Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F85A418C56BD11F1AAC0E5E0CE1D38B0.roa
File: F85A418C56BD11F1AAC0E5E0CE1D38B0.roa (raw, json)
Hash identifier: wgPKjuEdlt5T4VBZ6C90dxcjRFOXOUaaseFTu7oNq04=
Subject key identifier: 90:34:A8:2B:E7:CC:B7:D3:ED:7A:5A:3F:3F:6D:A0:50:5E:5D:E7:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B895
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F85A418C56BD11F1AAC0E5E0CE1D38B0.roa
Signing time: Sat 23 May 2026 15:42:14 +0000
ROA not before: Sat 23 May 2026 15:42:10 +0000
ROA not after: Wed 19 Aug 2026 15:42:10 +0000
asID: 400619
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112789 (0x1b895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 15:42:10 2026 GMT
Not After : Aug 19 15:42:10 2026 GMT
Subject: CN=6a11cad6-d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:11:78:ce:67:9d:72:9d:60:d7:7c:37:67:
18:3b:b7:be:b1:04:35:3a:05:7d:a4:8c:bd:12:54:
c2:9c:0f:6e:81:95:b0:e8:d3:ec:52:13:6d:b2:f1:
09:20:d5:f5:1b:6a:3f:62:67:9d:d1:66:ad:55:37:
5c:c7:74:55:d6:e6:25:fb:7a:dc:d0:16:7c:f8:1c:
f6:d2:56:ff:c4:2c:0c:8a:c4:9d:4a:c8:1a:34:cf:
5d:38:84:16:76:8f:15:d3:6b:04:60:74:a0:0b:9a:
8a:7d:f1:24:a5:8c:8a:16:46:74:14:29:de:76:c7:
75:0f:82:ff:7f:ff:6b:b5:9e:17:35:ec:df:6d:b0:
ba:99:b3:68:5f:b9:64:a7:58:f8:df:bb:11:55:fe:
8b:a3:58:50:ad:6a:e6:6c:13:1b:f7:82:00:0b:c6:
e1:c1:bb:16:d5:54:8f:18:0c:36:bd:fc:06:d7:96:
44:e9:8e:25:6e:4f:87:19:64:24:62:2f:c5:c6:11:
b5:bf:6a:4c:04:f5:42:6f:cf:a5:86:4a:4b:9f:49:
17:a6:10:72:ba:b4:87:b3:fa:53:46:63:e1:87:91:
0e:9a:ee:d0:99:68:d5:02:15:e7:a1:8e:6d:1b:d7:
09:b9:07:9c:29:f3:63:e0:08:07:eb:b6:b3:87:7e:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:A8:2B:E7:CC:B7:D3:ED:7A:5A:3F:3F:6D:A0:50:5E:5D:E7:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F85A418C56BD11F1AAC0E5E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
20:96:1b:86:f5:20:0f:78:f9:d1:bb:a0:78:64:65:a1:9f:53:
08:35:f2:86:fb:78:16:b1:79:d0:83:bf:14:97:d8:80:6f:e1:
c0:ec:30:7c:8b:f0:d1:a3:f8:0b:a9:da:8f:95:e5:27:53:52:
7e:50:b5:bc:49:78:26:a3:1f:1f:5a:35:6d:f2:26:ca:8d:6c:
57:05:12:1f:5a:26:bf:eb:1f:df:d1:13:96:15:2d:bf:a8:9d:
40:bc:1f:8c:7c:85:73:e8:33:23:bc:3c:01:18:6b:80:2f:a2:
96:fc:c3:a5:2c:12:90:b4:a2:31:32:bf:cb:f2:5a:e6:20:a6:
3e:ea:82:7b:9c:77:fe:fd:a2:e9:ae:13:43:3f:24:cf:6d:6b:
89:d0:57:a4:9c:bb:39:47:1a:d1:d2:f2:0e:48:cd:8d:00:48:
a1:88:7b:33:04:fb:c4:a2:7f:46:0e:9e:18:ac:c1:94:3f:51:
96:98:4f:04:2b:40:a0:0f:8f:76:3f:b5:01:d8:29:df:ff:7b:
23:01:e0:fc:e6:6e:47:b2:b8:1f:40:0d:a9:33:34:39:6b:95:
85:b8:27:32:5b:25:38:b2:67:85:32:6a:43:49:86:e5:b0:81:
a4:9f:6a:6e:84:80:59:e2:92:3f:f9:d3:24:0e:57:0a:0d:ed:
4b:7a:c1:59
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbiVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIzMTU0MjEwWhcNMjYwODE5MTU0MjEwWjAYMRYw
FAYDVQQDEw02YTExY2FkNi1kMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvVUReM5nnXKdYNd8N2cYO7e+sQQ1OgV9pIy9ElTCnA9ugZWw6NPsUhNt
svEJINX1G2o/Ymed0WatVTdcx3RV1uYl+3rc0BZ8+Bz20lb/xCwMisSdSsgaNM9d
OIQWdo8V02sEYHSgC5qKffEkpYyKFkZ0FCnedsd1D4L/f/9rtZ4XNezfbbC6mbNo
X7lkp1j437sRVf6Lo1hQrWrmbBMb94IAC8bhwbsW1VSPGAw2vfwG15ZE6Y4lbk+H
GWQkYi/FxhG1v2pMBPVCb8+lhkpLn0kXphByurSHs/pTRmPhh5EOmu7QmWjVAhXn
oY5tG9cJuQecKfNj4AgH67azh34kwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJA0
qCvnzLfT7XpaPz9toFBeXefGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GODVBNDE4QzU2QkQxMUYxQUFDMEU1RTBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQAglhuG9SAPePnRu6B4ZGWhn1MINfKG+3gWsXnQg78Ul9iAb+HA7DB8i/DR
o/gLqdqPleUnU1J+ULW8SXgmox8fWjVt8ibKjWxXBRIfWia/6x/f0ROWFS2/qJ1A
vB+MfIVz6DMjvDwBGGuAL6KW/MOlLBKQtKIxMr/L8lrmIKY+6oJ7nHf+/aLprhND
PyTPbWuJ0FeknLs5RxrR0vIOSM2NAEihiHszBPvEon9GDp4YrMGUP1GWmE8EK0Cg
D492P7UB2Cnf/3sjAeD85m5HsrgfQA2pMzQ5a5WFuCcyWyU4smeFMmpDSYblsIGk
n2puhIBZ4pI/+dMkDlcKDe1LesFZ
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:19 2026 by rpki-client