Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8F7BDE60B411F1B611CAFBCE1D38B0.roa
File: 6D8F7BDE60B411F1B611CAFBCE1D38B0.roa (raw, json)
Hash identifier: bE6DE+83c3lTNK9gg1qKvv0JgZyUwMC1w0g1JQ0U8VI=
Subject key identifier: 48:F2:3D:E7:99:92:52:02:09:C2:8F:85:A1:CA:D0:36:3B:DA:11:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8F7BDE60B411F1B611CAFBCE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:59:08 +0000
ROA not before: Fri 05 Jun 2026 07:59:03 +0000
ROA not after: Sun 12 Jul 2026 07:59:03 +0000
asID: 401696
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113637 (0x1bbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 07:59:03 2026 GMT
Not After : Jul 12 07:59:03 2026 GMT
Subject: CN=6a2281cc-5951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:c2:65:d4:7d:b5:0f:58:9c:e6:40:a8:a6:
09:dd:02:22:38:64:60:df:04:2b:37:47:c9:d4:5f:
76:0a:7a:8f:51:c6:7b:04:ad:66:ff:c7:75:4f:e8:
19:26:88:32:db:c6:38:c6:96:6b:5f:71:4f:ed:ce:
9a:63:6c:7a:41:91:17:5e:a5:a8:3d:65:16:df:ef:
bb:c6:85:66:c6:32:bf:c2:44:a0:d9:12:e9:e4:a0:
ec:7e:dc:42:2e:95:32:3a:e4:ed:d1:70:bd:d7:56:
04:e1:1c:35:62:1c:96:3d:f1:a5:19:67:f0:08:68:
84:35:c3:9d:2f:b4:84:10:60:35:67:ef:c8:a8:49:
2e:48:f6:7f:8e:6b:7a:7e:ed:93:7c:96:a5:76:45:
3c:da:52:a7:82:00:23:bb:2e:03:86:88:9e:8d:97:
c0:fb:04:dd:fb:5f:1d:bc:02:f4:dc:ce:f0:9e:6a:
2e:80:64:b2:0d:b4:c0:bb:cc:a5:e3:36:2c:97:1e:
a1:8c:95:c4:bb:fd:13:ad:f1:1e:32:f8:9d:74:22:
b2:b5:18:5b:59:30:64:06:cb:f8:b3:3b:69:55:73:
9f:75:49:e8:35:0f:23:ce:47:59:45:13:0f:86:6f:
c4:61:ff:41:d7:6d:5d:d1:c0:6a:1b:8d:14:f1:9d:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F2:3D:E7:99:92:52:02:09:C2:8F:85:A1:CA:D0:36:3B:DA:11:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8F7BDE60B411F1B611CAFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:c9:82:18:ef:98:8f:b9:24:4c:8e:a8:34:94:4b:bf:f9:18:
11:0d:7a:ec:4a:e0:d2:10:3c:58:a3:93:4c:05:bd:1b:f9:b3:
1f:35:a0:83:fd:8d:f3:82:74:20:50:90:0e:0e:ff:09:6c:ad:
ba:38:02:24:8e:f0:b2:f2:97:dc:ec:83:17:50:80:5f:d0:9d:
07:f0:d2:2b:30:c7:a5:26:4f:a1:6b:35:db:ef:e1:39:d8:75:
50:e8:8a:20:c4:b4:6a:84:5c:5a:8c:9e:dc:db:ff:4d:45:8f:
6a:ad:41:70:d7:dc:1d:51:f6:d0:b5:b1:25:1e:b4:01:30:e9:
44:5e:92:88:1c:e2:68:d9:10:73:7e:31:98:1f:0f:90:60:1d:
80:f5:aa:58:af:73:60:f3:24:fa:4f:63:25:2c:42:63:b9:4a:
63:3e:5a:2b:e6:ca:db:80:21:39:c6:1a:a3:02:87:6d:fb:5f:
41:c6:82:25:f8:96:03:1f:f4:67:d9:a6:8c:8b:5c:a3:dc:69:
16:54:bc:cd:08:a4:d0:52:cf:9c:59:4b:67:64:7b:da:61:3f:
d3:8b:77:42:52:ef:f4:b3:11:96:55:66:3e:f4:2e:03:ed:2a:
a8:f3:34:a7:4d:9b:d4:d9:ca:d3:d7:90:9c:e6:58:04:98:3c:
89:27:94:83
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbvlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjA1MDc1OTAzWhcNMjYwNzEyMDc1OTAzWjAYMRYw
FAYDVQQDEw02YTIyODFjYy01OTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAptfCZdR9tQ9YnOZAqKYJ3QIiOGRg3wQrN0fJ1F92CnqPUcZ7BK1m/8d1
T+gZJogy28Y4xpZrX3FP7c6aY2x6QZEXXqWoPWUW3++7xoVmxjK/wkSg2RLp5KDs
ftxCLpUyOuTt0XC911YE4Rw1YhyWPfGlGWfwCGiENcOdL7SEEGA1Z+/IqEkuSPZ/
jmt6fu2TfJaldkU82lKnggAjuy4DhoiejZfA+wTd+18dvAL03M7wnmougGSyDbTA
u8yl4zYslx6hjJXEu/0TrfEeMviddCKytRhbWTBkBsv4sztpVXOfdUnoNQ8jzkdZ
RRMPhm/EYf9B121d0cBqG40U8Z3XhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEjy
PeeZklICCcKPhaHK0DY72hGWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RDhGN0JERTYwQjQxMUYxQjYxMUNBRkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQAeyYIY75iPuSRMjqg0lEu/+RgRDXrsSuDSEDxYo5NMBb0b+bMfNaCD/Y3z
gnQgUJAODv8JbK26OAIkjvCy8pfc7IMXUIBf0J0H8NIrMMelJk+hazXb7+E52HVQ
6IogxLRqhFxajJ7c2/9NRY9qrUFw19wdUfbQtbElHrQBMOlEXpKIHOJo2RBzfjGY
Hw+QYB2A9apYr3Ng8yT6T2MlLEJjuUpjPlor5srbgCE5xhqjAodt+19BxoIl+JYD
H/Rn2aaMi1yj3GkWVLzNCKTQUs+cWUtnZHvaYT/Ti3dCUu/0sxGWVWY+9C4D7Sqo
8zSnTZvU2crT15Cc5lgEmDyJJ5SD
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:36:57 2026 by rpki-client