Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCB8064A3E6611F181E041ACCE1D38B0.roa
File: DCB8064A3E6611F181E041ACCE1D38B0.roa (raw, json)
Hash identifier: uZT8dCrwH2MjJP1L7bd9PFJVQg3Brh0rD+UTSg1M1ck=
Subject key identifier: EA:28:B8:21:0E:8A:33:47:F7:CC:BD:66:7E:32:AA:FE:5E:D9:12:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCB8064A3E6611F181E041ACCE1D38B0.roa
Signing time: Wed 22 Apr 2026 16:18:14 +0000
ROA not before: Wed 22 Apr 2026 16:18:09 +0000
ROA not after: Sun 31 May 2026 16:18:09 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110139 (0x1ae3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 16:18:09 2026 GMT
Not After : May 31 16:18:09 2026 GMT
Subject: CN=69e8f4c6-16c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:d5:e5:cb:c3:69:e0:93:1c:55:c9:14:89:
f5:2a:65:c8:48:fd:3e:71:7d:d2:80:38:8a:69:e1:
8b:68:71:ef:7a:40:e8:8c:6e:4f:0b:00:62:44:7b:
c3:bb:57:64:d6:00:a1:81:1d:b5:9f:5b:6c:ea:f8:
a3:c6:9f:62:e7:1c:58:88:0e:c4:58:ed:38:e9:f8:
f7:e2:ff:f0:a9:ce:d8:71:89:93:7d:46:4b:f9:c6:
33:a2:b3:56:bc:b3:71:7b:fa:ea:43:3b:f9:d9:10:
ae:39:0d:be:7c:31:91:7a:d9:68:d2:95:5f:e6:27:
24:ca:15:b8:6f:56:ea:ec:8d:42:fe:57:7a:c6:e1:
57:68:3e:3d:69:a2:0b:5f:7c:2a:03:3a:58:0c:99:
26:05:97:84:82:f4:29:18:f0:f9:49:dd:5c:f6:59:
e4:c4:ac:f7:33:6e:6f:40:e5:7a:63:8d:59:54:ac:
51:dc:f9:cb:a9:9c:e2:c7:dc:7f:5e:b1:b2:17:f8:
c3:bc:35:bf:33:57:10:26:59:5b:da:76:04:99:c3:
ca:c1:2a:9c:1f:c3:22:73:c8:06:da:f0:1f:82:ac:
4c:b8:67:30:df:0c:fd:07:0c:35:a9:a4:de:d4:9e:
11:be:48:b6:22:0c:f8:66:f9:2c:75:01:e2:81:81:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:B8:21:0E:8A:33:47:F7:CC:BD:66:7E:32:AA:FE:5E:D9:12:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCB8064A3E6611F181E041ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
81:b4:dc:f6:8a:d0:f9:e9:b8:2e:88:a9:f0:7d:36:0a:d7:d2:
6b:4a:1f:05:d6:81:fe:7e:16:38:32:b9:6d:5a:de:a2:fb:2c:
5d:36:07:a7:cf:92:8f:59:30:1a:cd:c5:73:cd:d9:c9:24:77:
1f:0b:33:c8:9d:9b:fb:a6:34:ff:d0:4d:64:4b:ad:32:9f:5c:
a8:f0:9d:fe:39:9d:ae:b0:93:c9:0d:a3:74:49:c0:e4:dd:a7:
00:8b:a2:a4:4a:58:33:77:04:cb:58:e4:7a:4c:d4:70:03:f9:
22:44:08:41:b3:06:51:54:3b:e2:d6:62:3b:e9:32:82:6b:78:
c4:b8:0d:5b:a7:a5:4e:50:b8:ad:27:8f:8d:d3:5f:e2:02:c4:
9e:c5:71:86:59:f5:3d:c8:7c:5c:58:8b:2e:cd:0b:60:a5:9f:
a5:45:ce:ca:80:2a:2a:8d:77:56:8e:03:ab:4e:e0:60:ed:e7:
5c:58:f8:f7:cd:05:c3:03:43:05:e3:20:0a:d8:e1:b0:0d:d6:
08:02:a8:cb:98:b1:8d:05:ac:28:ca:1b:8f:da:2a:83:32:72:
6c:ad:35:b0:bb:e2:ea:32:05:b9:71:cb:98:99:a8:b1:e1:e8:
36:12:4e:dd:45:4b:45:58:e8:d8:03:07:19:79:3f:8f:4e:53:
27:2d:0d:4a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAa47MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMTYxODA5WhcNMjYwNTMxMTYxODA5WjAYMRYw
FAYDVQQDEw02OWU4ZjRjNi0xNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArSbV5cvDaeCTHFXJFIn1KmXISP0+cX3SgDiKaeGLaHHvekDojG5PCwBi
RHvDu1dk1gChgR21n1ts6vijxp9i5xxYiA7EWO046fj34v/wqc7YcYmTfUZL+cYz
orNWvLNxe/rqQzv52RCuOQ2+fDGRetlo0pVf5ickyhW4b1bq7I1C/ld6xuFXaD49
aaILX3wqAzpYDJkmBZeEgvQpGPD5Sd1c9lnkxKz3M25vQOV6Y41ZVKxR3PnLqZzi
x9x/XrGyF/jDvDW/M1cQJllb2nYEmcPKwSqcH8Mic8gG2vAfgqxMuGcw3wz9Bww1
qaTe1J4Rvki2Igz4ZvksdQHigYHZswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOoo
uCEOijNH98y9Zn4yqv5e2RJ0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQ0I4MDY0QTNFNjYxMUYxODFFMDQxQUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc+AMA0GCSqGSIb3DQEBCwUA
A4IBAQCBtNz2itD56bguiKnwfTYK19JrSh8F1oH+fhY4MrltWt6i+yxdNgenz5KP
WTAazcVzzdnJJHcfCzPInZv7pjT/0E1kS60yn1yo8J3+OZ2usJPJDaN0ScDk3acA
i6KkSlgzdwTLWOR6TNRwA/kiRAhBswZRVDvi1mI76TKCa3jEuA1bp6VOULitJ4+N
01/iAsSexXGGWfU9yHxcWIsuzQtgpZ+lRc7KgCoqjXdWjgOrTuBg7edcWPj3zQXD
A0MF4yAK2OGwDdYIAqjLmLGNBawoyhuP2iqDMnJsrTWwu+LqMgW5ccuYmaix4eg2
Ek7dRUtFWOjYAwcZeT+PTlMnLQ1K
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:38 2026 by rpki-client