Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7676262E4DE211F18B4C04F9CE1D38B0.roa
File: 7676262E4DE211F18B4C04F9CE1D38B0.roa (raw, json)
Hash identifier: I2hfTG//J2to2sBtL0llPbik9BG0xnJf7VZLHS38ljY=
Subject key identifier: D7:38:5B:27:D9:16:12:39:29:56:EA:B1:14:13:B5:68:DD:2D:45:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7676262E4DE211F18B4C04F9CE1D38B0.roa
Signing time: Tue 12 May 2026 09:10:47 +0000
ROA not before: Tue 12 May 2026 09:10:43 +0000
ROA not after: Wed 17 Jun 2026 09:10:43 +0000
asID: 22773
IP address blocks: 45.204.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111593 (0x1b3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 09:10:43 2026 GMT
Not After : Jun 17 09:10:43 2026 GMT
Subject: CN=6a02ee97-f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:3a:42:f3:07:82:66:2c:f3:1e:fe:0b:9c:
12:f4:a1:60:bd:ec:e8:c1:9b:b5:2f:31:d4:ae:49:
2f:9e:29:1d:09:6d:65:ee:41:8b:72:01:20:df:6b:
7c:b8:af:e9:2f:97:a0:fb:6a:bf:9c:b2:a0:96:9d:
a5:be:c0:40:16:38:69:f0:22:30:0c:3f:0a:fe:b9:
39:2e:63:59:c9:ca:65:23:5e:b3:3b:32:be:3b:79:
08:ac:26:7d:e2:c0:6c:c5:af:28:f3:ef:2e:83:eb:
30:b8:ef:63:fb:9b:12:bd:a0:ba:48:1b:25:d8:e1:
c5:18:c8:f7:d3:e6:17:c3:4f:66:a9:6e:39:e9:4b:
ba:d8:a3:88:5a:3d:7f:69:6b:a4:95:90:2a:2f:97:
a6:3b:d9:d7:88:cc:e6:d0:1c:2c:2c:38:df:00:af:
14:8a:1a:81:8f:f6:67:81:18:54:7c:80:e8:3a:6f:
c1:6a:b4:17:fa:85:8f:5d:fe:26:4e:e2:01:f2:6f:
42:9d:03:e5:af:1b:7e:1c:20:c0:27:4a:ed:ad:14:
d8:c7:4a:b7:fb:98:cd:0e:ba:94:52:14:0e:91:1c:
4e:8f:4a:b6:73:06:2c:58:42:00:b3:62:a8:7e:dd:
15:19:e9:11:44:1f:18:26:5a:95:31:f5:d6:33:dd:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:5B:27:D9:16:12:39:29:56:EA:B1:14:13:B5:68:DD:2D:45:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7676262E4DE211F18B4C04F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:6e:97:4d:31:f4:27:d6:88:2b:bc:6d:84:eb:56:48:e9:d2:
d8:2f:50:a9:95:da:40:5c:6c:10:73:fe:41:4c:c9:f0:3d:bc:
1c:6f:71:96:4c:d7:e5:c3:b7:f9:ed:72:49:a7:2c:34:99:e6:
67:18:63:6e:bf:dc:69:bc:02:2b:81:fb:50:35:eb:97:a8:58:
ac:87:0c:a5:16:2c:75:84:1f:53:bc:44:18:68:1f:2e:a6:6d:
2c:23:4c:e3:a9:e6:9a:41:f2:d8:ef:f7:22:aa:de:5b:8c:fe:
16:2e:8d:cf:56:e7:2b:cb:eb:d1:4f:0d:04:01:8b:28:fd:04:
54:4b:34:d0:f3:9c:76:cb:08:c3:04:7d:90:89:14:97:35:a5:
bb:b8:b5:07:cd:82:e7:8a:a1:90:f2:9f:2d:09:fc:e7:38:ec:
e6:28:37:75:f7:11:f5:cd:61:da:5b:cd:26:94:61:b3:9e:d9:
f6:c3:3c:5c:5c:ac:5c:bb:e0:5b:f6:2b:35:c9:22:47:3e:e0:
f6:08:c4:33:3f:0d:d6:35:c0:5f:40:6c:39:67:8f:bb:fa:72:
05:25:51:5a:e7:b3:a0:38:69:07:5e:c5:87:d2:e2:af:4b:1e:
ee:19:db:51:d1:f1:86:c1:4f:51:01:b0:04:c7:d3:bf:d5:a3:
45:c5:19:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbPpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTEyMDkxMDQzWhcNMjYwNjE3MDkxMDQzWjAYMRYw
FAYDVQQDEw02YTAyZWU5Ny1mNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt8E6QvMHgmYs8x7+C5wS9KFgvezowZu1LzHUrkkvnikdCW1l7kGLcgEg
32t8uK/pL5eg+2q/nLKglp2lvsBAFjhp8CIwDD8K/rk5LmNZycplI16zOzK+O3kI
rCZ94sBsxa8o8+8ug+swuO9j+5sSvaC6SBsl2OHFGMj30+YXw09mqW456Uu62KOI
Wj1/aWuklZAqL5emO9nXiMzm0BwsLDjfAK8UihqBj/ZngRhUfIDoOm/BarQX+oWP
Xf4mTuIB8m9CnQPlrxt+HCDAJ0rtrRTYx0q3+5jNDrqUUhQOkRxOj0q2cwYsWEIA
s2Koft0VGekRRB8YJlqVMfXWM929tQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNc4
WyfZFhI5KVbqsRQTtWjdLUVcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83Njc2MjYyRTRERTIxMUYxOEI0QzA0RjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcxQMA0GCSqGSIb3DQEBCwUA
A4IBAQAdbpdNMfQn1ogrvG2E61ZI6dLYL1CpldpAXGwQc/5BTMnwPbwcb3GWTNfl
w7f57XJJpyw0meZnGGNuv9xpvAIrgftQNeuXqFishwylFix1hB9TvEQYaB8upm0s
I0zjqeaaQfLY7/ciqt5bjP4WLo3PVucry+vRTw0EAYso/QRUSzTQ85x2ywjDBH2Q
iRSXNaW7uLUHzYLniqGQ8p8tCfznOOzmKDd19xH1zWHaW80mlGGzntn2wzxcXKxc
u+Bb9is1ySJHPuD2CMQzPw3WNcBfQGw5Z4+7+nIFJVFa57OgOGkHXsWH0uKvSx7u
GdtR0fGGwU9RAbAEx9O/1aNFxRk0
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:30 2026 by rpki-client