Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C4A84C640311F18E5ACD16CF1D38B0.roa
File: D7C4A84C640311F18E5ACD16CF1D38B0.roa (raw, json)
Hash identifier: gowaMjxbW+EgVcAm3TqNKekgSS2coKXd+tlzfobcAcE=
Subject key identifier: 43:41:6F:35:CE:BB:24:4F:56:AC:AB:71:85:C9:BF:8C:20:81:F9:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C4A84C640311F18E5ACD16CF1D38B0.roa
Signing time: Tue 09 Jun 2026 13:05:10 +0000
ROA not before: Tue 09 Jun 2026 13:05:03 +0000
ROA not after: Wed 08 Jul 2026 13:05:03 +0000
asID: 147176
IP address blocks: 45.195.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113793 (0x1bc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 13:05:03 2026 GMT
Not After : Jul 8 13:05:03 2026 GMT
Subject: CN=6a280f85-fef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:04:91:bd:b1:be:f1:c7:b5:ad:7b:0e:39:
3f:e2:a2:63:a6:9c:b9:62:e2:5e:33:65:21:18:e8:
d8:03:f4:f9:5e:a7:24:26:99:36:12:21:e1:c1:70:
54:32:09:93:63:90:de:49:f4:43:b4:ba:a6:01:1c:
7b:ba:ed:16:7d:95:8e:b6:56:ac:84:37:52:ca:6e:
4f:b4:f8:27:47:b4:d3:e3:1f:3a:25:1a:16:e4:13:
2f:05:1e:45:fe:16:32:78:fc:fa:ba:2b:c0:69:5c:
a3:8b:cb:c2:18:78:ea:86:5a:2f:73:da:ed:66:81:
25:28:dd:3a:f4:8e:d4:d2:81:2d:81:4f:51:29:c3:
e2:3f:99:f6:48:2d:75:9f:78:af:96:39:60:1a:f0:
9e:e6:0b:03:d7:69:d1:e2:db:3f:76:c9:01:34:80:
8b:a2:01:8b:22:85:e0:f1:09:f2:15:80:0a:12:25:
51:a7:a0:22:37:8b:b4:2d:cb:2d:cf:88:39:98:80:
2c:31:08:63:fe:f7:56:e4:ea:56:45:25:f9:9c:1c:
18:9a:44:e3:8f:1a:be:3e:07:a3:af:89:00:59:62:
f5:6d:16:43:db:e2:50:8a:b2:2d:e9:f7:1a:5f:53:
f8:40:0e:62:11:db:0e:a3:fa:9e:8c:da:c3:e7:cd:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:6F:35:CE:BB:24:4F:56:AC:AB:71:85:C9:BF:8C:20:81:F9:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C4A84C640311F18E5ACD16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c2:41:cb:ed:9c:03:a6:33:4f:8f:0e:2f:63:49:f7:47:4c:
72:fe:13:46:d5:a0:b4:cc:9a:45:79:6d:9f:a6:56:9b:ca:42:
51:ae:de:96:c7:44:06:36:7d:40:77:d5:29:18:cf:9a:a5:00:
68:27:27:f1:07:0f:81:da:b6:c1:10:84:22:01:02:1d:5b:ac:
3b:f9:88:68:0c:66:06:43:0f:5d:ec:d4:c6:4b:75:d6:bd:9c:
a3:42:aa:bf:f2:1b:af:c1:e3:d9:6e:2d:d9:dd:1b:da:2d:dd:
83:b3:5c:06:af:7f:84:84:de:5f:64:ee:41:50:0d:93:77:3b:
18:f4:ec:24:01:71:32:64:47:c5:e3:65:4d:dd:5a:71:b3:8c:
26:30:fa:29:0a:b9:b5:10:11:34:67:ef:ca:26:4f:1c:80:30:
55:2e:67:b3:db:56:2d:a9:eb:6c:e4:0f:36:fd:18:e9:d1:04:
a2:8b:3d:82:00:09:87:61:81:1c:32:a2:ec:eb:ea:41:04:f1:
5c:e9:b9:db:c4:b1:27:b5:e4:c5:de:65:7d:59:10:1d:ea:5c:
80:63:ba:61:d4:c6:44:72:11:50:57:57:2c:20:95:e6:db:96:
f3:da:38:f2:59:cc:72:12:2d:f8:ef:d8:18:f6:0a:18:01:5b:
7b:be:20:dc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbyBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjA5MTMwNTAzWhcNMjYwNzA4MTMwNTAzWjAYMRYw
FAYDVQQDEw02YTI4MGY4NS1mZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtIAEkb2xvvHHta17Djk/4qJjppy5YuJeM2UhGOjYA/T5XqckJpk2EiHh
wXBUMgmTY5DeSfRDtLqmARx7uu0WfZWOtlashDdSym5PtPgnR7TT4x86JRoW5BMv
BR5F/hYyePz6uivAaVyji8vCGHjqhlovc9rtZoElKN069I7U0oEtgU9RKcPiP5n2
SC11n3ivljlgGvCe5gsD12nR4ts/dskBNICLogGLIoXg8QnyFYAKEiVRp6AiN4u0
Lcstz4g5mIAsMQhj/vdW5OpWRSX5nBwYmkTjjxq+Pgejr4kAWWL1bRZD2+JQirIt
6fcaX1P4QA5iEdsOo/qejNrD580AtQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFENB
bzXOuyRPVqyrcYXJv4wggfkjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EN0M0QTg0QzY0MDMxMUYxOEU1QUNEMTZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOYMA0GCSqGSIb3DQEBCwUA
A4IBAQB0wkHL7ZwDpjNPjw4vY0n3R0xy/hNG1aC0zJpFeW2fplabykJRrt6Wx0QG
Nn1Ad9UpGM+apQBoJyfxBw+B2rbBEIQiAQIdW6w7+YhoDGYGQw9d7NTGS3XWvZyj
Qqq/8huvwePZbi3Z3RvaLd2Ds1wGr3+EhN5fZO5BUA2TdzsY9OwkAXEyZEfF42VN
3Vpxs4wmMPopCrm1EBE0Z+/KJk8cgDBVLmez21Ytqets5A82/Rjp0QSiiz2CAAmH
YYEcMqLs6+pBBPFc6bnbxLEnteTF3mV9WRAd6lyAY7ph1MZEchFQV1csIJXm25bz
2jjyWcxyEi3479gY9goYAVt7viDc
-----END CERTIFICATE-----
Generated at Wed Jun 10 04:59:41 2026 by rpki-client