Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE4DDA6844111F19E924AE1CE1D38B0.roa
File: 7EE4DDA6844111F19E924AE1CE1D38B0.roa (raw, json)
Hash identifier: kS7AJLeYl/SGdKMVIzDELAK01LVwddYblyrGyngdSSc=
Subject key identifier: 48:87:EF:E6:FE:28:1D:3B:ED:20:DE:08:C9:56:0B:CF:C0:92:5A:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C685
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE4DDA6844111F19E924AE1CE1D38B0.roa
Signing time: Mon 20 Jul 2026 13:47:06 +0000
ROA not before: Mon 20 Jul 2026 13:47:02 +0000
ROA not after: Thu 27 Aug 2026 13:47:02 +0000
asID: 984
IP address blocks: 45.196.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116357 (0x1c685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 13:47:02 2026 GMT
Not After : Aug 27 13:47:02 2026 GMT
Subject: CN=6a5e26da-5289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:97:1d:ff:a6:f1:d6:80:5b:af:3b:ad:a5:
5c:27:ad:64:a7:6b:b0:68:13:dd:d6:f2:9f:4a:86:
54:33:d0:1c:56:3a:ec:98:3d:42:a6:6a:b9:e4:3c:
59:04:01:93:1b:91:35:0a:23:65:e3:ba:60:17:cf:
c9:6d:8d:27:6b:a6:58:b2:2e:f6:0f:54:a8:87:97:
94:1e:c5:67:26:49:fa:6d:c4:ea:0c:40:4e:1f:0b:
9d:3d:d6:58:04:e8:71:02:c9:ae:33:f6:29:39:f2:
7f:5e:10:bc:bd:85:9b:85:18:91:28:e8:39:05:b1:
48:fd:5e:23:d6:02:50:a3:16:1a:b7:23:59:c7:ff:
f5:a1:da:68:9f:cb:f5:c8:c7:69:e1:fe:b8:32:df:
28:76:b8:01:02:ed:8d:b8:21:bf:7c:33:74:1f:9b:
d1:ce:bc:6b:5c:e7:71:0e:c8:23:05:63:58:08:88:
ff:ed:38:fc:c2:7a:fd:72:86:0c:39:82:b6:98:a5:
d9:41:6a:a7:7e:6f:9a:bf:24:1a:54:f5:52:88:17:
ab:46:f1:fa:3e:c1:61:95:0f:01:b7:ee:c1:0d:9e:
49:75:e2:97:2a:9f:0b:ef:dd:02:78:21:99:50:7c:
c6:9d:6c:9b:58:dc:1f:b2:4e:89:22:11:42:b2:b8:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:EF:E6:FE:28:1D:3B:ED:20:DE:08:C9:56:0B:CF:C0:92:5A:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE4DDA6844111F19E924AE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cd:8c:9d:c6:6a:34:f1:57:ba:6e:85:2d:7e:95:75:61:65:
60:67:59:1c:6f:74:44:65:ab:00:c8:9d:0e:11:b7:d2:b6:a7:
b2:24:89:90:d1:bd:61:59:5a:d7:25:e0:fc:31:07:10:bc:36:
9a:42:f4:b9:42:9f:66:25:8e:7b:03:83:07:be:c0:99:14:b3:
b7:1f:1f:29:0b:89:4d:bf:0c:ce:74:5c:93:c5:0c:5c:f3:94:
91:20:60:7c:9c:99:1d:10:be:20:e5:41:f4:28:85:82:f1:95:
3d:b9:ab:04:d6:ce:f0:a6:77:d5:91:fc:69:9c:71:eb:12:7d:
ce:50:e2:94:23:5d:b1:ba:fa:25:98:77:29:5a:b3:81:57:77:
2a:4a:81:1e:0a:ed:fd:04:d4:f5:d7:dd:16:2f:70:c4:ba:f7:
a3:26:58:25:ea:44:9c:f0:a6:ae:7e:57:b7:28:8d:9d:d7:8c:
97:4b:0e:84:5b:25:d1:bb:9c:c1:c1:38:23:29:c7:74:8b:97:
14:26:aa:62:2e:a6:03:02:c2:5e:62:f3:e4:28:a2:bd:97:82:
40:d3:f5:ef:29:a4:0f:4c:57:dd:65:24:47:87:5d:db:c7:6c:
f5:4b:eb:6e:a3:5c:73:52:e5:20:a4:8d:2a:78:d2:15:3a:e7:
3c:d6:5a:d4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcaFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIwMTM0NzAyWhcNMjYwODI3MTM0NzAyWjAYMRYw
FAYDVQQDEw02YTVlMjZkYS01Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnjiXHf+m8daAW687raVcJ61kp2uwaBPd1vKfSoZUM9AcVjrsmD1Cpmq5
5DxZBAGTG5E1CiNl47pgF8/JbY0na6ZYsi72D1Soh5eUHsVnJkn6bcTqDEBOHwud
PdZYBOhxAsmuM/YpOfJ/XhC8vYWbhRiRKOg5BbFI/V4j1gJQoxYatyNZx//1odpo
n8v1yMdp4f64Mt8odrgBAu2NuCG/fDN0H5vRzrxrXOdxDsgjBWNYCIj/7Tj8wnr9
coYMOYK2mKXZQWqnfm+avyQaVPVSiBerRvH6PsFhlQ8Bt+7BDZ5JdeKXKp8L790C
eCGZUHzGnWybWNwfsk6JIhFCsrj0sQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEiH
7+b+KB077SDeCMlWC8/AklpyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RUU0RERBNjg0NDExMUYxOUU5MjRBRTFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcSlMA0GCSqGSIb3DQEBCwUA
A4IBAQBszYydxmo08Ve6boUtfpV1YWVgZ1kcb3REZasAyJ0OEbfStqeyJImQ0b1h
WVrXJeD8MQcQvDaaQvS5Qp9mJY57A4MHvsCZFLO3Hx8pC4lNvwzOdFyTxQxc85SR
IGB8nJkdEL4g5UH0KIWC8ZU9uasE1s7wpnfVkfxpnHHrEn3OUOKUI12xuvolmHcp
WrOBV3cqSoEeCu39BNT1190WL3DEuvejJlgl6kSc8Kaufle3KI2d14yXSw6EWyXR
u5zBwTgjKcd0i5cUJqpiLqYDAsJeYvPkKKK9l4JA0/XvKaQPTFfdZSRHh13bx2z1
S+tuo1xzUuUgpI0qeNIVOuc81lrU
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:28 2026 by rpki-client