9dFyC8i14b4tbkomrO0Ej0yP2ih+PL6r
vcUZk15JwEOi8EQBKrSlMgfF3pCu6k3bDbnX82chWuBFLa2vVoSfwz7ZSAGnlOZ5
3kptBO0KImehMvPOJG7pY50FvHSLH2Skc0ne5x+ATKOFD3JdN5JeLmeXmQFccteu
41lT5cg0ATme4T50TkpihRwXBQu2
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:00 2026 by rpki-client