Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C19EAC0E850D11F1BEBD0DC0CE1D38B0.roa
File: C19EAC0E850D11F1BEBD0DC0CE1D38B0.roa (raw, json)
Hash identifier: cGRcE/+YQla1A1LOaBDbTx09zA+S6Ic7fWpUOdt8zCI=
Subject key identifier: EC:32:40:BA:D1:27:36:50:68:CC:C3:70:F4:E9:46:2F:5C:23:9B:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C738
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C19EAC0E850D11F1BEBD0DC0CE1D38B0.roa
Signing time: Tue 21 Jul 2026 14:09:16 +0000
ROA not before: Tue 21 Jul 2026 14:09:12 +0000
ROA not after: Wed 02 Sep 2026 14:09:12 +0000
asID: 214769
IP address blocks: 45.202.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116536 (0x1c738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 14:09:12 2026 GMT
Not After : Sep 2 14:09:12 2026 GMT
Subject: CN=6a5f7d8c-3aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:bc:50:41:9c:3d:06:f4:41:fb:be:b6:e6:
b1:d9:1e:74:0a:90:1a:35:a6:db:84:e3:57:b4:95:
05:56:ab:72:f2:bc:31:d0:09:6a:c7:94:0a:3f:15:
44:d2:b4:e0:c2:45:16:37:ab:5d:b7:ec:62:f0:d0:
1b:d7:af:99:c0:33:1e:aa:6a:e7:76:73:4d:6f:19:
1b:33:08:35:55:b5:a4:95:17:43:8e:a9:37:5d:db:
8f:a2:b9:0e:65:53:b1:e7:aa:6b:62:01:d1:9b:94:
c8:32:de:ca:ba:6c:ad:4d:a4:ea:d9:ac:7b:1d:17:
0e:2f:5f:a6:a3:93:c8:bb:9b:6e:d2:32:31:59:9a:
2f:0f:8a:16:cb:5a:e7:da:9e:cf:91:f6:4f:de:da:
96:a4:7b:83:e2:c0:67:d0:7a:e6:7b:cd:ab:d8:4c:
82:43:fe:2f:fe:13:37:35:d4:48:87:b9:aa:b3:86:
af:59:29:3f:e6:cf:a9:e1:fc:df:cb:f2:a6:66:54:
58:c8:6d:7b:62:d0:a1:bb:3b:7d:3e:ff:72:89:b7:
53:a9:29:24:31:19:02:e0:6b:a6:01:f4:15:48:f2:
e3:2d:a7:b2:81:70:54:ce:5b:a0:8b:71:c4:d8:fd:
52:26:2b:3d:00:fb:d7:39:6c:47:2f:ac:9b:a2:18:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:40:BA:D1:27:36:50:68:CC:C3:70:F4:E9:46:2F:5C:23:9B:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C19EAC0E850D11F1BEBD0DC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.69.0/24
Signature Algorithm: sha256WithRSAEncryption
46:41:8d:dd:56:19:28:76:02:4b:81:fd:16:24:25:eb:c4:0c:
80:4f:95:95:4c:11:50:78:b1:83:b3:53:6a:7f:a8:b7:e4:a2:
3f:e1:d8:dc:64:84:aa:ab:a4:ce:fc:ef:05:3b:10:90:c1:77:
b1:29:82:02:1e:45:73:d8:a2:80:ea:bf:cf:7b:91:1d:c6:77:
cc:04:1a:5e:4a:1b:78:77:4a:a9:03:f6:e6:81:81:e6:0a:04:
58:cc:37:e2:68:a3:7a:67:9f:eb:10:ad:8c:7d:0b:a8:95:89:
cc:2e:91:49:11:dc:03:94:69:84:a5:0d:72:6c:b6:48:4a:21:
38:4b:2d:6c:a5:2d:8c:ef:be:24:a3:77:1a:31:f1:7e:2a:5a:
12:d1:58:86:fb:48:30:83:6b:99:20:f0:cc:4c:64:97:a7:80:
56:c8:63:e0:78:c2:a3:51:de:65:bf:15:8c:36:4c:2f:af:74:
f1:4b:21:4a:71:26:85:38:d5:50:d0:f6:63:92:02:06:6b:b6:
b5:e5:60:8f:8c:e2:53:76:63:32:93:b6:4f:d0:bb:3d:58:32:
02:12:96:36:06:20:0d:15:85:a9:a0:9e:ca:71:89:0c:93:66:
e0:a4:1a:28:93:e3:2c:80:0f:41:52:f9:7b:30:1f:4e:12:28:
96:c3:40:57
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcc4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIxMTQwOTEyWhcNMjYwOTAyMTQwOTEyWjAYMRYw
FAYDVQQDEw02YTVmN2Q4Yy0zYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA05m8UEGcPQb0Qfu+tuax2R50CpAaNabbhONXtJUFVqty8rwx0Alqx5QK
PxVE0rTgwkUWN6tdt+xi8NAb16+ZwDMeqmrndnNNbxkbMwg1VbWklRdDjqk3XduP
orkOZVOx56prYgHRm5TIMt7KumytTaTq2ax7HRcOL1+mo5PIu5tu0jIxWZovD4oW
y1rn2p7PkfZP3tqWpHuD4sBn0Hrme82r2EyCQ/4v/hM3NdRIh7mqs4avWSk/5s+p
4fzfy/KmZlRYyG17YtChuzt9Pv9yibdTqSkkMRkC4GumAfQVSPLjLaeygXBUzlug
i3HE2P1SJis9APvXOWxHL6ybohhUMwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOwy
QLrRJzZQaMzDcPTpRi9cI5umMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTlFQUMwRTg1MEQxMUYxQkVCRDBEQzBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpFMA0GCSqGSIb3DQEBCwUA
A4IBAQBGQY3dVhkodgJLgf0WJCXrxAyAT5WVTBFQeLGDs1Nqf6i35KI/4djcZISq
q6TO/O8FOxCQwXexKYICHkVz2KKA6r/Pe5EdxnfMBBpeSht4d0qpA/bmgYHmCgRY
zDfiaKN6Z5/rEK2MfQuolYnMLpFJEdwDlGmEpQ1ybLZISiE4Sy1spS2M774ko3ca
MfF+KloS0ViG+0gwg2uZIPDMTGSXp4BWyGPgeMKjUd5lvxWMNkwvr3TxSyFKcSaF
ONVQ0PZjkgIGa7a15WCPjOJTdmMyk7ZP0Ls9WDICEpY2BiANFYWpoJ7KcYkMk2bg
pBook+MsgA9BUvl7MB9OEiiWw0BX
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:09 2026 by rpki-client