Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC99040497C11F1B81294B0CE1D38B0.roa
File: BBC99040497C11F1B81294B0CE1D38B0.roa (raw, json)
Hash identifier: C7YvQQiJSNjZEYy/JEzIvJ8IBrQlW0GmvHyJjKzHzYM=
Subject key identifier: DA:33:FE:D6:38:7E:8F:0A:08:72:6A:F7:95:0C:92:7C:85:72:90:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC99040497C11F1B81294B0CE1D38B0.roa
Signing time: Wed 06 May 2026 18:52:30 +0000
ROA not before: Wed 06 May 2026 18:52:24 +0000
ROA not after: Fri 05 Jun 2026 18:52:24 +0000
asID: 63023
IP address blocks: 45.195.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111096 (0x1b1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 18:52:24 2026 GMT
Not After : Jun 5 18:52:24 2026 GMT
Subject: CN=69fb8dee-178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:a9:a0:08:15:97:eb:10:9f:b5:f5:24:29:
78:1d:14:f2:ab:62:e1:15:1f:8f:99:d1:7a:db:98:
aa:ad:fd:6b:d5:72:a9:79:ce:b5:f8:0d:dd:5e:67:
77:fb:9d:a0:ee:b3:a0:4a:be:0c:dd:62:8c:b6:b5:
31:d4:23:45:b6:ee:f7:9a:3a:7d:99:d3:59:31:21:
5d:95:20:ee:ae:1e:99:f1:df:99:d9:5d:2d:8d:83:
10:21:f8:71:4f:b4:83:f9:b0:8c:7f:b2:8a:d8:56:
ba:37:38:50:c3:3d:1a:e0:6b:a6:74:e2:e5:48:3a:
b2:a2:65:42:73:0e:40:c3:f3:ed:64:99:7c:21:8a:
e5:8a:40:05:4f:e4:2f:b4:56:fc:e7:b1:23:5a:9b:
63:95:e9:67:52:06:ed:1a:f1:a3:2d:6d:94:f2:19:
c8:4f:11:37:77:3e:1e:5f:23:a6:b4:d5:d3:d4:1b:
82:83:ef:e8:77:67:2f:be:07:5e:10:f9:13:8f:55:
08:49:0d:1c:29:5c:4f:16:41:46:ec:0e:31:a1:91:
db:d3:36:e0:ed:4a:57:33:23:10:9d:de:35:9a:dd:
1c:6c:0b:44:be:ac:ed:d0:8e:db:40:aa:4a:9c:6b:
11:28:01:48:dd:47:67:25:19:97:8d:15:5d:0e:1f:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:33:FE:D6:38:7E:8F:0A:08:72:6A:F7:95:0C:92:7C:85:72:90:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC99040497C11F1B81294B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a6:60:ec:4b:86:4a:8d:39:69:46:9c:2a:e4:3d:81:20:c4:
45:08:b2:b1:60:a6:de:f2:5c:95:47:ae:5b:9a:c8:b5:82:b0:
5b:f4:59:65:e4:17:6a:13:48:9f:05:e7:c0:be:65:e7:ce:53:
af:5a:ec:1b:1b:c7:e1:ba:de:e1:aa:82:53:b9:08:67:ac:56:
40:5a:b7:8c:68:b7:60:b6:ef:eb:b7:9e:f3:81:07:5e:47:24:
b0:b2:e3:61:54:fe:f4:aa:eb:25:4f:83:0a:b3:4b:62:84:c5:
fc:09:b2:a2:b1:7e:f8:74:45:85:b0:7d:61:f4:6e:ff:c0:60:
06:87:68:dc:4a:e3:bb:54:36:49:d5:19:5c:e1:8a:57:64:61:
7b:74:f3:ad:dc:49:8d:5e:a6:e4:b1:6f:0a:f6:57:d8:99:b6:
d5:92:61:91:57:e1:d2:91:01:fd:da:e1:6c:2d:cf:23:e3:57:
1b:94:fc:20:9a:7e:f3:9a:b2:56:30:fc:1f:b8:63:0b:24:b1:
c6:22:78:b4:70:0c:59:b1:32:37:1c:01:c4:fa:92:24:56:72:
ec:f1:47:8d:41:73:98:a7:da:2d:09:05:fd:38:b4:5c:3a:ca:
38:ed:a2:90:ad:1f:5f:38:54:aa:de:1e:7e:9d:a8:59:6d:0f:
69:6e:fa:fe
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbH4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA2MTg1MjI0WhcNMjYwNjA1MTg1MjI0WjAYMRYw
FAYDVQQDEw02OWZiOGRlZS0xNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0gupoAgVl+sQn7X1JCl4HRTyq2LhFR+PmdF625iqrf1r1XKpec61+A3d
Xmd3+52g7rOgSr4M3WKMtrUx1CNFtu73mjp9mdNZMSFdlSDurh6Z8d+Z2V0tjYMQ
IfhxT7SD+bCMf7KK2Fa6NzhQwz0a4GumdOLlSDqyomVCcw5Aw/PtZJl8IYrlikAF
T+QvtFb857EjWptjlelnUgbtGvGjLW2U8hnITxE3dz4eXyOmtNXT1BuCg+/od2cv
vgdeEPkTj1UISQ0cKVxPFkFG7A4xoZHb0zbg7UpXMyMQnd41mt0cbAtEvqzt0I7b
QKpKnGsRKAFI3UdnJRmXjRVdDh/OowIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNoz
/tY4fo8KCHJq95UMknyFcpCsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQkM5OTA0MDQ5N0MxMUYxQjgxMjk0QjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOJMA0GCSqGSIb3DQEBCwUA
A4IBAQBfpmDsS4ZKjTlpRpwq5D2BIMRFCLKxYKbe8lyVR65bmsi1grBb9Fll5Bdq
E0ifBefAvmXnzlOvWuwbG8fhut7hqoJTuQhnrFZAWreMaLdgtu/rt57zgQdeRySw
suNhVP70quslT4MKs0tihMX8CbKisX74dEWFsH1h9G7/wGAGh2jcSuO7VDZJ1Rlc
4YpXZGF7dPOt3EmNXqbksW8K9lfYmbbVkmGRV+HSkQH92uFsLc8j41cblPwgmn7z
mrJWMPwfuGMLJLHGIni0cAxZsTI3HAHE+pIkVnLs8UeNQXOYp9otCQX9OLRcOso4
7aKQrR9fOFSq3h5+nahZbQ9pbvr+
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:39 2026 by rpki-client