Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F05D0FAE6EFB11F1AE649504CF1D38B0.roa
File: F05D0FAE6EFB11F1AE649504CF1D38B0.roa (raw, json)
Hash identifier: 9QjaG9aBnqBfpyriSKi7dUk5j9jvNJu5A3MhGcXFnFA=
Subject key identifier: EA:6A:8A:ED:B0:D9:93:ED:C4:B8:8B:97:D6:14:8A:41:15:FE:18:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F05D0FAE6EFB11F1AE649504CF1D38B0.roa
Signing time: Tue 23 Jun 2026 12:06:18 +0000
ROA not before: Tue 23 Jun 2026 12:06:13 +0000
ROA not after: Sun 09 Aug 2026 12:06:13 +0000
asID: 202036
IP address blocks: 45.198.231.0/24 maxlen: 24
45.201.24.0/24 maxlen: 24
45.201.25.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114671 (0x1bfef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 12:06:13 2026 GMT
Not After : Aug 9 12:06:13 2026 GMT
Subject: CN=6a3a76ba-7744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:8b:2e:43:f0:88:fb:1a:83:dd:01:fd:33:
d0:3a:ec:2b:dc:1b:6d:6d:27:c7:08:0e:3c:3b:03:
3d:10:70:7d:60:24:58:7d:c4:e5:6d:01:79:b0:e0:
7c:8f:65:6b:ba:ad:8b:c5:e6:c8:e0:26:bd:ec:55:
e2:96:87:4d:a8:7b:dd:15:d8:c5:ba:54:c6:eb:a7:
38:86:3a:ab:96:36:f0:8b:e3:10:2d:58:bc:9a:ee:
d6:40:42:66:85:49:f4:54:d5:46:fa:a9:a7:06:1a:
da:2f:a4:45:1a:fe:af:f1:44:48:f9:09:4e:38:6d:
61:9f:dd:e4:d8:3c:6b:54:7f:76:61:6c:c7:86:f0:
64:d1:dd:26:92:54:76:15:f7:e5:c1:e4:b7:5a:f8:
10:9d:b3:dc:ad:df:8a:d2:6d:e6:dc:1e:10:11:27:
4a:e6:ad:a4:4e:7b:a1:01:cc:2a:24:ae:a2:18:09:
9d:9b:57:d0:fd:cb:e4:9d:29:9a:e0:bf:b4:70:f7:
bf:d9:d7:45:97:ef:88:0b:a7:92:11:a5:8a:54:f8:
ef:1e:d3:22:dc:5e:17:22:c9:19:14:cb:fb:31:50:
d8:58:0c:ee:5e:9c:7b:d9:ba:83:03:fe:39:da:ad:
f7:06:47:b9:4f:15:42:59:12:f7:ee:27:e3:82:8b:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:8A:ED:B0:D9:93:ED:C4:B8:8B:97:D6:14:8A:41:15:FE:18:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F05D0FAE6EFB11F1AE649504CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.231.0/24
45.201.24.0/23
45.201.28.0-45.201.32.255
Signature Algorithm: sha256WithRSAEncryption
47:96:25:a5:f0:ab:3e:fa:b9:ae:dd:54:49:a4:ab:54:ab:cc:
69:06:13:aa:e1:b3:cb:a0:77:b5:5a:c0:52:fa:b4:99:0f:5e:
f8:29:cc:b5:6f:9b:5c:27:b0:75:61:ea:2a:b7:b2:ec:dc:58:
f3:ee:5c:08:3f:74:27:b5:2a:4c:65:f7:bb:da:11:40:ba:ff:
8a:71:ab:f1:b0:8e:4b:b0:f4:c7:3e:40:2e:68:2f:c7:41:83:
0f:23:44:0e:e4:f1:c4:9c:22:90:e1:07:92:0b:38:a4:d8:02:
07:30:4f:92:c7:8b:4e:0e:ab:c2:d5:48:16:d7:ed:e7:95:e8:
90:54:a5:15:40:11:e3:be:f5:4f:3b:05:69:2c:10:c3:ed:24:
20:c4:90:a3:11:55:5e:33:3b:1d:7d:21:33:60:67:55:91:b3:
6b:fa:f5:ad:7a:3b:81:6a:de:97:6f:f3:63:5b:34:09:48:0d:
46:24:9a:8c:10:10:db:95:e7:7d:a0:83:f4:43:95:4e:0e:15:
ec:e2:53:7f:0c:26:8e:0a:21:33:a5:16:5a:e3:d7:46:8a:d6:
6c:17:80:5a:89:39:af:cd:8a:d4:75:b0:6c:20:14:84:65:07:
8b:25:bf:f1:46:2a:34:92:a2:dd:5a:6a:3f:e9:2a:c4:0d:e6:
c6:d2:f3:8a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAb/vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjIzMTIwNjEzWhcNMjYwODA5MTIwNjEzWjAYMRYw
FAYDVQQDEw02YTNhNzZiYS03NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuHSLLkPwiPsag90B/TPQOuwr3BttbSfHCA48OwM9EHB9YCRYfcTlbQF5
sOB8j2Vruq2LxebI4Ca97FXilodNqHvdFdjFulTG66c4hjqrljbwi+MQLVi8mu7W
QEJmhUn0VNVG+qmnBhraL6RFGv6v8URI+QlOOG1hn93k2DxrVH92YWzHhvBk0d0m
klR2FfflweS3WvgQnbPcrd+K0m3m3B4QESdK5q2kTnuhAcwqJK6iGAmdm1fQ/cvk
nSma4L+0cPe/2ddFl++IC6eSEaWKVPjvHtMi3F4XIskZFMv7MVDYWAzuXpx72bqD
A/452q33Bke5TxVCWRL37ifjgov9yQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFOpq
iu2w2ZPtxLiLl9YUikEV/hhbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMDVEMEZBRTZFRkIxMUYxQUU2NDk1MDRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALcbnAwQBLckYMAwDBAItyRwD
BAAtySAwDQYJKoZIhvcNAQELBQADggEBAEeWJaXwqz76ua7dVEmkq1SrzGkGE6rh
s8ugd7VawFL6tJkPXvgpzLVvm1wnsHVh6iq3suzcWPPuXAg/dCe1Kkxl97vaEUC6
/4pxq/Gwjkuw9Mc+QC5oL8dBgw8jRA7k8cScIpDhB5ILOKTYAgcwT5LHi04Oq8LV
SBbX7eeV6JBUpRVAEeO+9U87BWksEMPtJCDEkKMRVV4zOx19ITNgZ1WRs2v69a16
O4Fq3pdv82NbNAlIDUYkmowQENuV532gg/RDlU4OFeziU38MJo4KITOlFlrj10aK
1mwXgFqJOa/NitR1sGwgFIRlB4slv/FGKjSSot1aaj/pKsQN5sbS84o=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:59 2026 by rpki-client