Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4CB8E70543C11F191509118CF1D38B0.roa
File: D4CB8E70543C11F191509118CF1D38B0.roa (raw, json)
Hash identifier: K1GcIh8iDdIhlLLdX70I7sFMhi4jXpWaxAq8nP1mipU=
Subject key identifier: F2:DD:19:54:09:69:90:72:79:40:E1:3B:D5:E4:42:74:71:25:96:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B636
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4CB8E70543C11F191509118CF1D38B0.roa
Signing time: Wed 20 May 2026 11:12:47 +0000
ROA not before: Wed 20 May 2026 11:12:42 +0000
ROA not after: Sat 08 Aug 2026 11:12:42 +0000
asID: 150706
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112182 (0x1b636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:12:42 2026 GMT
Not After : Aug 8 11:12:42 2026 GMT
Subject: CN=6a0d972f-886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:9c:96:5c:88:80:18:87:84:79:ea:95:85:
0e:f0:5a:15:8e:21:23:55:80:54:6e:e2:9a:63:14:
43:19:b4:af:2d:92:e5:ee:fc:ed:e5:54:3f:16:ec:
a9:5e:16:a5:bc:04:43:4b:51:cb:06:86:87:32:65:
8b:df:09:95:f6:2e:49:69:cc:de:14:41:67:06:61:
d4:ca:bd:e7:5d:b1:83:4e:a8:2f:4e:00:09:6e:29:
01:0e:a9:2d:67:a3:68:c1:06:af:8e:b3:c8:1e:a9:
25:8a:12:64:36:e2:93:b9:dd:6b:39:94:a4:eb:a4:
56:4d:c4:7c:d6:5a:fd:61:b3:6b:9d:17:e8:18:16:
0a:18:8f:43:46:08:c8:55:25:6a:5b:6b:dd:88:73:
36:4d:a1:88:46:c6:29:ca:91:fd:94:d8:e6:a0:bf:
03:e8:74:9f:dc:8e:2d:06:c1:3c:e9:da:e9:13:a9:
fd:78:5f:5b:d0:02:dd:05:ec:62:9f:6e:65:d9:b0:
fe:d3:2f:88:08:35:cc:0c:be:44:05:5b:a3:08:dc:
e9:99:a7:dc:84:dd:d7:21:e1:de:52:64:f1:e1:ac:
0f:38:d9:23:9f:2f:86:44:68:78:06:97:24:d7:19:
72:a4:cf:c2:05:f2:8b:db:44:cc:7d:5f:12:da:8c:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:19:54:09:69:90:72:79:40:E1:3B:D5:E4:42:74:71:25:96:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4CB8E70543C11F191509118CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
a1:41:c7:6c:e7:e6:87:43:6e:51:a6:e8:2c:e2:6f:54:80:ae:
78:81:71:92:32:6d:41:ba:04:64:23:9e:a1:e6:26:81:cb:ef:
b1:38:b1:cf:39:db:05:1d:47:08:1d:6d:df:12:68:d2:cd:f5:
8b:ea:6a:93:a5:f3:e0:a2:98:2b:75:96:7e:09:ae:79:da:ae:
b0:f7:d3:b0:93:a0:2c:0a:a5:d2:98:fb:93:61:d9:80:d9:cd:
1a:a5:76:25:52:45:90:35:77:d4:c1:fe:1b:3d:79:98:b9:4f:
05:87:cf:21:8e:d5:e3:85:2a:98:1d:72:b0:b8:f1:cf:71:4a:
df:4a:3b:f4:8a:40:49:2c:5e:a1:fc:f0:1f:96:24:18:0f:a1:
ac:4e:4d:1b:2c:65:47:03:6f:99:29:fd:7d:a7:00:23:d0:a9:
2a:5e:43:26:c1:9c:1c:34:0c:f7:af:ca:eb:07:25:ac:fc:18:
98:87:c6:4a:71:8a:44:a2:f2:17:60:6e:ae:ad:55:ee:62:f1:
38:70:24:86:5c:97:71:52:53:98:3e:d9:a5:63:d5:0a:85:2f:
12:53:b0:8f:a4:b5:18:af:52:a7:d1:fb:5b:f9:d9:e6:1b:8c:
88:73:1e:fa:8d:28:5f:c3:7a:e3:e7:6a:74:5b:0a:6a:91:c0:
41:e4:47:6b
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAbY2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIwMTExMjQyWhcNMjYwODA4MTExMjQyWjAYMRYw
FAYDVQQDEw02YTBkOTcyZi04ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuNScllyIgBiHhHnqlYUO8FoVjiEjVYBUbuKaYxRDGbSvLZLl7vzt5VQ/
FuypXhalvARDS1HLBoaHMmWL3wmV9i5JaczeFEFnBmHUyr3nXbGDTqgvTgAJbikB
DqktZ6NowQavjrPIHqklihJkNuKTud1rOZSk66RWTcR81lr9YbNrnRfoGBYKGI9D
RgjIVSVqW2vdiHM2TaGIRsYpypH9lNjmoL8D6HSf3I4tBsE86drpE6n9eF9b0ALd
Bexin25l2bD+0y+ICDXMDL5EBVujCNzpmafchN3XIeHeUmTx4awPONkjny+GRGh4
Bpck1xlypM/CBfKL20TMfV8S2ow+iwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPLd
GVQJaZByeUDhO9XkQnRxJZaBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENENCOEU3MDU0M0MxMUYxOTE1MDkxMThDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLcCgMAwDBAItwKwDBAYtwIAw
DQYJKoZIhvcNAQELBQADggEBAKFBx2zn5odDblGm6Czib1SArniBcZIybUG6BGQj
nqHmJoHL77E4sc852wUdRwgdbd8SaNLN9YvqapOl8+CimCt1ln4JrnnarrD307CT
oCwKpdKY+5Nh2YDZzRqldiVSRZA1d9TB/hs9eZi5TwWHzyGO1eOFKpgdcrC48c9x
St9KO/SKQEksXqH88B+WJBgPoaxOTRssZUcDb5kp/X2nACPQqSpeQybBnBw0DPev
yusHJaz8GJiHxkpxikSi8hdgbq6tVe5i8ThwJIZcl3FSU5g+2aVj1QqFLxJTsI+k
tRivUqfR+1v52eYbjIhzHvqNKF/DeuPnanRbCmqRwEHkR2s=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:27 2026 by rpki-client