Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBCDFFA691F11F1A1458710CF1D38B0.roa
File: DDBCDFFA691F11F1A1458710CF1D38B0.roa (raw, json)
Hash identifier: GU1huEiG8RDoKguPjc97wR0biIXCTIhLiMYP+P1Thnk=
Subject key identifier: D8:44:19:CD:0C:7D:C8:6A:20:67:D9:B4:95:A3:8A:87:08:57:C0:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBCDFFA691F11F1A1458710CF1D38B0.roa
Signing time: Tue 16 Jun 2026 01:08:21 +0000
ROA not before: Tue 16 Jun 2026 01:08:16 +0000
ROA not after: Sun 19 Jul 2026 01:08:16 +0000
asID: 11404
IP address blocks: 45.205.240.0/20 maxlen: 24
45.206.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114089 (0x1bda9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 01:08:16 2026 GMT
Not After : Jul 19 01:08:16 2026 GMT
Subject: CN=6a30a205-3b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:86:80:d6:0e:a4:1a:d3:2e:91:96:17:18:
eb:df:02:81:2c:99:3b:41:b3:5d:c4:8b:35:73:6c:
00:6f:37:4c:97:e0:82:35:91:ad:ad:98:02:2b:d7:
de:68:dd:89:e5:86:53:ee:c7:cc:f5:db:7e:61:c1:
f8:af:2d:e1:ec:18:fc:0f:c4:d1:2a:3e:b8:ab:59:
cb:6f:65:81:78:68:51:28:ae:59:52:ae:5d:89:74:
22:52:79:64:e3:04:01:7e:4a:af:e8:f5:f6:db:02:
2b:ac:06:4d:a5:11:34:06:b1:7c:93:4c:f2:d8:b9:
db:0f:fd:54:da:11:12:73:46:f7:0f:23:d4:23:66:
03:ef:a8:c0:68:98:e2:b5:72:3d:69:cc:05:73:68:
af:3a:06:0a:44:cf:1a:03:6a:a0:c6:01:6d:6e:0c:
92:7f:b2:1b:5b:e4:f3:b7:c6:d2:99:26:4d:6a:c0:
31:b4:74:d0:0a:9b:04:9b:49:b2:52:0b:ae:66:23:
9b:79:42:c9:34:fe:d2:ec:a5:54:0c:b9:7b:b8:99:
7b:e6:5f:2e:f4:bf:7c:4c:43:7c:a2:d7:c3:02:d4:
ef:3c:ca:72:5c:37:82:2e:10:55:1e:cb:3b:06:ec:
c5:fa:88:88:5b:d6:2b:56:13:05:87:6b:b9:81:d6:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:19:CD:0C:7D:C8:6A:20:67:D9:B4:95:A3:8A:87:08:57:C0:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBCDFFA691F11F1A1458710CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.240.0/20
45.206.192.0/18
Signature Algorithm: sha256WithRSAEncryption
22:17:fe:c8:95:fa:c8:44:6e:8c:89:ea:05:d2:b3:ec:78:4b:
a1:4d:d7:48:96:82:79:2a:ce:5d:49:19:82:b7:3f:3a:3d:19:
cc:7a:75:0d:3c:4c:4d:b6:66:90:c8:9c:b4:6a:cc:0c:1a:08:
0e:f2:02:e9:53:1b:55:2b:8d:e4:13:d8:5d:52:4f:c7:9b:4d:
08:5a:c7:a2:3f:1a:16:13:13:43:a9:d2:71:4a:aa:5a:1d:bd:
20:1a:6b:54:fa:63:36:00:f4:29:11:7f:27:bd:9a:6e:60:76:
f3:e6:3d:1a:05:a3:dd:43:ef:5d:f5:86:10:d7:bc:5b:92:65:
9f:42:b9:e0:bb:cf:87:4c:91:24:9f:e4:44:4c:a5:41:fe:b9:
ef:55:12:9d:e1:e3:37:aa:9c:60:7e:d3:ed:2a:50:ad:c2:26:
2f:a0:c0:50:92:0c:53:a7:66:77:81:9d:76:b4:8a:d2:d8:1e:
c2:39:89:a9:20:0b:18:0b:7e:01:c5:02:c2:81:08:05:7c:b1:
41:38:2b:46:58:d0:70:a7:4e:ee:d4:5c:60:b8:71:c9:83:7b:
0e:95:86:66:fe:51:97:da:dd:e8:e4:73:90:c0:3b:7d:e6:ea:
42:71:d2:18:77:47:f9:db:28:55:7a:66:7f:dc:10:45:29:e0:
6e:ff:cd:1b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAb2pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE2MDEwODE2WhcNMjYwNzE5MDEwODE2WjAYMRYw
FAYDVQQDEw02YTMwYTIwNS0zYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1CGGgNYOpBrTLpGWFxjr3wKBLJk7QbNdxIs1c2wAbzdMl+CCNZGtrZgC
K9feaN2J5YZT7sfM9dt+YcH4ry3h7Bj8D8TRKj64q1nLb2WBeGhRKK5ZUq5diXQi
Unlk4wQBfkqv6PX22wIrrAZNpRE0BrF8k0zy2LnbD/1U2hESc0b3DyPUI2YD76jA
aJjitXI9acwFc2ivOgYKRM8aA2qgxgFtbgySf7IbW+Tzt8bSmSZNasAxtHTQCpsE
m0myUguuZiObeULJNP7S7KVUDLl7uJl75l8u9L98TEN8otfDAtTvPMpyXDeCLhBV
Hss7BuzF+oiIW9YrVhMFh2u5gdb5JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhE
Gc0MfchqIGfZtJWjiocIV8AtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EREJDREZGQTY5MUYxMUYxQTE0NTg3MTBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELc3wAwQGLc7AMA0GCSqGSIb3
DQEBCwUAA4IBAQAiF/7IlfrIRG6MieoF0rPseEuhTddIloJ5Ks5dSRmCtz86PRnM
enUNPExNtmaQyJy0aswMGggO8gLpUxtVK43kE9hdUk/Hm00IWseiPxoWExNDqdJx
SqpaHb0gGmtU+mM2APQpEX8nvZpuYHbz5j0aBaPdQ+9d9YYQ17xbkmWfQrngu8+H
TJEkn+RETKVB/rnvVRKd4eM3qpxgftPtKlCtwiYvoMBQkgxTp2Z3gZ12tIrS2B7C
OYmpIAsYC34BxQLCgQgFfLFBOCtGWNBwp07u1FxguHHJg3sOlYZm/lGX2t3o5HOQ
wDt95upCcdIYd0f52yhVemZ/3BBFKeBu/80b
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:38 2026 by rpki-client