Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E2217254DB11F182AD5DE8CE1D38B0.roa
File: C0E2217254DB11F182AD5DE8CE1D38B0.roa (raw, json)
Hash identifier: tdScNiA6XWkywbAa8OPY5YAVk5edWxznbbVQKTFjczQ=
Subject key identifier: 5D:65:9C:15:8E:8A:17:98:F3:9B:AF:3F:43:BE:BA:83:95:77:2B:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E2217254DB11F182AD5DE8CE1D38B0.roa
Signing time: Thu 21 May 2026 06:10:24 +0000
ROA not before: Thu 21 May 2026 06:10:19 +0000
ROA not after: Wed 01 Jul 2026 06:10:19 +0000
asID: 202036
IP address blocks: 45.201.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112327 (0x1b6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 06:10:19 2026 GMT
Not After : Jul 1 06:10:19 2026 GMT
Subject: CN=6a0ea1d0-031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:8d:17:d6:67:aa:11:6c:0a:55:51:1c:fe:
64:d1:cb:01:64:9f:1e:ea:a3:03:9e:fc:36:9b:62:
ab:50:38:da:55:c5:7c:29:a0:00:c5:d8:7a:d4:df:
bc:4e:fa:5c:38:9b:48:3f:66:bf:97:f3:fa:81:79:
22:2e:b6:a4:6b:b1:68:c0:6f:99:6a:6b:6a:32:2e:
ed:cc:98:5b:a2:d7:94:32:6d:3a:1e:ef:29:49:54:
83:23:42:ce:db:d1:3c:92:a2:9e:c2:2d:c8:26:f7:
ca:3f:01:00:10:c6:f1:c8:93:14:ac:90:c2:71:ba:
3a:22:8a:06:8d:18:44:51:d6:89:55:7d:64:56:27:
e4:32:3b:74:18:73:32:3b:1e:de:22:f2:85:eb:2c:
26:58:2d:68:4a:ac:47:d4:ec:a1:f7:39:92:bf:76:
4a:32:d8:4f:9f:12:37:28:ee:2d:78:e3:d8:bb:ea:
d6:0e:37:c5:62:e7:6a:f0:20:b9:90:3b:71:a7:cb:
19:7e:f4:30:f6:02:22:63:f9:54:b8:95:76:44:ee:
c0:55:c8:f9:5e:03:ea:13:d7:1d:51:83:4f:57:89:
20:29:85:32:5b:14:a0:48:bb:ef:78:c0:63:25:b8:
cd:61:64:04:6a:e4:bc:da:2d:65:4b:66:4c:1b:73:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:9C:15:8E:8A:17:98:F3:9B:AF:3F:43:BE:BA:83:95:77:2B:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E2217254DB11F182AD5DE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.36.0/22
Signature Algorithm: sha256WithRSAEncryption
88:3f:55:ff:b9:e3:b4:92:04:39:f3:bb:8e:f6:f7:fb:62:8d:
ef:a8:cc:30:38:72:23:73:14:82:05:ed:c2:ea:8c:c3:7c:ed:
6c:d6:29:22:d1:5a:70:ee:c8:41:32:69:dd:e0:b3:8d:66:a2:
a4:6f:85:5a:b5:30:7a:54:91:d9:a1:ff:68:27:e8:cc:09:e1:
5b:3f:eb:43:93:ba:c8:8c:b5:32:db:ca:be:73:43:4c:dc:8a:
19:58:db:01:ba:57:74:20:e0:f8:00:59:f5:01:59:df:7c:9a:
3e:05:33:74:90:dc:75:7b:05:5c:b9:60:76:ad:d8:61:38:fb:
1b:d9:2f:1a:f0:86:43:c3:ac:d0:7f:a8:a5:f0:48:d7:14:5e:
0e:57:47:22:89:af:0a:5e:6b:37:78:b2:43:74:4b:9e:61:1c:
f5:37:48:d8:c2:85:35:89:20:19:87:22:bf:b7:3b:7c:5f:53:
cd:f2:0a:0f:40:7c:2e:6b:cc:1e:eb:4b:f4:41:5d:a9:f3:39:
b5:b4:24:d7:53:6d:81:5c:16:f5:26:c9:05:d9:09:e5:eb:00:
73:2a:33:da:ea:b7:23:c1:5b:85:ea:25:61:f8:25:74:e0:d1:
c2:9b:30:c5:1e:a1:55:ba:69:51:65:0b:3b:1e:ff:05:7c:ec:
4f:b5:04:5b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbbHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMDYxMDE5WhcNMjYwNzAxMDYxMDE5WjAYMRYw
FAYDVQQDEw02YTBlYTFkMC0wMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwiCNF9ZnqhFsClVRHP5k0csBZJ8e6qMDnvw2m2KrUDjaVcV8KaAAxdh6
1N+8TvpcOJtIP2a/l/P6gXkiLraka7FowG+ZamtqMi7tzJhboteUMm06Hu8pSVSD
I0LO29E8kqKewi3IJvfKPwEAEMbxyJMUrJDCcbo6IooGjRhEUdaJVX1kVifkMjt0
GHMyOx7eIvKF6ywmWC1oSqxH1Oyh9zmSv3ZKMthPnxI3KO4teOPYu+rWDjfFYudq
8CC5kDtxp8sZfvQw9gIiY/lUuJV2RO7AVcj5XgPqE9cdUYNPV4kgKYUyWxSgSLvv
eMBjJbjNYWQEauS82i1lS2ZMG3N6ewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF1l
nBWOiheY85uvP0O+uoOVdysCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMEUyMjE3MjU0REIxMUYxODJBRDVERThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLckkMA0GCSqGSIb3DQEBCwUA
A4IBAQCIP1X/ueO0kgQ587uO9vf7Yo3vqMwwOHIjcxSCBe3C6ozDfO1s1iki0Vpw
7shBMmnd4LONZqKkb4VatTB6VJHZof9oJ+jMCeFbP+tDk7rIjLUy28q+c0NM3IoZ
WNsBuld0IOD4AFn1AVnffJo+BTN0kNx1ewVcuWB2rdhhOPsb2S8a8IZDw6zQf6il
8EjXFF4OV0ciia8KXms3eLJDdEueYRz1N0jYwoU1iSAZhyK/tzt8X1PN8goPQHwu
a8we60v0QV2p8zm1tCTXU22BXBb1JskF2Qnl6wBzKjPa6rcjwVuF6iVh+CV04NHC
mzDFHqFVumlRZQs7Hv8FfOxPtQRb
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:49 2026 by rpki-client