Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD0329E496411F1816CF9A3CE1D38B0.roa
File: CCD0329E496411F1816CF9A3CE1D38B0.roa (raw, json)
Hash identifier: g/bJ/xSU+mc6xJnmhQjincmAW3PTSRIptt7HPQBS8eA=
Subject key identifier: 2C:31:00:71:98:8C:41:AE:8C:69:5F:CE:99:1B:AF:00:18:91:1B:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD0329E496411F1816CF9A3CE1D38B0.roa
Signing time: Wed 06 May 2026 16:01:11 +0000
ROA not before: Wed 06 May 2026 16:01:06 +0000
ROA not after: Sat 06 Jun 2026 16:01:06 +0000
asID: 213795
IP address blocks: 45.196.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111094 (0x1b1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 16:01:06 2026 GMT
Not After : Jun 6 16:01:06 2026 GMT
Subject: CN=69fb65c7-ed44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:28:51:14:cf:d1:2d:0c:dd:22:bb:1c:47:
20:49:d7:75:d4:df:f4:10:d8:bf:6b:61:f0:b9:c6:
24:62:c6:a3:9c:65:28:98:4f:ee:93:ea:88:2e:9a:
2d:24:80:93:31:61:fe:31:7a:86:27:09:c8:ae:b9:
50:dc:8d:bb:23:00:6d:0b:1f:81:4f:0d:53:82:ae:
c9:b9:ae:2c:95:d4:84:bb:8e:4f:19:b9:7b:c8:9f:
d6:0f:d8:48:5c:39:6f:2d:ee:f0:36:22:79:03:45:
3f:48:05:aa:5e:bf:2a:73:4a:cf:5b:27:c2:79:69:
cd:d8:9d:c3:ce:70:a5:c6:b3:76:96:db:8d:5a:74:
22:b6:9c:12:fc:49:dc:a7:91:f8:ed:d3:23:7e:00:
34:51:97:c6:15:c8:cc:02:4b:66:69:e8:bb:0d:56:
97:58:40:b7:9b:ef:f3:d5:76:30:64:21:8c:68:d7:
50:7e:4c:26:8e:c4:91:4c:71:be:26:74:48:6c:68:
6d:6a:3b:f2:b9:64:c8:e8:e5:97:aa:13:ff:8a:86:
54:24:fb:d3:c8:fc:92:4d:69:86:c6:9b:56:ad:a1:
e4:08:b8:04:7a:73:40:f6:4d:3b:de:4d:25:a1:73:
01:e6:be:1d:2b:6d:62:c7:e7:d0:ea:5e:c5:0e:98:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:00:71:98:8C:41:AE:8C:69:5F:CE:99:1B:AF:00:18:91:1B:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD0329E496411F1816CF9A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:22:cb:08:f1:0c:65:74:c2:78:6d:80:b9:5e:f0:73:58:e5:
fd:94:8c:9d:42:2e:5f:a3:a8:25:f0:05:de:67:b1:4e:cf:6c:
44:8a:19:94:61:8d:3c:cd:11:1a:ad:ff:b4:bc:db:e0:b3:3f:
83:ad:1c:e6:46:46:42:43:f1:fd:27:31:2e:3e:00:f2:c3:fc:
60:ae:2f:aa:d4:f8:d3:18:f7:51:5f:91:4b:71:8a:37:b1:e1:
a7:46:5a:b5:c9:20:50:82:49:1f:d6:e4:0b:c9:cc:31:e9:ba:
30:bd:f6:00:bd:b3:dd:8a:61:55:be:f6:4b:28:33:f3:50:2c:
4f:a5:cc:d3:2f:aa:aa:ef:7b:10:8c:27:da:36:90:43:e7:d4:
7f:70:4f:3e:3d:9a:38:16:cf:99:92:73:4f:fd:08:6d:08:20:
6c:3e:77:1f:8c:08:50:a3:70:76:82:9d:3f:54:91:24:45:cf:
a5:bf:56:e6:19:db:bb:71:1b:2a:2f:c1:8f:36:6b:f1:96:3c:
28:26:a0:98:5a:45:dc:d3:05:1d:84:15:c5:37:57:9f:4d:7a:
df:1a:03:d5:44:78:5d:ed:8e:f5:f0:e8:8e:ca:11:04:32:40:
89:96:74:ae:fd:f2:1a:bb:ba:ca:2e:a9:32:cf:1c:7d:8c:4c:
c8:c4:91:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbH2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA2MTYwMTA2WhcNMjYwNjA2MTYwMTA2WjAYMRYw
FAYDVQQDEw02OWZiNjVjNy1lZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqowoURTP0S0M3SK7HEcgSdd11N/0ENi/a2HwucYkYsajnGUomE/uk+qI
LpotJICTMWH+MXqGJwnIrrlQ3I27IwBtCx+BTw1Tgq7Jua4sldSEu45PGbl7yJ/W
D9hIXDlvLe7wNiJ5A0U/SAWqXr8qc0rPWyfCeWnN2J3DznClxrN2ltuNWnQitpwS
/Encp5H47dMjfgA0UZfGFcjMAktmaei7DVaXWEC3m+/z1XYwZCGMaNdQfkwmjsSR
THG+JnRIbGhtajvyuWTI6OWXqhP/ioZUJPvTyPySTWmGxptWraHkCLgEenNA9k07
3k0loXMB5r4dK21ix+fQ6l7FDpiQ4wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCwx
AHGYjEGujGlfzpkbrwAYkRuRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQ0QwMzI5RTQ5NjQxMUYxODE2Q0Y5QTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcQcMA0GCSqGSIb3DQEBCwUA
A4IBAQCkIssI8QxldMJ4bYC5XvBzWOX9lIydQi5fo6gl8AXeZ7FOz2xEihmUYY08
zREarf+0vNvgsz+DrRzmRkZCQ/H9JzEuPgDyw/xgri+q1PjTGPdRX5FLcYo3seGn
Rlq1ySBQgkkf1uQLycwx6bowvfYAvbPdimFVvvZLKDPzUCxPpczTL6qq73sQjCfa
NpBD59R/cE8+PZo4Fs+ZknNP/QhtCCBsPncfjAhQo3B2gp0/VJEkRc+lv1bmGdu7
cRsqL8GPNmvxljwoJqCYWkXc0wUdhBXFN1efTXrfGgPVRHhd7Y718OiOyhEEMkCJ
lnSu/fIau7rKLqkyzxx9jEzIxJHA
-----END CERTIFICATE-----
Generated at Wed May 13 10:49:04 2026 by rpki-client