Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F215ECE67DA411F19DA5D0E2CE1D38B0.roa
File: F215ECE67DA411F19DA5D0E2CE1D38B0.roa (raw, json)
Hash identifier: HYg5la/jFyUISoeGOeVMUmyYWSUFbGixzCns1HrrD/I=
Subject key identifier: 95:56:15:E5:4D:8A:16:B2:A9:B7:7B:33:88:2F:58:3D:8C:64:74:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F215ECE67DA411F19DA5D0E2CE1D38B0.roa
Signing time: Sun 12 Jul 2026 03:51:22 +0000
ROA not before: Sun 12 Jul 2026 03:51:17 +0000
ROA not after: Sat 10 Jul 2027 03:51:17 +0000
asID: 328608
IP address blocks: 45.205.42.0/24 maxlen: 24
45.205.43.0/24 maxlen: 24
45.205.44.0/24 maxlen: 24
45.205.45.0/24 maxlen: 24
45.205.46.0/24 maxlen: 24
45.205.47.0/24 maxlen: 24
45.205.48.0/24 maxlen: 24
45.205.49.0/24 maxlen: 24
45.205.50.0/24 maxlen: 24
45.205.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115880 (0x1c4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 03:51:17 2026 GMT
Not After : Jul 10 03:51:17 2027 GMT
Subject: CN=6a530f3a-022c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:61:0a:28:03:db:a2:5a:20:b5:91:67:aa:
a1:50:df:1d:86:2e:f2:c6:89:ed:7e:58:f7:d4:36:
c6:13:a4:8a:35:4e:21:4f:53:74:26:73:dd:28:57:
1d:d7:93:02:ed:8c:56:f2:a2:8d:13:0a:3c:4d:ba:
df:11:f3:9a:9d:39:ca:23:12:a6:e7:6d:ed:9e:6b:
88:50:88:49:a1:78:26:3c:fd:0d:ee:ce:ec:44:5d:
c1:6b:41:01:92:29:aa:df:8c:4d:64:ca:5c:77:61:
1b:b6:b1:e6:ba:03:c7:ef:26:de:34:2b:55:61:97:
89:38:84:2b:67:90:99:9f:ec:19:99:b6:10:7c:2e:
e2:c3:0f:83:65:6c:60:f1:15:36:26:34:1a:4b:44:
67:4a:24:59:cf:3d:7c:92:d4:b1:4c:8d:5c:6d:cb:
39:c0:10:ea:0f:7a:41:15:37:93:bb:05:0f:5b:15:
a5:31:9a:3e:f7:ce:cc:3c:20:05:7d:22:bb:a4:53:
c0:74:25:6b:38:90:56:27:2f:69:9a:c9:ec:66:21:
49:ee:c1:85:05:2e:5e:5e:54:dc:33:ef:f8:1c:fb:
15:52:38:a1:08:4f:f2:4c:b0:41:47:64:e0:04:f9:
82:fc:f3:cc:8a:1f:1f:25:80:b6:3f:ac:13:d1:84:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:15:E5:4D:8A:16:B2:A9:B7:7B:33:88:2F:58:3D:8C:64:74:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F215ECE67DA411F19DA5D0E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.42.0-45.205.51.255
Signature Algorithm: sha256WithRSAEncryption
53:24:b6:4e:30:8b:d2:9c:59:e2:a1:d5:60:80:aa:1b:6a:67:
8f:0c:9a:c2:ec:94:01:9f:80:dc:60:6e:e4:01:a0:c1:2a:ed:
b5:68:2e:6c:a3:64:3c:7d:d0:20:a3:c8:dc:e3:74:44:13:ca:
b3:ba:76:0a:34:99:3e:d1:d7:23:ab:6d:37:10:9a:f5:72:08:
0f:6f:79:51:c7:bf:f4:6a:4f:d0:90:d1:5b:6c:d3:99:52:ae:
7d:7f:a8:12:5d:cc:7f:29:9b:ab:4e:82:37:e4:35:3c:cb:5b:
73:cf:ae:08:f2:1b:31:a4:28:8d:bf:b0:51:6f:23:1f:b3:33:
8c:26:b5:bc:ad:1d:a1:76:a3:57:c0:33:94:50:4a:bf:8a:60:
d1:4b:0c:e9:ed:15:3c:51:7a:07:01:c6:ea:d0:09:86:70:c4:
40:88:bb:9b:b9:55:a8:81:74:a0:3c:30:aa:e1:55:f1:f2:fc:
aa:75:ce:93:e3:d2:a1:75:56:8d:61:49:0e:75:55:1f:d2:23:
d3:f2:3b:d7:e4:1d:6e:cc:06:a5:1a:a7:fc:1b:49:f0:fd:43:
d9:32:64:d7:0f:8a:5f:cf:00:9c:aa:a5:cb:8b:b9:ea:07:a9:
a9:95:10:08:d2:89:1c:a7:c3:0f:bc:20:1a:19:c2:97:cc:11:
d4:a7:b5:6d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcSoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzEyMDM1MTE3WhcNMjcwNzEwMDM1MTE3WjAYMRYw
FAYDVQQDEw02YTUzMGYzYS0wMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAygRhCigD26JaILWRZ6qhUN8dhi7yxontflj31DbGE6SKNU4hT1N0JnPd
KFcd15MC7YxW8qKNEwo8TbrfEfOanTnKIxKm523tnmuIUIhJoXgmPP0N7s7sRF3B
a0EBkimq34xNZMpcd2EbtrHmugPH7ybeNCtVYZeJOIQrZ5CZn+wZmbYQfC7iww+D
ZWxg8RU2JjQaS0RnSiRZzz18ktSxTI1cbcs5wBDqD3pBFTeTuwUPWxWlMZo+987M
PCAFfSK7pFPAdCVrOJBWJy9pmsnsZiFJ7sGFBS5eXlTcM+/4HPsVUjihCE/yTLBB
R2TgBPmC/PPMih8fJYC2P6wT0YT20QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJVW
FeVNihayqbd7M4gvWD2MZHS+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMjE1RUNFNjdEQTQxMUYxOURBNUQwRTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEtzSoDBAItzTAwDQYJKoZI
hvcNAQELBQADggEBAFMktk4wi9KcWeKh1WCAqhtqZ48MmsLslAGfgNxgbuQBoMEq
7bVoLmyjZDx90CCjyNzjdEQTyrO6dgo0mT7R1yOrbTcQmvVyCA9veVHHv/RqT9CQ
0Vts05lSrn1/qBJdzH8pm6tOgjfkNTzLW3PPrgjyGzGkKI2/sFFvIx+zM4wmtbyt
HaF2o1fAM5RQSr+KYNFLDOntFTxRegcBxurQCYZwxECIu5u5VaiBdKA8MKrhVfHy
/Kp1zpPj0qF1Vo1hSQ51VR/SI9PyO9fkHW7MBqUap/wbSfD9Q9kyZNcPil/PAJyq
pcuLueoHqamVEAjSiRynww+8IBoZwpfMEdSntW0=
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:47 2026 by rpki-client