Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322DB0B8844211F1B72277E5CE1D38B0.roa
File: 322DB0B8844211F1B72277E5CE1D38B0.roa (raw, json)
Hash identifier: Rwqgu7/lAwDtMEJF0fbhJqfG2sIw4XPczkNoJH/1JJI=
Subject key identifier: 53:69:4D:1C:08:70:F6:73:6F:EA:9A:51:54:6C:D3:D7:E9:3F:88:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C687
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322DB0B8844211F1B72277E5CE1D38B0.roa
Signing time: Mon 20 Jul 2026 13:52:07 +0000
ROA not before: Mon 20 Jul 2026 13:52:03 +0000
ROA not after: Thu 27 Aug 2026 13:52:03 +0000
asID: 25198
IP address blocks: 45.196.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116359 (0x1c687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 13:52:03 2026 GMT
Not After : Aug 27 13:52:03 2026 GMT
Subject: CN=6a5e2807-b164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:b2:d6:7e:c9:d2:c4:c6:0b:79:bf:cf:e6:
3c:73:e6:b9:15:9a:5e:a7:e1:9b:43:95:70:f8:f0:
1a:94:0e:6b:8e:3d:30:33:c2:9f:26:f9:bf:b3:a6:
06:76:3e:f3:ee:b0:ea:47:62:75:ce:74:b9:c8:47:
9e:33:46:e0:67:c8:33:80:bb:66:8e:87:ef:ba:21:
02:15:da:96:fd:de:d5:33:01:92:57:db:09:08:73:
54:61:93:c5:3f:90:a4:d8:c8:29:8b:74:51:cd:5e:
ea:dd:a5:38:a4:c7:c7:e1:3a:8a:44:52:cd:62:49:
5f:da:8b:b3:32:c5:5c:e9:49:ad:c2:86:35:7d:0a:
0f:9b:79:c6:d4:12:51:be:bb:c5:bd:74:0e:e1:d9:
a0:e1:1e:47:4e:74:ca:91:cc:cf:a5:39:6a:d0:99:
ee:29:d6:93:52:17:67:73:1c:a8:17:3f:47:7b:c3:
2f:5b:ee:80:07:36:1d:03:2c:40:c9:1f:4c:cb:83:
a8:4e:df:0d:e8:31:87:ca:81:a1:55:38:98:5e:67:
e9:14:94:d8:78:df:8d:b9:84:c2:73:28:f9:c8:52:
4c:5b:51:5b:2a:c9:92:e4:17:a4:b1:58:17:3c:39:
3b:43:40:eb:ce:58:8d:7b:4a:a1:b0:c0:47:56:6c:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:4D:1C:08:70:F6:73:6F:EA:9A:51:54:6C:D3:D7:E9:3F:88:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322DB0B8844211F1B72277E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ad:f5:9d:56:41:47:c2:93:90:d4:bb:59:82:95:24:08:5b:
ea:4b:92:dc:b5:4c:4a:3e:f2:24:7a:c4:19:20:55:4a:a2:b3:
e2:10:29:ba:56:f6:a8:5a:fa:f8:66:1d:4c:a3:2c:5a:87:31:
de:e2:12:7a:3e:ed:fd:c2:67:74:fd:3d:5f:9f:5e:7e:07:a7:
a0:9e:6c:40:83:3e:1a:25:b5:61:8e:11:ca:9f:87:3a:c4:36:
b2:93:10:ae:dd:bf:63:26:da:74:0c:ea:03:5e:60:8d:1e:2d:
a1:2a:df:22:06:42:59:a7:98:fb:f4:1f:5a:f9:0d:ca:02:77:
e4:5e:58:6b:80:77:f4:86:c1:12:78:17:cd:3a:e1:77:f0:6c:
4c:53:4c:cb:12:14:80:ab:d6:7f:2b:5f:d1:77:29:d3:74:0d:
51:7f:3e:d8:9b:21:49:14:4a:0f:b9:13:d2:45:00:02:72:04:
8c:d7:16:ab:65:9e:87:15:2b:37:c1:3a:39:ac:c8:07:d3:fc:
c4:0c:3e:80:c3:c7:61:1f:82:8c:f3:b2:ff:54:cf:a5:76:de:
19:8b:7e:b7:14:63:0a:10:d2:1a:b7:c8:ce:90:fc:15:63:5e:
f5:a2:b9:3f:91:fe:e0:72:c1:fd:3e:fb:10:e0:7b:bf:a2:16:
2d:38:3e:6c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcaHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIwMTM1MjAzWhcNMjYwODI3MTM1MjAzWjAYMRYw
FAYDVQQDEw02YTVlMjgwNy1iMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmr+y1n7J0sTGC3m/z+Y8c+a5FZpep+GbQ5Vw+PAalA5rjj0wM8KfJvm/
s6YGdj7z7rDqR2J1znS5yEeeM0bgZ8gzgLtmjofvuiECFdqW/d7VMwGSV9sJCHNU
YZPFP5Ck2Mgpi3RRzV7q3aU4pMfH4TqKRFLNYklf2ouzMsVc6UmtwoY1fQoPm3nG
1BJRvrvFvXQO4dmg4R5HTnTKkczPpTlq0JnuKdaTUhdncxyoFz9He8MvW+6ABzYd
AyxAyR9My4OoTt8N6DGHyoGhVTiYXmfpFJTYeN+NuYTCcyj5yFJMW1FbKsmS5Bek
sVgXPDk7Q0DrzliNe0qhsMBHVmxuRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFNp
TRwIcPZzb+qaUVRs09fpP4gyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjJEQjBCODg0NDIxMUYxQjcyMjc3RTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcRoMA0GCSqGSIb3DQEBCwUA
A4IBAQA+rfWdVkFHwpOQ1LtZgpUkCFvqS5LctUxKPvIkesQZIFVKorPiECm6Vvao
Wvr4Zh1MoyxahzHe4hJ6Pu39wmd0/T1fn15+B6egnmxAgz4aJbVhjhHKn4c6xDay
kxCu3b9jJtp0DOoDXmCNHi2hKt8iBkJZp5j79B9a+Q3KAnfkXlhrgHf0hsESeBfN
OuF38GxMU0zLEhSAq9Z/K1/RdynTdA1Rfz7YmyFJFEoPuRPSRQACcgSM1xarZZ6H
FSs3wTo5rMgH0/zEDD6Aw8dhH4KM87L/VM+ldt4Zi363FGMKENIat8jOkPwVY171
ork/kf7gcsH9PvsQ4Hu/ohYtOD5s
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:25 2026 by rpki-client