Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B253C7F6455311F1937194EBCE1D38B0.roa
File: B253C7F6455311F1937194EBCE1D38B0.roa (raw, json)
Hash identifier: bjoUukLhvZVdFx0NQDLjIJhDtbSGwTG6cR+pyYbjEl0=
Subject key identifier: 97:80:41:D1:55:3E:59:C6:50:E8:E2:1D:98:7D:5F:B5:6C:E3:10:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B08A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B253C7F6455311F1937194EBCE1D38B0.roa
Signing time: Fri 01 May 2026 11:48:40 +0000
ROA not before: Fri 01 May 2026 11:48:36 +0000
ROA not after: Sun 31 May 2026 11:48:36 +0000
asID: 32043
IP address blocks: 45.196.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110730 (0x1b08a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:48:36 2026 GMT
Not After : May 31 11:48:36 2026 GMT
Subject: CN=69f49318-8e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:5f:8f:85:5f:37:cb:37:8d:f1:53:c2:9a:
e7:c9:de:fa:00:7e:ba:05:52:44:de:31:50:a7:4b:
36:35:cf:8c:15:7c:4f:8a:2c:1a:5b:5e:36:45:63:
9e:cb:6e:9e:30:66:dc:d5:7a:d2:74:d9:19:86:f5:
9b:19:0c:ab:62:ff:b2:e0:09:ee:1a:1a:ec:17:35:
e8:60:36:a3:18:86:44:68:c3:6f:0b:c8:16:6e:3a:
15:48:1b:01:7b:df:11:a4:25:3d:21:49:23:9b:0e:
6e:3c:48:61:d7:fb:ed:f2:f2:b3:2f:a9:92:79:da:
61:8c:1b:68:15:d4:ba:4b:f9:e6:e9:07:c6:cc:96:
18:11:c0:43:bd:e6:c7:0b:6e:8e:7e:71:e0:eb:e7:
b2:eb:1d:1e:67:f8:7a:0b:0a:f5:ac:61:a6:db:7a:
02:c9:95:ff:36:39:92:99:db:44:9a:8b:4a:44:72:
a8:aa:de:c9:47:90:70:8f:57:71:25:2b:5a:d9:07:
6d:a8:f9:18:a5:77:0e:2c:f2:40:b7:d6:9e:b6:0e:
f6:ee:22:ae:f0:b9:f3:b2:68:87:0c:ab:aa:a8:5c:
f5:ee:9c:77:e0:c3:b5:8e:3f:e0:3a:7d:fa:7b:5e:
94:11:7d:e7:a7:92:98:83:2d:9a:e8:78:10:62:23:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:80:41:D1:55:3E:59:C6:50:E8:E2:1D:98:7D:5F:B5:6C:E3:10:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B253C7F6455311F1937194EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:08:f1:54:bf:64:ba:2e:f8:bd:34:97:70:d1:80:cf:14:31:
7c:5f:65:a9:0f:9a:48:60:02:71:23:7b:ce:4b:ab:2d:33:a6:
29:f5:12:5f:26:83:7c:df:57:fb:c2:a0:f7:1c:54:17:b1:8a:
00:67:52:f2:04:e6:5d:8d:89:b8:f8:c9:b5:df:35:57:9c:eb:
07:ff:a7:25:77:c5:06:3d:69:0e:c7:a9:99:3c:47:25:15:c4:
62:09:07:95:07:2b:0a:15:5b:57:d2:63:d0:d2:54:7d:2a:98:
b9:e0:3b:95:23:88:fd:ed:77:4a:0c:10:b6:a9:9a:ce:11:4f:
7a:85:0e:6e:90:a6:55:74:90:ef:95:40:73:46:2f:f2:e2:f8:
e6:2f:f0:dd:88:f1:ff:8a:6c:d0:31:53:33:77:71:42:17:26:
b4:68:d6:bb:08:a8:d5:5b:5b:6d:07:7f:90:bb:5f:78:ae:e2:
4c:bc:34:36:89:15:29:8a:ec:8c:e2:ec:06:88:ea:7c:e7:5d:
d4:65:1b:08:9e:0f:8e:a7:b3:2f:db:f3:f8:3e:b2:66:dc:d8:
57:c5:8b:4c:dd:88:76:97:08:b0:7e:e4:6e:8c:5b:a2:9d:9c:
84:1a:4a:60:10:06:86:49:53:dd:76:f5:b6:df:3a:d5:1f:6e:
8c:13:c1:9b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbCKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAxMTE0ODM2WhcNMjYwNTMxMTE0ODM2WjAYMRYw
FAYDVQQDEw02OWY0OTMxOC04ZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0vFfj4VfN8s3jfFTwprnyd76AH66BVJE3jFQp0s2Nc+MFXxPiiwaW142
RWOey26eMGbc1XrSdNkZhvWbGQyrYv+y4AnuGhrsFzXoYDajGIZEaMNvC8gWbjoV
SBsBe98RpCU9IUkjmw5uPEhh1/vt8vKzL6mSedphjBtoFdS6S/nm6QfGzJYYEcBD
vebHC26OfnHg6+ey6x0eZ/h6Cwr1rGGm23oCyZX/NjmSmdtEmotKRHKoqt7JR5Bw
j1dxJSta2QdtqPkYpXcOLPJAt9aetg727iKu8LnzsmiHDKuqqFz17px34MO1jj/g
On36e16UEX3np5KYgy2a6HgQYiPRIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJeA
QdFVPlnGUOjiHZh9X7Vs4xBwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjUzQzdGNjQ1NTMxMUYxOTM3MTk0RUJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcRAMA0GCSqGSIb3DQEBCwUA
A4IBAQCgCPFUv2S6Lvi9NJdw0YDPFDF8X2WpD5pIYAJxI3vOS6stM6Yp9RJfJoN8
31f7wqD3HFQXsYoAZ1LyBOZdjYm4+Mm13zVXnOsH/6cld8UGPWkOx6mZPEclFcRi
CQeVBysKFVtX0mPQ0lR9Kpi54DuVI4j97XdKDBC2qZrOEU96hQ5ukKZVdJDvlUBz
Ri/y4vjmL/DdiPH/imzQMVMzd3FCFya0aNa7CKjVW1ttB3+Qu194ruJMvDQ2iRUp
iuyM4uwGiOp8513UZRsIng+Op7Mv2/P4PrJm3NhXxYtM3Yh2lwiwfuRujFuinZyE
GkpgEAaGSVPddvW23zrVH26ME8Gb
-----END CERTIFICATE-----
Generated at Wed May 13 14:24:59 2026 by rpki-client