Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C515BAC079FB11F1AED2BDDFCE1D38B0.roa
File: C515BAC079FB11F1AED2BDDFCE1D38B0.roa (raw, json)
Hash identifier: la3Ywf5flviLQ7fDJko/mEVtOMONoj2kkRVOkQRKFEw=
Subject key identifier: 99:4E:FC:87:06:10:BB:7F:A8:6F:E3:AF:0E:1F:E8:6B:8E:88:54:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C374
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C515BAC079FB11F1AED2BDDFCE1D38B0.roa
Signing time: Tue 07 Jul 2026 12:02:48 +0000
ROA not before: Tue 07 Jul 2026 12:02:43 +0000
ROA not after: Mon 13 Jul 2026 12:02:43 +0000
asID: 153347
IP address blocks: 45.192.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115572 (0x1c374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 12:02:43 2026 GMT
Not After : Jul 13 12:02:43 2026 GMT
Subject: CN=6a4ceae8-f85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:86:81:dd:90:36:cc:76:65:3d:c3:61:b5:
12:6e:74:e2:fb:d7:a0:3e:cd:da:4b:5b:6d:74:50:
27:56:1b:30:1b:e7:af:a9:f3:d0:ef:1f:b6:b0:fd:
b1:2d:9c:2d:26:74:aa:d2:3d:11:0d:50:c8:50:ed:
48:f0:5a:04:e3:74:77:cc:2f:6c:25:58:bf:85:fb:
af:15:63:e0:ed:6d:70:2f:f3:5d:8c:66:d0:00:e5:
e1:19:05:37:72:0e:5d:7d:1e:e3:ec:b8:21:7c:3c:
cc:90:2f:6d:6c:37:52:c6:e8:a3:a3:fe:7f:00:a4:
a4:04:79:2b:8f:b3:a6:78:fc:d0:f6:90:83:5b:21:
5a:65:0e:20:6d:5f:bc:f9:ee:04:45:cf:37:79:6b:
43:2c:97:8e:10:9c:9c:ec:8f:55:d0:07:a9:9b:a1:
28:21:f0:99:66:d7:1a:fe:f3:07:18:78:c6:bc:73:
d4:a6:0d:2e:06:20:f1:51:2a:4f:f9:57:78:be:98:
6c:61:2a:5f:0e:e5:61:88:44:df:20:87:ab:e1:bc:
93:20:54:5d:b6:d1:b0:51:6d:98:94:8e:a6:1f:e0:
f1:03:78:5d:db:eb:39:88:ff:9a:77:79:b2:e5:4f:
5d:d4:5b:f3:29:1e:13:5a:4b:06:c4:1b:70:67:75:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4E:FC:87:06:10:BB:7F:A8:6F:E3:AF:0E:1F:E8:6B:8E:88:54:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C515BAC079FB11F1AED2BDDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
af:3c:63:53:3f:4e:35:10:86:22:f0:5f:9e:7d:06:c1:2d:e1:
ee:ce:62:01:80:05:07:75:d5:10:3d:1e:31:d5:99:58:5c:87:
93:49:60:47:dc:d0:5e:ec:1b:77:0b:64:cb:ef:2b:c3:3c:4f:
d5:1c:48:f4:88:f5:a4:c4:88:65:b7:c4:a2:df:5c:d8:07:00:
3b:fe:52:5f:49:61:54:71:73:3f:c7:ca:bd:dc:62:85:14:ec:
4a:69:d6:0b:e0:fd:20:19:a6:56:01:dd:2c:be:ac:c9:ed:d9:
22:61:c0:e0:9f:19:c0:1c:05:29:16:18:e0:3f:0e:11:6b:da:
a7:7e:10:57:6e:8e:50:9e:8b:4d:91:e5:7d:24:0a:1a:33:94:
30:38:83:d6:3e:c6:06:54:48:e4:99:67:b2:e2:da:dc:1d:e9:
47:82:d4:01:23:cf:75:b3:71:b5:e9:04:80:53:8a:be:c5:d7:
9a:0b:16:fa:8e:02:8e:98:84:28:e8:e1:73:c9:76:3b:28:5f:
bc:a5:f2:54:5a:73:c0:3c:4f:d7:f4:5f:22:01:de:5a:d0:c2:
93:b1:08:c8:2f:6e:75:f1:52:f5:7d:73:b5:46:19:8d:20:15:
a3:a1:10:e1:27:b1:7b:43:56:f9:0f:61:41:85:a9:06:90:b5:
04:80:a0:ff
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcN0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA3MTIwMjQzWhcNMjYwNzEzMTIwMjQzWjAYMRYw
FAYDVQQDEw02YTRjZWFlOC1mODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtqiGgd2QNsx2ZT3DYbUSbnTi+9egPs3aS1ttdFAnVhswG+evqfPQ7x+2
sP2xLZwtJnSq0j0RDVDIUO1I8FoE43R3zC9sJVi/hfuvFWPg7W1wL/NdjGbQAOXh
GQU3cg5dfR7j7LghfDzMkC9tbDdSxuijo/5/AKSkBHkrj7OmePzQ9pCDWyFaZQ4g
bV+8+e4ERc83eWtDLJeOEJyc7I9V0Aepm6EoIfCZZtca/vMHGHjGvHPUpg0uBiDx
USpP+Vd4vphsYSpfDuVhiETfIIer4byTIFRdttGwUW2YlI6mH+DxA3hd2+s5iP+a
d3my5U9d1FvzKR4TWksGxBtwZ3X5BQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJlO
/IcGELt/qG/jrw4f6GuOiFSGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNTE1QkFDMDc5RkIxMUYxQUVEMkJEREZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAVMA0GCSqGSIb3DQEBCwUA
A4IBAQCvPGNTP041EIYi8F+efQbBLeHuzmIBgAUHddUQPR4x1ZlYXIeTSWBH3NBe
7Bt3C2TL7yvDPE/VHEj0iPWkxIhlt8Si31zYBwA7/lJfSWFUcXM/x8q93GKFFOxK
adYL4P0gGaZWAd0svqzJ7dkiYcDgnxnAHAUpFhjgPw4Ra9qnfhBXbo5QnotNkeV9
JAoaM5QwOIPWPsYGVEjkmWey4trcHelHgtQBI891s3G16QSAU4q+xdeaCxb6jgKO
mIQo6OFzyXY7KF+8pfJUWnPAPE/X9F8iAd5a0MKTsQjIL2518VL1fXO1RhmNIBWj
oRDhJ7F7Q1b5D2FBhakGkLUEgKD/
-----END CERTIFICATE-----
Generated at Sat Jul 11 06:43:28 2026 by rpki-client