Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C795D5C685EC11F1B48AC90ACF1D38B0.roa
File: C795D5C685EC11F1B48AC90ACF1D38B0.roa (raw, json)
Hash identifier: u6+KPIbeL7lr/8JHsmpaBjEWDPzE4mJrPQDebRjGgzs=
Subject key identifier: 3F:A9:5B:2D:2B:52:07:BE:B1:4A:A8:C3:E0:C2:F3:6E:91:8B:83:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C77F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C795D5C685EC11F1B48AC90ACF1D38B0.roa
Signing time: Wed 22 Jul 2026 16:45:43 +0000
ROA not before: Wed 22 Jul 2026 16:45:40 +0000
ROA not after: Wed 09 Sep 2026 16:45:40 +0000
asID: 174
IP address blocks: 45.197.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116607 (0x1c77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 16:45:40 2026 GMT
Not After : Sep 9 16:45:40 2026 GMT
Subject: CN=6a60f3b7-3d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:9c:55:81:5c:c3:db:97:db:50:45:02:85:
00:d7:97:2c:d4:da:10:4c:bf:06:20:c7:93:19:a9:
f0:77:64:89:a5:6b:85:b2:e0:28:c2:d6:d4:17:54:
f5:48:e6:c9:c6:bc:7c:eb:de:e7:c1:c2:63:e2:06:
9b:13:aa:19:b1:cb:2c:88:f2:b3:66:a9:d3:b1:72:
21:a7:49:78:9f:41:6d:ad:0b:ff:4d:c9:e2:9b:99:
52:76:4b:86:74:df:27:7d:3b:aa:15:8e:81:bc:23:
f3:98:ef:db:b3:8b:d4:32:b6:51:d3:ba:4c:e1:9c:
08:ea:c3:b9:c3:76:e6:fd:76:df:7d:d7:db:88:a4:
c3:cf:69:3f:fa:1f:92:76:11:a9:a5:e8:f4:a1:f6:
0f:b5:45:32:c6:6c:e8:62:3c:e3:90:dd:83:fd:00:
26:07:6b:aa:4f:c0:64:4f:61:8c:4c:19:6d:80:3f:
19:2e:bc:d5:e5:a1:3d:05:c5:a5:c5:2d:10:25:2f:
90:54:d0:56:c8:26:79:cb:ca:0a:7c:6f:64:c4:e3:
71:11:6b:8b:da:cf:b4:7f:0e:16:72:29:a7:3e:b5:
c6:a9:8a:f3:2d:40:9a:b3:f1:10:eb:b0:47:6b:3d:
2d:6a:e4:5a:59:9c:6d:fe:27:c2:de:1f:4c:31:41:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:5B:2D:2B:52:07:BE:B1:4A:A8:C3:E0:C2:F3:6E:91:8B:83:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C795D5C685EC11F1B48AC90ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.6.0/23
Signature Algorithm: sha256WithRSAEncryption
38:82:8d:62:97:e2:e9:77:25:f2:80:78:3a:58:6c:99:cc:2b:
d1:c0:ba:f4:b5:8a:24:50:fb:7a:43:5b:26:55:f4:c6:d4:2a:
cc:0b:a6:f2:96:54:58:e6:86:e7:3f:17:df:af:21:67:65:a8:
36:4c:c2:f1:cc:37:51:76:42:c7:4d:4e:53:9e:5d:73:bb:97:
9e:97:4e:23:80:46:b4:69:2d:0d:4a:9b:c2:de:38:c0:22:ca:
80:98:6e:3d:41:24:2c:fe:57:30:b7:45:00:37:ba:8a:d9:22:
6b:0d:5f:57:a8:61:70:5d:ac:19:3a:17:f0:d1:b8:5b:be:ed:
3c:9d:bd:a9:de:f4:ee:fc:46:f8:61:63:27:a6:7a:8d:c2:72:
bf:b2:1d:d6:f8:0f:c8:af:38:9d:0b:65:b7:bb:4d:59:2c:86:
a4:ce:d1:5f:b1:b6:44:2f:01:7a:91:92:0e:3f:8d:a7:29:e4:
09:21:69:eb:15:70:8d:37:5a:c3:40:20:6a:a0:12:28:03:08:
3b:c4:6c:69:45:7d:ff:c5:8e:6f:8d:ae:fe:97:2a:6a:4b:27:
a9:09:b6:ee:41:2b:dd:de:42:57:db:4f:8a:21:fe:2f:15:c0:
10:de:1d:9a:4a:bd:dc:14:79:ad:9a:e5:1a:6c:38:14:93:68:
56:85:4c:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcd/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTY0NTQwWhcNMjYwOTA5MTY0NTQwWjAYMRYw
FAYDVQQDEw02YTYwZjNiNy0zZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArcKcVYFcw9uX21BFAoUA15cs1NoQTL8GIMeTGanwd2SJpWuFsuAowtbU
F1T1SObJxrx8697nwcJj4gabE6oZscssiPKzZqnTsXIhp0l4n0FtrQv/Tcnim5lS
dkuGdN8nfTuqFY6BvCPzmO/bs4vUMrZR07pM4ZwI6sO5w3bm/XbffdfbiKTDz2k/
+h+SdhGppej0ofYPtUUyxmzoYjzjkN2D/QAmB2uqT8BkT2GMTBltgD8ZLrzV5aE9
BcWlxS0QJS+QVNBWyCZ5y8oKfG9kxONxEWuL2s+0fw4WcimnPrXGqYrzLUCas/EQ
67BHaz0tauRaWZxt/ifC3h9MMUE34QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD+p
Wy0rUge+sUqow+DC826Ri4OhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNzk1RDVDNjg1RUMxMUYxQjQ4QUM5MEFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcUGMA0GCSqGSIb3DQEBCwUA
A4IBAQA4go1il+LpdyXygHg6WGyZzCvRwLr0tYokUPt6Q1smVfTG1CrMC6byllRY
5obnPxffryFnZag2TMLxzDdRdkLHTU5Tnl1zu5eel04jgEa0aS0NSpvC3jjAIsqA
mG49QSQs/lcwt0UAN7qK2SJrDV9XqGFwXawZOhfw0bhbvu08nb2p3vTu/Eb4YWMn
pnqNwnK/sh3W+A/IrzidC2W3u01ZLIakztFfsbZELwF6kZIOP42nKeQJIWnrFXCN
N1rDQCBqoBIoAwg7xGxpRX3/xY5vja7+lypqSyepCbbuQSvd3kJX20+KIf4vFcAQ
3h2aSr3cFHmtmuUabDgUk2hWhUzs
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:41 2026 by rpki-client