Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB1B1B684F811F187DE23C3CE1D38B0.roa
File: EDB1B1B684F811F187DE23C3CE1D38B0.roa (raw, json)
Hash identifier: lJEyHPLG12lky7qSlxK1+j2nwy3o6/TTFzUXVr++6m0=
Subject key identifier: 41:2B:36:51:3B:4D:30:50:E1:8A:43:E3:CB:64:43:55:53:14:F0:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C700
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB1B1B684F811F187DE23C3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 11:40:10 +0000
ROA not before: Tue 21 Jul 2026 11:40:06 +0000
ROA not after: Wed 09 Sep 2026 11:40:06 +0000
asID: 401783
IP address blocks: 45.192.113.0/24 maxlen: 24
45.192.114.0/24 maxlen: 24
45.192.116.0/23 maxlen: 24
45.192.118.0/23 maxlen: 24
45.192.235.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.197.3.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.197.24.0/24 maxlen: 24
45.198.5.0/24 maxlen: 24
45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116480 (0x1c700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 11:40:06 2026 GMT
Not After : Sep 9 11:40:06 2026 GMT
Subject: CN=6a5f5a9a-9be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:c8:78:e7:ad:16:b8:3c:f1:3e:f4:f8:3c:
48:5e:c2:99:17:ab:4a:af:08:62:d0:ad:d1:78:8d:
ed:95:39:a6:87:33:88:8d:f5:60:78:4a:8f:da:0b:
4a:57:9f:29:6b:81:19:a3:3a:99:5a:63:38:6a:d5:
38:d9:4e:ba:29:a7:33:a1:dd:92:76:b2:b5:57:b4:
ad:a9:83:9e:06:9e:b0:4c:66:3a:cb:f4:57:0a:4c:
03:cc:b5:bb:d4:20:03:ac:7d:2b:64:47:e4:30:c9:
58:aa:c5:d8:90:e1:7a:88:79:ef:7f:03:67:41:37:
fb:d9:84:34:d5:e0:f0:f9:33:d4:66:6a:95:00:16:
f4:57:61:d5:ba:af:f3:53:ac:9d:48:22:32:c6:b7:
81:2d:c0:32:d4:8c:13:12:eb:27:de:16:38:03:87:
4f:77:1c:6a:74:72:26:9f:e8:d9:68:da:11:ee:7e:
d9:69:e4:48:cf:b2:3a:2f:50:8a:31:f7:cd:94:26:
64:7d:a0:0d:88:ec:1a:b5:09:1d:01:ea:58:c0:c4:
b3:4a:d4:fe:2b:41:75:29:5c:b9:bd:fa:d2:3c:ec:
4f:1d:11:ea:1f:97:1e:16:64:47:f9:91:65:f5:1e:
b9:0f:ad:ad:8c:1f:6f:84:f8:b0:79:5b:31:2b:6f:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2B:36:51:3B:4D:30:50:E1:8A:43:E3:CB:64:43:55:53:14:F0:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDB1B1B684F811F187DE23C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.113.0-45.192.114.255
45.192.116.0/22
45.192.235.0/24
45.195.255.0/24
45.197.3.0/24
45.197.8.0/24
45.197.10.0/23
45.197.24.0/24
45.198.5.0/24
45.198.16.0-45.198.18.255
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
37:88:62:eb:64:d5:65:88:75:f7:92:81:fa:20:b5:a7:d0:f4:
fa:2b:32:13:f9:4b:ee:62:4b:c4:f6:1d:d4:ec:f1:46:02:ea:
94:5a:65:37:10:23:77:7b:06:e2:50:e8:d4:53:03:06:bb:c2:
ac:0f:d1:40:da:6f:49:72:0b:f0:9e:2a:79:44:b4:91:0d:ce:
a7:fe:54:6c:f7:a0:c6:c4:51:28:cb:02:99:fa:74:7f:fd:e1:
8f:2f:4a:f8:74:66:ee:6d:8a:af:c6:4a:d3:56:6b:86:69:97:
49:4f:bd:21:c3:7a:27:33:0c:27:b5:2d:84:8a:3d:f5:8b:dd:
f9:9a:4b:57:42:10:f6:21:46:35:d2:61:2b:1e:65:96:24:cc:
5d:ec:c4:90:39:59:71:0d:63:1a:78:df:f8:00:d1:d4:9f:3c:
38:bd:2a:7c:64:af:2a:f6:64:7b:d5:7a:bc:eb:7f:10:13:d4:
20:92:89:a6:9e:fd:63:f0:17:88:43:fe:d1:ca:d8:12:10:68:
a0:79:c5:9b:40:02:79:2c:71:b6:a8:2b:b3:f5:ca:da:aa:e7:
5a:22:68:8f:2b:89:be:de:25:8f:f4:a4:7b:12:e8:04:f8:5f:
b2:f1:1e:73:12:67:5c:22:f3:0b:47:cf:8f:a8:94:9f:ba:f3:
29:c3:aa:dc
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgIDAccAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIxMTE0MDA2WhcNMjYwOTA5MTE0MDA2WjAYMRYw
FAYDVQQDEw02YTVmNWE5YS05YmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArnnIeOetFrg88T70+DxIXsKZF6tKrwhi0K3ReI3tlTmmhzOIjfVgeEqP
2gtKV58pa4EZozqZWmM4atU42U66Kaczod2SdrK1V7StqYOeBp6wTGY6y/RXCkwD
zLW71CADrH0rZEfkMMlYqsXYkOF6iHnvfwNnQTf72YQ01eDw+TPUZmqVABb0V2HV
uq/zU6ydSCIyxreBLcAy1IwTEusn3hY4A4dPdxxqdHImn+jZaNoR7n7ZaeRIz7I6
L1CKMffNlCZkfaANiOwatQkdAepYwMSzStT+K0F1KVy5vfrSPOxPHRHqH5ceFmRH
+ZFl9R65D62tjB9vhPiweVsxK296CwIDAQABo4IDCTCCAwUwHQYDVR0OBBYEFEEr
NlE7TTBQ4YpD48tkQ1VTFPBwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FREIxQjFCNjg0RjgxMUYxODdERTIzQzNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbDAMAwQALcBxAwQALcByAwQCLcB0
AwQALcDrAwQALcP/AwQALcUDAwQALcUIAwQBLcUKAwQALcUYAwQALcYFMAwDBAQt
xhADBAAtxhIDBAAtySMwDAMEAC3JKQMEAC3JKgMEAC3JMAMEAC3JPTANBgkqhkiG
9w0BAQsFAAOCAQEAN4hi62TVZYh195KB+iC1p9D0+isyE/lL7mJLxPYd1OzxRgLq
lFplNxAjd3sG4lDo1FMDBrvCrA/RQNpvSXIL8J4qeUS0kQ3Op/5UbPegxsRRKMsC
mfp0f/3hjy9K+HRm7m2Kr8ZK01ZrhmmXSU+9IcN6JzMMJ7UthIo99Yvd+ZpLV0IQ
9iFGNdJhKx5lliTMXezEkDlZcQ1jGnjf+ADR1J88OL0qfGSvKvZke9V6vOt/EBPU
IJKJpp79Y/AXiEP+0crYEhBooHnFm0ACeSxxtqgrs/XK2qrnWiJojyuJvt4lj/Sk
exLoBPhfsvEecxJnXCLzC0fPj6iUn7rzKcOq3A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:32:11 2026 by rpki-client