Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C0042AA873711F1925889F8CE1D38B0.roa
File: 5C0042AA873711F1925889F8CE1D38B0.roa (raw, json)
Hash identifier: /nMiFhXMrscSRyeIvDOTWtThY2FXJqpmhJmyEdhYMP0=
Subject key identifier: BA:83:AB:DC:99:14:7C:60:19:7D:5C:D9:2E:6C:FF:6A:FE:C7:3D:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C0042AA873711F1925889F8CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:12:06 +0000
ROA not before: Fri 24 Jul 2026 08:12:02 +0000
ROA not after: Tue 01 Sep 2026 08:12:02 +0000
asID: 11427
IP address blocks: 45.202.92.0/22 maxlen: 24
45.202.96.0/22 maxlen: 24
45.202.116.0/23 maxlen: 24
45.202.120.0/22 maxlen: 24
45.207.0.0/23 maxlen: 24
45.207.36.0/22 maxlen: 24
45.207.42.0/23 maxlen: 24
45.207.48.0/21 maxlen: 24
45.207.164.0/23 maxlen: 24
45.207.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116696 (0x1c7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:12:02 2026 GMT
Not After : Sep 1 08:12:02 2026 GMT
Subject: CN=6a631e56-ab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:9c:27:34:5e:37:18:bc:3d:2b:f7:f9:9d:
fc:a8:58:23:d2:27:5c:91:e3:cb:c6:5c:ce:ba:7f:
d2:32:bf:1d:51:de:60:66:c3:88:1f:2d:c5:2c:4a:
17:14:30:23:6d:3c:40:26:90:70:77:7f:54:a9:b0:
15:d0:62:77:46:8a:11:d5:69:60:ea:b7:25:55:4a:
75:af:89:9d:2b:29:d6:ac:1a:80:32:57:1e:2d:2d:
13:43:a1:91:72:f2:d7:67:87:09:11:18:5e:d4:79:
9f:89:17:3c:67:09:5b:4a:ee:b3:59:f3:5f:d1:f5:
0b:34:c2:85:8a:f4:84:2f:a1:75:d4:4d:ee:f9:36:
7a:14:45:88:2a:ab:d7:21:6a:f6:43:b9:7a:84:b5:
d6:61:81:b9:1a:67:96:a8:68:64:95:3b:de:45:a0:
07:0e:4e:73:dd:2d:8d:2d:a4:3c:7d:5f:30:5b:de:
89:3b:9f:3b:00:94:32:f7:cf:5e:15:4d:77:a6:63:
25:1f:a0:89:e1:b4:50:f5:19:9f:df:a0:31:fd:a5:
fb:ce:3b:c4:56:37:2d:eb:ee:00:2f:40:f7:e9:17:
7a:73:06:bf:fe:1e:a7:c8:6d:57:45:f7:81:e9:af:
57:6d:dc:32:7b:a7:a9:30:c9:a2:a1:ff:3a:7d:4c:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:AB:DC:99:14:7C:60:19:7D:5C:D9:2E:6C:FF:6A:FE:C7:3D:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C0042AA873711F1925889F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.92.0-45.202.99.255
45.202.116.0/23
45.202.120.0/22
45.207.0.0/23
45.207.36.0/22
45.207.42.0/23
45.207.48.0/21
45.207.164.0/23
45.207.170.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:b1:4a:8d:e2:96:a8:fd:33:c7:32:bb:35:b5:06:2d:bb:71:
00:17:70:be:10:bb:1b:69:08:a9:0d:88:a5:80:50:c9:20:82:
42:ba:fe:f6:0b:d9:dd:78:fb:27:18:25:99:0b:d7:0e:21:54:
d5:7d:35:3c:f9:51:1c:d7:d3:93:3a:14:f1:89:13:51:af:63:
fc:37:20:c8:0c:6c:5c:c4:99:cb:21:bf:2d:e7:40:35:d7:a8:
9c:77:8b:d7:62:15:5c:d0:88:25:f4:43:65:3c:74:07:9c:0f:
29:84:f0:a3:bc:8d:2e:8d:42:7a:84:be:90:a6:80:fc:3b:d0:
b5:fa:12:a1:91:bb:a6:17:e7:41:75:ae:97:b4:ff:5e:bb:62:
f2:9c:80:41:14:c0:2e:44:73:9f:2f:81:a3:03:b7:56:9d:56:
dd:b9:92:eb:f7:b7:9d:79:88:10:80:45:4d:a6:f6:71:cd:9e:
5b:f4:05:21:1b:78:ce:68:41:67:a3:9d:70:ff:72:81:81:cf:
23:70:48:af:86:a6:da:08:d3:db:ff:4c:46:dc:c8:0e:cd:dd:
3c:6e:ab:c3:f1:30:a3:4f:19:30:97:33:dc:d1:5b:3c:58:85:
70:9d:6f:6a:29:93:7a:c7:30:1a:4a:f1:bd:84:3f:20:26:c7:
e5:29:ad:6b
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAcfYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI0MDgxMjAyWhcNMjYwOTAxMDgxMjAyWjAYMRYw
FAYDVQQDEw02YTYzMWU1Ni1hYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxtecJzReNxi8PSv3+Z38qFgj0idckePLxlzOun/SMr8dUd5gZsOIHy3F
LEoXFDAjbTxAJpBwd39UqbAV0GJ3RooR1Wlg6rclVUp1r4mdKynWrBqAMlceLS0T
Q6GRcvLXZ4cJERhe1HmfiRc8ZwlbSu6zWfNf0fULNMKFivSEL6F11E3u+TZ6FEWI
KqvXIWr2Q7l6hLXWYYG5GmeWqGhklTveRaAHDk5z3S2NLaQ8fV8wW96JO587AJQy
989eFU13pmMlH6CJ4bRQ9Rmf36Ax/aX7zjvEVjct6+4AL0D36Rd6cwa//h6nyG1X
RfeB6a9Xbdwye6epMMmiof86fUy58QIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFLqD
q9yZFHxgGX1c2S5s/2r+xz2yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzAwNDJBQTg3MzcxMUYxOTI1ODg5RjhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBAItylwDBAItymADBAEtynQD
BAItyngDBAEtzwADBAItzyQDBAEtzyoDBAMtzzADBAEtz6QDBAEtz6owDQYJKoZI
hvcNAQELBQADggEBAKqxSo3ilqj9M8cyuzW1Bi27cQAXcL4QuxtpCKkNiKWAUMkg
gkK6/vYL2d14+ycYJZkL1w4hVNV9NTz5URzX05M6FPGJE1GvY/w3IMgMbFzEmcsh
vy3nQDXXqJx3i9diFVzQiCX0Q2U8dAecDymE8KO8jS6NQnqEvpCmgPw70LX6EqGR
u6YX50F1rpe0/167YvKcgEEUwC5Ec58vgaMDt1adVt25kuv3t515iBCARU2m9nHN
nlv0BSEbeM5oQWejnXD/coGBzyNwSK+GptoI09v/TEbcyA7N3Txuq8PxMKNPGTCX
M9zRWzxYhXCdb2opk3rHMBpK8b2EPyAmx+UprWs=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:31 2026 by rpki-client