Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA4FF0485EA11F1B76477FDCE1D38B0.roa
File: 9EA4FF0485EA11F1B76477FDCE1D38B0.roa (raw, json)
Hash identifier: xn75FX9BXsSj2eRynC/NIOckMbbq8u9KPP7yOyUjjA4=
Subject key identifier: 3A:89:9B:85:25:CA:E6:60:31:BD:97:8C:D2:DD:A9:61:2D:5A:AF:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C779
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA4FF0485EA11F1B76477FDCE1D38B0.roa
Signing time: Wed 22 Jul 2026 16:30:16 +0000
ROA not before: Wed 22 Jul 2026 16:30:12 +0000
ROA not after: Wed 09 Sep 2026 16:30:12 +0000
asID: 395793
IP address blocks: 45.195.148.0/23 maxlen: 24
45.197.6.0/23 maxlen: 24
45.198.183.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116601 (0x1c779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 16:30:12 2026 GMT
Not After : Sep 9 16:30:12 2026 GMT
Subject: CN=6a60f018-035f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:4b:7b:bf:c2:69:cf:aa:87:3f:b8:e3:59:
1a:fd:4e:32:7a:c2:99:08:1f:5f:8d:1a:d4:c5:7c:
74:d0:ef:b2:9a:45:d4:69:f3:7c:e5:8a:fb:49:bf:
26:e9:f4:fd:54:f0:21:b6:da:f6:d2:24:6f:b3:a3:
85:98:00:6e:37:59:44:57:46:33:14:e8:0c:0e:e9:
40:0c:5d:67:7b:41:80:e4:30:83:42:e9:f4:07:07:
fa:bb:ac:8e:49:5f:08:69:98:0c:00:3c:6a:f0:a1:
a5:26:03:df:c0:c5:46:43:0f:35:d5:8c:b8:b8:f2:
93:5c:73:ab:3a:15:93:2f:18:6d:f0:77:d6:b6:43:
34:e9:82:ea:44:cb:e0:8e:e7:26:f8:f5:7a:c1:b1:
48:e5:23:fa:f5:35:08:27:23:79:41:d8:cb:19:12:
99:d8:bd:32:0b:6b:11:bb:c0:56:38:23:a3:b9:60:
39:83:73:8c:de:ae:54:b4:05:91:da:02:52:09:73:
84:f8:28:52:fd:55:96:76:1c:79:99:69:64:a0:e5:
28:5f:35:88:ff:68:bb:7f:41:fd:db:ee:4a:6d:ff:
a7:44:b7:bf:e9:86:56:3d:7c:82:a8:eb:c2:ad:9f:
c7:ed:18:f1:80:27:e9:9c:56:2e:37:8d:4c:56:58:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:89:9B:85:25:CA:E6:60:31:BD:97:8C:D2:DD:A9:61:2D:5A:AF:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA4FF0485EA11F1B76477FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/23
45.197.6.0/23
45.198.183.0/24
45.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a4:2e:66:26:a6:c7:ba:1b:84:92:2d:57:6a:e7:b6:05:30:
32:a2:51:26:ae:21:b8:a6:c9:d5:20:ca:22:14:b5:54:c0:a5:
6c:a8:7e:26:3f:7a:1b:85:c0:2e:51:75:82:d8:85:ec:19:38:
70:65:db:75:ca:eb:dc:14:e9:f9:e7:aa:c5:5b:74:03:a0:7f:
72:23:b1:fe:93:f1:07:cf:68:9f:48:52:ba:8a:9e:9f:e9:84:
56:7d:e2:b5:4f:16:f6:05:c8:f5:b4:76:8c:74:fc:07:40:1b:
f2:ba:8b:1f:49:10:e3:74:c7:d7:54:ef:d7:29:08:98:d9:f0:
c1:16:fb:87:10:7a:f9:4a:be:62:4d:81:f7:2e:aa:a6:a0:01:
c1:b4:84:61:90:1a:48:c0:2a:e3:b5:be:91:e6:e1:48:38:26:
b1:1c:58:62:11:fe:7f:ea:f7:98:a8:05:6b:d3:41:de:3f:be:
2b:51:32:c5:d8:c1:6d:fd:7f:6a:3f:4a:a3:a9:e7:e4:da:6e:
76:e7:9f:ef:23:43:c8:c5:a7:5c:20:0d:d4:ee:72:22:65:c2:
cf:94:b4:7d:39:6c:91:f4:fa:fc:6d:5c:74:c6:e8:cd:3e:43:
7f:b8:70:0c:39:9d:52:40:f6:97:bb:bd:1a:be:c7:5c:ae:da:
fd:e6:de:04
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAcd5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTYzMDEyWhcNMjYwOTA5MTYzMDEyWjAYMRYw
FAYDVQQDEw02YTYwZjAxOC0wMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvehLe7/Cac+qhz+441ka/U4yesKZCB9fjRrUxXx00O+ymkXUafN85Yr7
Sb8m6fT9VPAhttr20iRvs6OFmABuN1lEV0YzFOgMDulADF1ne0GA5DCDQun0Bwf6
u6yOSV8IaZgMADxq8KGlJgPfwMVGQw811Yy4uPKTXHOrOhWTLxht8HfWtkM06YLq
RMvgjucm+PV6wbFI5SP69TUIJyN5QdjLGRKZ2L0yC2sRu8BWOCOjuWA5g3OM3q5U
tAWR2gJSCXOE+ChS/VWWdhx5mWlkoOUoXzWI/2i7f0H92+5Kbf+nRLe/6YZWPXyC
qOvCrZ/H7RjxgCfpnFYuN41MVlgBIwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDqJ
m4UlyuZgMb2XjNLdqWEtWq+3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUE0RkYwNDg1RUExMUYxQjc2NDc3RkRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLcOUAwQBLcUGAwQALca3AwQA
Lc5CMA0GCSqGSIb3DQEBCwUAA4IBAQC5pC5mJqbHuhuEki1Xaue2BTAyolEmriG4
psnVIMoiFLVUwKVsqH4mP3obhcAuUXWC2IXsGThwZdt1yuvcFOn556rFW3QDoH9y
I7H+k/EHz2ifSFK6ip6f6YRWfeK1Txb2Bcj1tHaMdPwHQBvyuosfSRDjdMfXVO/X
KQiY2fDBFvuHEHr5Sr5iTYH3LqqmoAHBtIRhkBpIwCrjtb6R5uFIOCaxHFhiEf5/
6veYqAVr00HeP74rUTLF2MFt/X9qP0qjqefk2m5255/vI0PIxadcIA3U7nIiZcLP
lLR9OWyR9Pr8bVx0xujNPkN/uHAMOZ1SQPaXu70avsdcrtr95t4E
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:44 2026 by rpki-client