Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5FABAE880B11F18C44F602CF1D38B0.roa
File: 1A5FABAE880B11F18C44F602CF1D38B0.roa (raw, json)
Hash identifier: urrNE2n85J0hamBbbRZp8X9p1SJUHGa0hGx/124znVs=
Subject key identifier: 58:A7:B6:A2:F1:E2:2F:2F:06:93:37:27:52:37:2B:7B:5B:59:C8:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5FABAE880B11F18C44F602CF1D38B0.roa
Signing time: Sat 25 Jul 2026 09:27:50 +0000
ROA not before: Sat 25 Jul 2026 09:27:46 +0000
ROA not after: Thu 03 Sep 2026 09:27:46 +0000
asID: 150055
IP address blocks: 45.199.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116733 (0x1c7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:27:46 2026 GMT
Not After : Sep 3 09:27:46 2026 GMT
Subject: CN=6a648196-4159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:cd:bc:08:95:05:8a:60:16:0d:2d:e3:0d:
0f:d6:f9:d9:0d:ba:8b:34:f2:1e:5d:da:03:d2:d3:
18:20:0f:d5:d1:7d:9e:d4:b4:da:52:fe:08:d7:11:
86:b9:b2:a0:2c:d1:08:10:df:80:52:eb:f8:b9:32:
8e:08:63:ab:39:16:f3:69:5c:e7:1f:1d:b2:51:d3:
3b:57:07:93:15:42:1b:d3:66:4f:ca:75:d4:1e:ac:
a7:e7:aa:91:7d:0c:8e:e2:b5:6d:28:8e:b1:37:69:
16:d4:03:59:d1:b2:bc:9b:4d:c3:8e:28:d8:e5:48:
a6:de:3f:6a:c9:4f:e1:2a:cd:cb:20:18:28:00:55:
3a:a5:69:d8:ce:17:31:73:ec:9f:04:96:19:c6:cf:
97:8e:3f:a4:14:6c:df:fe:71:09:10:ec:01:14:c3:
19:53:68:cb:21:ea:66:d6:95:fe:23:40:16:8e:e7:
92:bb:57:25:8e:65:3f:f7:07:94:83:7b:5e:87:64:
06:e6:8a:73:76:eb:88:be:ca:d6:8b:c6:90:73:e4:
f1:e9:a4:b2:44:92:f1:35:72:2b:c4:30:e8:ed:de:
3c:91:99:9c:5a:84:80:9c:d0:c3:74:99:af:14:8c:
a1:6d:af:2f:2c:a8:0e:1e:74:7a:05:ef:ec:39:46:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A7:B6:A2:F1:E2:2F:2F:06:93:37:27:52:37:2B:7B:5B:59:C8:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5FABAE880B11F18C44F602CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:98:a4:8c:4d:74:4c:a7:48:e4:d1:ee:35:06:69:1e:f7:5a:
d9:2e:c8:48:5b:89:9c:86:e5:4d:1f:a0:e6:40:5f:52:9b:fe:
12:cc:e4:31:9b:77:11:0f:56:5b:ec:d7:f8:96:4e:29:11:b2:
bd:16:1e:d0:bd:6e:3a:da:4f:ed:29:3e:26:98:83:52:c7:63:
d9:79:62:35:bf:c6:54:32:00:78:16:44:ed:2d:de:8a:8d:a1:
da:2b:89:bc:f1:89:77:e9:5b:f4:50:97:93:f3:b8:da:18:fc:
b4:f8:20:a8:66:8e:36:7c:22:93:20:c3:62:06:e1:cb:4e:33:
61:ef:d3:ee:de:d9:b3:5e:ee:3e:1a:ae:35:da:95:d5:1f:6d:
fd:8f:27:54:1b:eb:55:af:99:5b:7b:a2:cd:96:99:6b:86:b7:
b1:13:7e:93:7d:6f:ee:03:50:68:88:6e:00:62:87:b4:97:48:
cd:0c:23:1f:b5:7a:8f:1f:40:16:d9:19:d5:db:1e:db:1c:61:
cf:35:81:10:86:7e:85:e1:47:e9:12:de:52:7e:75:74:af:d3:
31:2e:d6:c8:2d:e9:d8:c8:d6:f0:6a:c6:52:0a:58:4f:82:98:
25:a4:ab:94:f9:c4:f8:30:73:a2:79:42:64:f1:78:70:9a:6d:
00:3e:7f:d1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcf9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI1MDkyNzQ2WhcNMjYwOTAzMDkyNzQ2WjAYMRYw
FAYDVQQDEw02YTY0ODE5Ni00MTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs4jNvAiVBYpgFg0t4w0P1vnZDbqLNPIeXdoD0tMYIA/V0X2e1LTaUv4I
1xGGubKgLNEIEN+AUuv4uTKOCGOrORbzaVznHx2yUdM7VweTFUIb02ZPynXUHqyn
56qRfQyO4rVtKI6xN2kW1ANZ0bK8m03DjijY5Uim3j9qyU/hKs3LIBgoAFU6pWnY
zhcxc+yfBJYZxs+Xjj+kFGzf/nEJEOwBFMMZU2jLIepm1pX+I0AWjueSu1cljmU/
9weUg3teh2QG5opzduuIvsrWi8aQc+Tx6aSyRJLxNXIrxDDo7d48kZmcWoSAnNDD
dJmvFIyhba8vLKgOHnR6Be/sOUYptwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFin
tqLx4i8vBpM3J1I3K3tbWchuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQTVGQUJBRTg4MEIxMUYxOEM0NEY2MDJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceLMA0GCSqGSIb3DQEBCwUA
A4IBAQCNmKSMTXRMp0jk0e41Bmke91rZLshIW4mchuVNH6DmQF9Sm/4SzOQxm3cR
D1Zb7Nf4lk4pEbK9Fh7QvW462k/tKT4mmINSx2PZeWI1v8ZUMgB4FkTtLd6KjaHa
K4m88Yl36Vv0UJeT87jaGPy0+CCoZo42fCKTIMNiBuHLTjNh79Pu3tmzXu4+Gq41
2pXVH239jydUG+tVr5lbe6LNlplrhrexE36TfW/uA1BoiG4AYoe0l0jNDCMftXqP
H0AW2RnV2x7bHGHPNYEQhn6F4UfpEt5SfnV0r9MxLtbILenYyNbwasZSClhPgpgl
pKuU+cT4MHOieUJk8Xhwmm0APn/R
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:44 2026 by rpki-client