Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF325188720E11F189A039B6CE1D38B0.roa
File: DF325188720E11F189A039B6CE1D38B0.roa (raw, json)
Hash identifier: kSCZ1xok1FO3U+gDHyNpkXP5xkVGIuV6kua8RQTD9ME=
Subject key identifier: 0F:AB:95:E3:58:69:E0:AA:B6:38:7F:57:25:72:FA:E9:44:FE:30:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF325188720E11F189A039B6CE1D38B0.roa
Signing time: Sat 27 Jun 2026 09:59:23 +0000
ROA not before: Sat 27 Jun 2026 09:59:18 +0000
ROA not after: Tue 04 Aug 2026 09:59:18 +0000
asID: 61112
IP address blocks: 45.207.34.0/23 maxlen: 24
45.207.40.0/24 maxlen: 24
45.207.41.0/24 maxlen: 24
45.207.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114924 (0x1c0ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 09:59:18 2026 GMT
Not After : Aug 4 09:59:18 2026 GMT
Subject: CN=6a3f9efb-f63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:bc:cb:ff:fc:46:80:fe:f9:ca:01:cc:38:
a3:98:69:c0:d0:7e:7c:70:1f:b0:b6:9a:a6:b5:8f:
10:9a:3d:04:dd:64:23:cc:71:42:9f:25:bd:42:a2:
2e:bc:96:49:87:fe:eb:38:42:3b:32:c5:ee:1f:96:
42:74:87:3e:f1:76:95:09:e3:a7:fd:cd:1e:43:a5:
f8:36:90:76:c9:24:27:31:35:be:81:1d:d7:e2:0f:
c3:2c:34:2a:02:73:b2:d1:5f:55:4d:ea:a8:bb:18:
9b:0a:ff:4f:8e:cf:bf:94:81:90:b7:35:3e:e2:bd:
3d:bc:67:ff:86:ed:5b:bc:1c:96:4b:b1:22:62:f9:
74:36:b2:98:56:9c:05:c4:1b:ff:82:02:42:3c:92:
cb:fd:08:af:9e:24:9f:9d:01:fb:b0:5c:7e:3b:33:
40:20:6a:17:50:20:5e:d3:de:93:36:87:eb:f5:bf:
64:e6:bd:a1:c8:f7:af:6e:fc:92:c5:e8:2d:4a:7b:
d6:a9:c9:3e:93:56:96:d5:39:a1:de:16:4d:6f:e4:
6c:0b:21:03:d4:15:31:2c:d6:b2:cd:5a:38:3e:2c:
38:8d:82:b5:ec:5b:d7:6a:4a:c9:40:eb:93:65:e8:
65:4f:ac:e3:eb:36:0e:b9:d6:04:04:e3:23:de:92:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:95:E3:58:69:E0:AA:B6:38:7F:57:25:72:FA:E9:44:FE:30:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF325188720E11F189A039B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.34.0/23
45.207.40.0/23
45.207.59.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f7:e0:1a:68:cf:62:57:33:a6:1b:06:7c:3a:d8:94:90:c1:
0e:7c:09:f6:af:6d:3b:c5:88:88:2b:bd:cd:03:05:b0:4e:69:
d7:0e:1d:3a:2d:c6:41:4c:78:b0:22:f9:d4:db:6a:19:f0:32:
35:b3:27:39:00:da:07:8a:cc:87:93:87:62:af:28:73:e4:61:
e7:60:b4:8b:6e:9b:12:fc:70:ae:1d:c2:70:6e:ef:29:bf:91:
87:b3:37:54:3c:19:07:73:90:68:6d:0c:e0:36:0f:a6:cc:ad:
94:c1:83:b7:90:0d:e5:60:23:ab:bc:c5:6a:b4:d5:24:75:36:
e0:88:9b:97:78:c1:6e:37:4e:21:fc:81:b5:be:be:03:1a:fe:
5c:0a:f8:82:9c:6c:b7:c4:28:b6:62:15:9d:0d:d4:33:ba:35:
33:d3:de:fe:d8:a5:e5:62:7d:0e:9c:ba:17:7e:f1:8e:75:e9:
8e:d7:d0:46:d0:9f:d7:24:9e:b3:76:90:e8:d5:03:5f:6f:95:
8a:34:d6:ea:88:5c:c6:f5:e7:6a:23:71:6f:03:aa:ed:a2:45:
61:6d:ae:e5:af:a9:d3:72:64:c3:95:b3:d1:7f:36:db:78:ab:
59:36:82:20:56:12:4c:61:70:ba:78:cf:9a:0e:9b:f9:b4:31:
c5:6f:3c:05
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAcDsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI3MDk1OTE4WhcNMjYwODA0MDk1OTE4WjAYMRYw
FAYDVQQDEw02YTNmOWVmYi1mNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxf28y//8RoD++coBzDijmGnA0H58cB+wtpqmtY8Qmj0E3WQjzHFCnyW9
QqIuvJZJh/7rOEI7MsXuH5ZCdIc+8XaVCeOn/c0eQ6X4NpB2ySQnMTW+gR3X4g/D
LDQqAnOy0V9VTeqouxibCv9Pjs+/lIGQtzU+4r09vGf/hu1bvByWS7EiYvl0NrKY
VpwFxBv/ggJCPJLL/QivniSfnQH7sFx+OzNAIGoXUCBe096TNofr9b9k5r2hyPev
bvySxegtSnvWqck+k1aW1Tmh3hZNb+RsCyED1BUxLNayzVo4Piw4jYK17FvXakrJ
QOuTZehlT6zj6zYOudYEBOMj3pJ66QIDAQABo4ICrjCCAqowHQYDVR0OBBYEFA+r
leNYaeCqtjh/VyVy+ulE/jBAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERjMyNTE4ODcyMEUxMUYxODlBMDM5QjZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLc8iAwQBLc8oAwQALc87MA0G
CSqGSIb3DQEBCwUAA4IBAQBn9+AaaM9iVzOmGwZ8OtiUkMEOfAn2r207xYiIK73N
AwWwTmnXDh06LcZBTHiwIvnU22oZ8DI1syc5ANoHisyHk4diryhz5GHnYLSLbpsS
/HCuHcJwbu8pv5GHszdUPBkHc5BobQzgNg+mzK2UwYO3kA3lYCOrvMVqtNUkdTbg
iJuXeMFuN04h/IG1vr4DGv5cCviCnGy3xCi2YhWdDdQzujUz097+2KXlYn0OnLoX
fvGOdemO19BG0J/XJJ6zdpDo1QNfb5WKNNbqiFzG9edqI3FvA6rtokVhba7lr6nT
cmTDlbPRfzbbeKtZNoIgVhJMYXC6eM+aDpv5tDHFbzwF
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:10 2026 by rpki-client