Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9371E2E485FB11F1A859BDE5CE1D38B0.roa
File: 9371E2E485FB11F1A859BDE5CE1D38B0.roa (raw, json)
Hash identifier: ed58ls1B8tU8QzSFZXmI3pvlOX4+5CjTU1G+VL1yGaQ=
Subject key identifier: 1F:AE:4A:08:43:A3:0C:98:B0:37:16:C5:EC:E7:06:9A:EE:0C:9F:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C791
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9371E2E485FB11F1A859BDE5CE1D38B0.roa
Signing time: Wed 22 Jul 2026 18:31:38 +0000
ROA not before: Wed 22 Jul 2026 18:31:34 +0000
ROA not after: Wed 09 Sep 2026 18:31:34 +0000
asID: 7018
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116625 (0x1c791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 18:31:34 2026 GMT
Not After : Sep 9 18:31:34 2026 GMT
Subject: CN=6a610c8a-6f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:c9:f6:f7:b3:fd:00:43:36:d4:76:1d:2f:
00:93:33:48:10:f5:09:90:11:2e:e6:06:93:b3:59:
e7:11:7c:4c:8d:87:33:f4:76:33:6b:91:9e:30:ea:
08:ae:7d:6c:1e:67:da:b8:3e:d5:ab:ab:d6:03:2c:
62:58:55:f2:a9:92:d4:c7:40:28:bf:16:27:3b:c9:
f8:12:1b:3e:ce:27:25:14:5e:fc:89:e8:be:a3:4a:
7b:0c:90:9d:51:a7:db:4a:7e:92:43:b7:ce:fb:e1:
68:24:d1:61:fe:e2:b6:14:58:74:a1:09:64:eb:67:
56:56:1b:b0:9a:e0:5b:97:8f:12:dc:7f:87:9a:51:
3f:6a:cc:2a:e0:85:40:d5:c3:0c:d9:de:72:73:8e:
83:ad:22:48:de:f7:65:63:6a:32:e1:ca:d0:42:f2:
f1:10:56:14:62:35:0c:f4:1e:5c:a5:3a:b5:d3:76:
50:d0:1b:a7:81:d6:1e:1e:11:04:df:38:fc:80:56:
aa:84:72:de:88:0c:d1:a0:10:b8:e2:2f:63:42:37:
7e:9c:67:6e:0d:9f:e0:fd:db:1f:23:0b:47:39:00:
32:ba:b9:b9:d2:f6:58:7e:50:6f:ca:b1:ff:7a:09:
ef:c6:ab:69:db:d3:41:55:95:b3:a6:ea:4b:26:cf:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:4A:08:43:A3:0C:98:B0:37:16:C5:EC:E7:06:9A:EE:0C:9F:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9371E2E485FB11F1A859BDE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
24:30:b5:83:cf:0b:81:01:b2:97:78:d3:52:85:d6:24:42:5a:
45:53:2c:b4:3c:56:cc:c5:23:51:54:f3:14:b8:b7:44:2e:57:
ae:39:5e:e2:83:6d:53:b7:41:19:b7:bf:c8:c3:d7:79:c4:db:
15:58:86:58:c6:a9:51:cd:88:7f:60:fe:80:c1:7c:dc:f1:1d:
f1:90:69:df:f3:f2:f0:03:60:53:16:46:c4:dc:87:2d:07:27:
e9:56:59:50:e7:a1:87:94:9f:d3:bf:c5:97:2b:d1:44:89:13:
fc:24:e6:6b:f8:c1:ce:ca:d2:41:45:f5:5d:a0:1c:ae:ce:88:
fd:b7:f7:a0:6c:ff:41:91:6d:de:d4:6f:ac:8f:eb:f2:86:a4:
d6:9a:82:ab:37:9c:78:a7:1d:42:96:4a:c7:02:7a:17:48:80:
1f:53:50:6e:f5:a0:72:5a:7a:fb:9c:cb:50:7b:bb:18:a5:3f:
9f:64:9e:32:9b:1e:d8:15:fe:ac:e9:5b:c6:39:26:af:72:ee:
01:cd:47:2f:db:1f:32:a8:18:f7:af:ac:2f:18:aa:e2:24:87:
b7:8a:2f:81:02:e7:ba:56:a6:0b:18:2d:ba:70:43:43:59:75:
24:d9:6d:ed:c6:81:a5:03:20:ca:d6:9f:76:59:15:27:11:a1:
34:52:30:f9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAceRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTgzMTM0WhcNMjYwOTA5MTgzMTM0WjAYMRYw
FAYDVQQDEw02YTYxMGM4YS02ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzOnJ9vez/QBDNtR2HS8AkzNIEPUJkBEu5gaTs1nnEXxMjYcz9HYza5Ge
MOoIrn1sHmfauD7Vq6vWAyxiWFXyqZLUx0AovxYnO8n4Ehs+ziclFF78iei+o0p7
DJCdUafbSn6SQ7fO++FoJNFh/uK2FFh0oQlk62dWVhuwmuBbl48S3H+HmlE/aswq
4IVA1cMM2d5yc46DrSJI3vdlY2oy4crQQvLxEFYUYjUM9B5cpTq103ZQ0BungdYe
HhEE3zj8gFaqhHLeiAzRoBC44i9jQjd+nGduDZ/g/dsfIwtHOQAyurm50vZYflBv
yrH/egnvxqtp29NBVZWzpupLJs/3xQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB+u
SghDowyYsDcWxeznBpruDJ/IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MzcxRTJFNDg1RkIxMUYxQTg1OUJERTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpKMA0GCSqGSIb3DQEBCwUA
A4IBAQAkMLWDzwuBAbKXeNNShdYkQlpFUyy0PFbMxSNRVPMUuLdELleuOV7ig21T
t0EZt7/Iw9d5xNsVWIZYxqlRzYh/YP6AwXzc8R3xkGnf8/LwA2BTFkbE3IctByfp
VllQ56GHlJ/Tv8WXK9FEiRP8JOZr+MHOytJBRfVdoByuzoj9t/egbP9BkW3e1G+s
j+vyhqTWmoKrN5x4px1ClkrHAnoXSIAfU1Bu9aByWnr7nMtQe7sYpT+fZJ4ymx7Y
Ff6s6VvGOSavcu4BzUcv2x8yqBj3r6wvGKriJIe3ii+BAue6VqYLGC26cENDWXUk
2W3txoGlAyDK1p92WRUnEaE0UjD5
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:10:44 2026 by rpki-client