Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF7B2D9C835811F1AC6F9EDECE1D38B0.roa
File: FF7B2D9C835811F1AC6F9EDECE1D38B0.roa (raw, json)
Hash identifier: 7MZhuaQ5kls9P8VD58r7n5sr8bRHzPozWhztCfDbJ2k=
Subject key identifier: 78:AA:E8:01:BD:80:8B:AE:18:8B:B2:74:F1:3C:C1:4F:7C:0C:3A:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C62B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF7B2D9C835811F1AC6F9EDECE1D38B0.roa
Signing time: Sun 19 Jul 2026 10:02:49 +0000
ROA not before: Sun 19 Jul 2026 10:02:45 +0000
ROA not after: Sun 16 Aug 2026 10:02:45 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
45.197.144.0/24 maxlen: 24
45.197.145.0/24 maxlen: 24
45.197.146.0/24 maxlen: 24
45.197.147.0/24 maxlen: 24
45.197.148.0/24 maxlen: 24
45.197.149.0/24 maxlen: 24
45.197.150.0/24 maxlen: 24
45.197.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116267 (0x1c62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 10:02:45 2026 GMT
Not After : Aug 16 10:02:45 2026 GMT
Subject: CN=6a5ca0c9-45a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:7a:85:d3:49:25:82:cc:cc:b8:d0:ae:3a:
4c:c3:d9:49:59:4f:1e:6d:8e:21:e5:9a:41:69:b1:
91:9b:2e:0a:b2:e5:f3:90:c7:ff:af:07:42:15:b5:
b9:d9:b6:36:05:48:1b:bd:45:8b:d1:8e:9b:32:84:
60:61:96:84:6f:3e:5d:53:f4:84:1b:fb:ab:5e:93:
42:f0:33:ed:5a:df:b7:e6:9d:c8:98:84:c0:e6:30:
52:99:3d:5c:0f:b4:d4:9f:40:0d:2f:70:40:a9:58:
14:3f:66:33:e6:b3:2f:e3:44:b5:10:29:4c:63:d3:
9d:c7:18:ea:1c:80:8a:93:d2:00:67:42:ef:ef:85:
e9:b6:d4:d0:57:f1:62:f1:d7:39:5f:f0:c3:8a:31:
d7:cc:e3:ff:c7:b9:2e:ab:55:d7:f8:2f:7d:39:6f:
7f:b7:45:e1:1c:dd:ba:09:44:83:c9:ce:47:e9:74:
6c:17:1f:0a:a0:2e:bd:3f:89:56:2d:15:34:ac:32:
cd:9c:13:b1:e4:c9:a1:ad:99:f8:d7:f7:6c:b3:1a:
44:06:0f:ea:36:18:e5:a7:c7:a8:f9:6e:f3:b2:3c:
a3:a8:62:25:79:9c:ce:da:f5:ab:0c:00:7f:5e:df:
93:92:31:b2:0e:25:2e:50:ba:24:71:96:93:57:22:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:E8:01:BD:80:8B:AE:18:8B:B2:74:F1:3C:C1:4F:7C:0C:3A:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF7B2D9C835811F1AC6F9EDECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
21:91:5c:7b:c5:93:0a:2f:ae:fa:97:5f:ca:bd:3e:7b:cc:35:
6b:2c:c6:88:35:8b:1d:c9:26:76:31:9a:55:b8:56:5d:56:52:
cc:f2:25:7f:a7:b8:05:39:e4:be:ea:76:70:ae:af:d9:ed:f2:
df:97:ce:bb:c4:90:5f:60:29:7f:b4:2b:01:59:0e:7f:89:1f:
1f:4d:31:16:73:75:07:c6:49:9a:96:67:e0:84:0e:fb:3d:c5:
39:19:89:27:9a:89:e2:41:0e:42:70:fb:b7:b5:6b:07:69:04:
0d:0e:8c:06:36:79:3d:66:08:d5:43:aa:62:80:1c:a1:ee:dc:
4b:c0:3f:8c:39:82:85:e6:ba:9a:ca:e5:0f:24:f4:b1:56:68:
93:ba:22:39:d6:17:67:da:df:38:47:a9:92:a7:68:03:c0:86:
4b:4a:65:20:06:05:ff:7c:d2:6e:34:ad:cc:ba:b5:bb:b0:f6:
fe:7a:49:32:13:21:13:73:e5:74:90:83:61:05:e3:fd:90:1b:
21:5d:89:e1:68:b7:97:c8:29:83:07:91:ce:56:22:b3:f4:33:
b5:6d:0b:0e:f7:40:ac:8c:3c:47:64:7d:d9:26:b3:3a:25:d2:
76:c4:99:ac:e0:b9:08:28:d9:13:53:70:4c:4c:52:85:fb:5d:
44:de:2c:1b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcYrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE5MTAwMjQ1WhcNMjYwODE2MTAwMjQ1WjAYMRYw
FAYDVQQDEw02YTVjYTBjOS00NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4zd6hdNJJYLMzLjQrjpMw9lJWU8ebY4h5ZpBabGRmy4KsuXzkMf/rwdC
FbW52bY2BUgbvUWL0Y6bMoRgYZaEbz5dU/SEG/urXpNC8DPtWt+35p3ImITA5jBS
mT1cD7TUn0ANL3BAqVgUP2Yz5rMv40S1EClMY9OdxxjqHICKk9IAZ0Lv74XpttTQ
V/Fi8dc5X/DDijHXzOP/x7kuq1XX+C99OW9/t0XhHN26CUSDyc5H6XRsFx8KoC69
P4lWLRU0rDLNnBOx5MmhrZn41/dssxpEBg/qNhjlp8eo+W7zsjyjqGIleZzO2vWr
DAB/Xt+TkjGyDiUuULokcZaTVyK9WQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHiq
6AG9gIuuGIuydPE8wU98DDo9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRjdCMkQ5QzgzNTgxMUYxQUM2RjlFREVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcWQMA0GCSqGSIb3DQEBCwUA
A4IBAQAhkVx7xZMKL676l1/KvT57zDVrLMaINYsdySZ2MZpVuFZdVlLM8iV/p7gF
OeS+6nZwrq/Z7fLfl867xJBfYCl/tCsBWQ5/iR8fTTEWc3UHxkmalmfghA77PcU5
GYknmoniQQ5CcPu3tWsHaQQNDowGNnk9ZgjVQ6pigByh7txLwD+MOYKF5rqayuUP
JPSxVmiTuiI51hdn2t84R6mSp2gDwIZLSmUgBgX/fNJuNK3MurW7sPb+ekkyEyET
c+V0kINhBeP9kBshXYnhaLeXyCmDB5HOViKz9DO1bQsO90CsjDxHZH3ZJrM6JdJ2
xJms4LkIKNkTU3BMTFKF+11E3iwb
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:34 2026 by rpki-client