Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE67258E5D9711F18735370FCF1D38B0.roa
File: DE67258E5D9711F18735370FCF1D38B0.roa (raw, json)
Hash identifier: HpVF/HEz4RHgRM+iFb43bx3eG+/PI9wbJ5fMGcFQ4uI=
Subject key identifier: 75:28:8C:40:E3:4F:8D:5C:34:33:D4:DF:38:44:78:41:36:46:52:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE67258E5D9711F18735370FCF1D38B0.roa
Signing time: Mon 01 Jun 2026 08:57:08 +0000
ROA not before: Mon 01 Jun 2026 08:57:03 +0000
ROA not after: Fri 18 Jun 2027 08:57:03 +0000
asID: 395886
IP address blocks: 45.205.4.0/24 maxlen: 24
45.205.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113451 (0x1bb2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 08:57:03 2026 GMT
Not After : Jun 18 08:57:03 2027 GMT
Subject: CN=6a1d4964-4e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:07:fc:37:ed:48:39:e0:e5:16:d7:f4:d0:
f1:eb:3b:0d:8b:e2:df:7e:5b:16:ee:df:ea:1d:9f:
15:6e:42:d4:fa:cb:9f:b2:a4:04:2b:92:c7:a6:75:
ad:ae:64:0d:9d:0f:c4:c5:30:f4:19:5e:6f:4d:e8:
39:d9:36:c3:a2:e8:bd:11:25:a6:19:85:87:fb:f7:
d0:e0:3d:f4:d0:eb:de:93:5f:4e:84:83:cd:17:d3:
c5:8b:6b:ea:7e:af:e7:e0:3b:63:29:17:7d:13:98:
8c:4d:38:41:02:e1:df:c7:7a:2c:26:4b:8a:25:9e:
20:c9:33:10:44:5c:00:15:ce:6a:f3:31:8f:0b:a1:
1a:89:fd:84:cf:7f:f3:17:fc:b9:66:6b:80:b2:13:
3b:7d:0a:e5:e3:7e:8d:6f:49:09:b0:00:42:9f:5c:
af:86:ec:93:cf:9b:fc:fb:6b:86:17:72:5e:c5:14:
51:ce:0d:92:4b:08:af:62:24:a4:db:23:85:71:b2:
78:6c:5a:74:58:19:52:cc:ad:a5:6e:42:87:59:11:
2b:fa:65:3b:3a:f7:e4:c5:3e:ed:e2:be:7d:8e:36:
12:9e:f6:f3:fc:cb:42:30:87:a6:86:d3:14:ed:1e:
78:b0:ed:43:f1:63:fd:c2:a6:2f:27:4b:b1:bb:65:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:8C:40:E3:4F:8D:5C:34:33:D4:DF:38:44:78:41:36:46:52:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE67258E5D9711F18735370FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.4.0/23
Signature Algorithm: sha256WithRSAEncryption
82:fd:70:4f:c1:1f:4c:1e:9b:ee:c3:80:5a:b7:76:f6:f0:66:
18:60:80:88:45:45:ca:3e:fd:1f:7e:21:bb:23:5c:3a:08:ad:
4c:22:5e:df:5d:17:f0:db:ca:34:42:e9:f8:0a:14:aa:b9:d9:
7e:40:03:32:c4:71:7f:61:3f:01:81:e2:52:fe:88:cc:c4:97:
12:c8:af:d9:80:bb:fa:a2:06:9d:cf:37:d3:64:05:1d:ef:6a:
f9:f2:b8:69:a5:85:a2:a7:51:44:4b:d5:6c:30:17:00:b2:d7:
12:79:48:1b:32:ff:ad:f1:73:1d:42:f6:f1:6f:aa:35:91:b8:
7d:0d:d5:14:ad:4a:d3:e0:64:bf:34:98:36:ae:6a:48:12:ea:
8f:f2:e1:f3:d9:dd:8c:1e:fd:64:f2:1c:7b:86:6b:62:f2:b6:
c7:bd:87:77:db:7a:37:d3:43:51:a5:c7:05:db:ea:ed:ff:c7:
27:32:84:8a:0c:3c:1c:eb:37:10:f2:20:e4:92:b8:b8:0a:3f:
0d:ba:47:83:bb:69:9e:34:1d:03:55:fd:f0:91:2e:de:ec:55:
2f:81:3d:1c:ab:ac:18:ef:30:46:87:db:e7:e0:85:06:04:8c:
8b:2c:5b:2d:c9:bc:1a:68:6a:3e:0c:91:aa:0d:ab:e0:56:53:
6f:46:2c:e6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbsrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjAxMDg1NzAzWhcNMjcwNjE4MDg1NzAzWjAYMRYw
FAYDVQQDEw02YTFkNDk2NC00ZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyc4H/DftSDng5RbX9NDx6zsNi+LfflsW7t/qHZ8VbkLU+sufsqQEK5LH
pnWtrmQNnQ/ExTD0GV5vTeg52TbDoui9ESWmGYWH+/fQ4D300Ovek19OhIPNF9PF
i2vqfq/n4DtjKRd9E5iMTThBAuHfx3osJkuKJZ4gyTMQRFwAFc5q8zGPC6Eaif2E
z3/zF/y5ZmuAshM7fQrl436Nb0kJsABCn1yvhuyTz5v8+2uGF3JexRRRzg2SSwiv
YiSk2yOFcbJ4bFp0WBlSzK2lbkKHWREr+mU7OvfkxT7t4r59jjYSnvbz/MtCMIem
htMU7R54sO1D8WP9wqYvJ0uxu2Vx6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHUo
jEDjT41cNDPU3zhEeEE2RlIoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERTY3MjU4RTVEOTcxMUYxODczNTM3MEZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc0EMA0GCSqGSIb3DQEBCwUA
A4IBAQCC/XBPwR9MHpvuw4Bat3b28GYYYICIRUXKPv0ffiG7I1w6CK1MIl7fXRfw
28o0Qun4ChSqudl+QAMyxHF/YT8BgeJS/ojMxJcSyK/ZgLv6ogadzzfTZAUd72r5
8rhppYWip1FES9VsMBcAstcSeUgbMv+t8XMdQvbxb6o1kbh9DdUUrUrT4GS/NJg2
rmpIEuqP8uHz2d2MHv1k8hx7hmti8rbHvYd323o300NRpccF2+rt/8cnMoSKDDwc
6zcQ8iDkkri4Cj8NukeDu2meNB0DVf3wkS7e7FUvgT0cq6wY7zBGh9vn4IUGBIyL
LFstybwaaGo+DJGqDavgVlNvRizm
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:19 2026 by rpki-client