Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD0DF69E75E011F19B88F2F5CE1D38B0.roa
File: CD0DF69E75E011F19B88F2F5CE1D38B0.roa (raw, json)
Hash identifier: 1KOUkcx29XUYt7ZiQT/rgzvEH42EeZplHzX8CIgrP9s=
Subject key identifier: C7:9E:03:6A:58:1E:6A:C4:A0:B3:CA:3C:BB:B9:87:34:25:50:3C:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C23C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD0DF69E75E011F19B88F2F5CE1D38B0.roa
Signing time: Thu 02 Jul 2026 06:39:40 +0000
ROA not before: Thu 02 Jul 2026 06:39:35 +0000
ROA not after: Sun 09 Aug 2026 06:39:35 +0000
asID: 211577
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115260 (0x1c23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 06:39:35 2026 GMT
Not After : Aug 9 06:39:35 2026 GMT
Subject: CN=6a4607ac-1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:5c:7e:f8:32:45:eb:9a:fb:06:48:9a:a8:
61:05:a8:4a:ba:a1:71:96:0b:50:33:73:54:fc:aa:
e5:09:83:cf:c2:93:53:9d:99:9e:43:60:0f:e7:7d:
6f:df:22:5d:74:07:38:a2:fe:52:22:34:4f:99:69:
c4:98:1c:0f:f2:c6:e3:23:9b:d2:32:0b:6c:66:6a:
55:0e:7b:d6:e8:ac:20:ee:bf:db:85:f4:af:92:21:
51:e2:6d:48:9c:37:5a:c3:69:73:dd:d6:f3:d8:47:
c7:da:2a:2c:f1:42:38:05:e8:e1:b9:4c:6c:e2:74:
68:44:6f:1b:e6:5d:9d:bc:ae:3a:78:74:53:4b:36:
f3:a9:ff:69:31:03:f6:7e:bf:5f:e6:2d:30:bb:47:
7e:76:86:f6:4e:fa:03:db:e0:9a:b9:4e:bb:6a:5c:
7a:17:81:8f:7a:2d:c9:0f:34:ed:05:90:11:61:af:
c7:12:20:9c:a4:5e:66:6a:21:ad:63:2a:c6:ed:bb:
5b:f8:02:98:cc:44:28:bf:86:f3:8c:8c:57:4b:42:
74:af:fb:34:ac:f4:1e:1d:5b:bf:35:b8:1c:15:3e:
70:1d:26:1c:9f:88:41:fe:2f:4d:1a:33:28:57:7a:
ec:c3:a9:a3:56:7d:08:6e:ff:99:78:51:d4:eb:e3:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9E:03:6A:58:1E:6A:C4:A0:B3:CA:3C:BB:B9:87:34:25:50:3C:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD0DF69E75E011F19B88F2F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:38:da:3d:08:b3:4a:69:79:d4:8c:3d:ac:27:d6:a6:0f:74:
6e:95:cd:87:2d:e7:8c:aa:d9:d0:86:f0:db:2b:7a:85:25:15:
f7:02:7f:bc:42:d9:cd:2b:dd:04:dd:ca:ea:1e:27:86:da:f3:
ce:95:31:30:6d:02:bb:b6:b5:f9:fe:a1:3f:8a:7e:7f:52:51:
96:a2:06:4a:cd:87:a0:1c:83:d6:fc:fe:b6:5a:de:7d:dc:a9:
be:3b:aa:42:e8:1a:7f:8f:e4:18:66:bb:18:33:2b:96:54:64:
f6:60:df:39:1a:3b:0f:86:f0:b4:db:86:e4:b3:ce:83:44:7d:
c1:06:b9:27:de:c2:f4:0f:6d:5d:ba:35:f1:ef:72:f0:e4:b4:
c9:7d:e3:bb:13:86:e1:34:f6:55:d1:58:10:46:d7:00:6a:1c:
af:83:a4:93:da:75:1a:55:69:fd:5a:9b:89:41:df:d3:24:f0:
ed:21:c9:90:bb:b7:6d:7d:6a:85:66:52:b6:68:b1:fa:0d:b7:
c7:d6:f3:b6:a0:48:5d:12:44:75:48:47:55:6e:fa:68:50:60:
f0:c3:9c:1f:c6:73:9a:0a:a8:d4:0b:59:b1:a8:6d:dc:32:54:
26:45:06:ec:0b:5c:d1:60:d1:8f:6e:de:ee:88:63:5f:5b:ef:
6f:9a:b1:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcI8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAyMDYzOTM1WhcNMjYwODA5MDYzOTM1WjAYMRYw
FAYDVQQDEw02YTQ2MDdhYy0xNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt6JcfvgyReua+wZImqhhBahKuqFxlgtQM3NU/KrlCYPPwpNTnZmeQ2AP
531v3yJddAc4ov5SIjRPmWnEmBwP8sbjI5vSMgtsZmpVDnvW6Kwg7r/bhfSvkiFR
4m1InDdaw2lz3dbz2EfH2ios8UI4BejhuUxs4nRoRG8b5l2dvK46eHRTSzbzqf9p
MQP2fr9f5i0wu0d+dob2TvoD2+CauU67alx6F4GPei3JDzTtBZARYa/HEiCcpF5m
aiGtYyrG7btb+AKYzEQov4bzjIxXS0J0r/s0rPQeHVu/NbgcFT5wHSYcn4hB/i9N
GjMoV3rsw6mjVn0Ibv+ZeFHU6+OHEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMee
A2pYHmrEoLPKPLu5hzQlUDy/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDBERjY5RTc1RTAxMUYxOUI4OEYyRjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcATMA0GCSqGSIb3DQEBCwUA
A4IBAQB9ONo9CLNKaXnUjD2sJ9amD3Rulc2HLeeMqtnQhvDbK3qFJRX3An+8QtnN
K90E3crqHieG2vPOlTEwbQK7trX5/qE/in5/UlGWogZKzYegHIPW/P62Wt593Km+
O6pC6Bp/j+QYZrsYMyuWVGT2YN85GjsPhvC024bks86DRH3BBrkn3sL0D21dujXx
73Lw5LTJfeO7E4bhNPZV0VgQRtcAahyvg6ST2nUaVWn9WpuJQd/TJPDtIcmQu7dt
fWqFZlK2aLH6DbfH1vO2oEhdEkR1SEdVbvpoUGDww5wfxnOaCqjUC1mxqG3cMlQm
RQbsC1zRYNGPbt7uiGNfW+9vmrG0
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:45 2026 by rpki-client