Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6AAEEE85FD11F1B06AD7EDCE1D38B0.roa
File: 1D6AAEEE85FD11F1B06AD7EDCE1D38B0.roa (raw, json)
Hash identifier: dKPA23h/iQwHNJajPOPl2ea/6UUakjp9ySAphdT6tYM=
Subject key identifier: C7:E1:DA:61:60:EC:1E:63:C6:9B:69:3C:78:2D:82:3F:B2:3D:FD:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C795
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6AAEEE85FD11F1B06AD7EDCE1D38B0.roa
Signing time: Wed 22 Jul 2026 18:42:39 +0000
ROA not before: Wed 22 Jul 2026 18:42:35 +0000
ROA not after: Wed 09 Sep 2026 18:42:35 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116629 (0x1c795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 18:42:35 2026 GMT
Not After : Sep 9 18:42:35 2026 GMT
Subject: CN=6a610f1f-8b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:e7:1b:74:74:73:a7:eb:f8:a7:f6:02:27:
19:7c:1d:3b:e4:db:49:eb:bc:ed:d4:e8:39:2b:c4:
f5:15:69:30:9b:3e:d9:93:85:e6:d8:b8:de:ed:cb:
e7:e2:d6:54:ba:29:a8:ca:eb:08:dd:d0:2b:4d:44:
7f:34:ba:d1:46:1f:94:1a:8a:f0:41:5c:c3:e9:18:
d2:c3:b6:44:5d:3d:71:c5:5b:5c:5f:a4:59:a2:70:
60:ae:87:02:8c:3b:3b:48:ba:ef:ae:b3:58:9e:e5:
01:3e:da:db:ac:c8:26:53:d3:59:97:d8:bd:6b:47:
ed:43:c3:d4:fb:c4:77:80:c5:6c:ab:db:d5:36:33:
05:5d:19:99:25:0a:e3:36:9f:15:23:05:59:1d:fd:
c2:cb:14:87:2c:2e:e4:51:05:51:f6:14:66:db:52:
aa:af:08:e9:30:1c:9b:12:ad:59:32:2a:2b:13:cb:
ec:c8:11:97:fd:2b:e1:d6:b1:51:0d:95:65:62:e0:
30:6e:a7:6e:3e:2f:31:a9:42:f0:74:bc:c1:de:a8:
87:57:5b:12:de:4a:c5:24:94:de:47:9f:68:1f:b4:
99:9b:99:6a:3d:58:44:ac:ad:96:fa:3c:f2:79:aa:
28:17:29:d6:af:30:b8:e2:5d:4d:72:3d:cb:ff:c3:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:DA:61:60:EC:1E:63:C6:9B:69:3C:78:2D:82:3F:B2:3D:FD:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6AAEEE85FD11F1B06AD7EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
02:07:3f:79:28:4c:02:c9:b6:82:7c:94:8c:c6:0e:21:38:c5:
ce:b5:d9:f9:27:30:95:8c:e2:ef:e0:8f:2c:25:92:4d:53:c1:
09:ac:0c:3d:a8:98:07:37:92:67:38:e3:c9:f2:77:bd:ea:e0:
36:53:b9:6b:ea:f8:bd:24:a2:79:e3:09:dd:49:51:c8:71:fd:
22:6e:6c:c9:c4:06:81:3e:f2:f0:c5:2a:ed:35:b1:e6:28:3e:
56:02:5b:d3:b7:d3:23:6a:c9:71:ed:be:79:41:12:d2:1d:4b:
2b:9f:98:b1:6b:35:3b:c6:31:d7:1b:f1:ab:2c:7b:d2:72:b6:
06:21:14:28:e0:18:6b:d7:ed:56:d8:61:a3:60:19:90:f9:60:
68:f8:d6:b9:44:81:70:64:56:a6:35:ba:b6:85:14:08:fd:ce:
42:f5:65:e0:83:52:75:ac:88:d5:47:cf:8f:6c:72:55:17:e4:
3d:f2:ab:00:60:40:10:ec:2a:ca:13:2a:47:ad:ca:ad:f9:c1:
46:ac:bf:a8:21:62:d2:f8:09:74:72:1c:7e:d1:a8:f8:bc:9d:
4f:22:9c:6c:d8:e6:8c:cf:ea:b0:8e:13:5b:ab:9d:96:f9:23:
d7:f8:56:1a:1c:5c:15:1b:01:47:1b:10:27:4e:2c:f5:99:35:
35:be:15:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAceVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTg0MjM1WhcNMjYwOTA5MTg0MjM1WjAYMRYw
FAYDVQQDEw02YTYxMGYxZi04YjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1wHnG3R0c6fr+Kf2AicZfB075NtJ67zt1Og5K8T1FWkwmz7Zk4Xm2Lje
7cvn4tZUuimoyusI3dArTUR/NLrRRh+UGorwQVzD6RjSw7ZEXT1xxVtcX6RZonBg
rocCjDs7SLrvrrNYnuUBPtrbrMgmU9NZl9i9a0ftQ8PU+8R3gMVsq9vVNjMFXRmZ
JQrjNp8VIwVZHf3CyxSHLC7kUQVR9hRm21KqrwjpMBybEq1ZMiorE8vsyBGX/Svh
1rFRDZVlYuAwbqduPi8xqULwdLzB3qiHV1sS3krFJJTeR59oH7SZm5lqPVhErK2W
+jzyeaooFynWrzC44l1Ncj3L/8MZGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMfh
2mFg7B5jxptpPHgtgj+yPf1yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRDZBQUVFRTg1RkQxMUYxQjA2QUQ3RURDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLckMMA0GCSqGSIb3DQEBCwUA
A4IBAQACBz95KEwCybaCfJSMxg4hOMXOtdn5JzCVjOLv4I8sJZJNU8EJrAw9qJgH
N5JnOOPJ8ne96uA2U7lr6vi9JKJ54wndSVHIcf0ibmzJxAaBPvLwxSrtNbHmKD5W
AlvTt9Mjaslx7b55QRLSHUsrn5ixazU7xjHXG/GrLHvScrYGIRQo4Bhr1+1W2GGj
YBmQ+WBo+Na5RIFwZFamNbq2hRQI/c5C9WXgg1J1rIjVR8+PbHJVF+Q98qsAYEAQ
7CrKEypHrcqt+cFGrL+oIWLS+Al0chx+0aj4vJ1PIpxs2OaMz+qwjhNbq52W+SPX
+FYaHFwVGwFHGxAnTiz1mTU1vhXP
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:47 2026 by rpki-client