Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A95388646D11F1BD493B0ACF1D38B0.roa
File: 88A95388646D11F1BD493B0ACF1D38B0.roa (raw, json)
Hash identifier: QWlmZen/seMEQeDl96bYITX1XjRl+HsC+5N0QQDPXZ0=
Subject key identifier: B9:A1:CC:71:37:D6:2E:30:F2:21:A7:DE:F2:79:0E:2A:7C:37:58:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A95388646D11F1BD493B0ACF1D38B0.roa
Signing time: Wed 10 Jun 2026 01:41:43 +0000
ROA not before: Wed 10 Jun 2026 01:41:39 +0000
ROA not after: Wed 17 Jun 2026 01:41:39 +0000
asID: 38136
IP address blocks: 45.196.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113800 (0x1bc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 01:41:39 2026 GMT
Not After : Jun 17 01:41:39 2026 GMT
Subject: CN=6a28c0d7-1fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:d0:ad:0e:75:10:1d:16:76:5e:40:6d:61:
72:84:a2:df:99:65:b5:30:7d:6b:1b:35:48:f2:4c:
84:e0:c0:62:b0:40:f4:00:f3:24:ec:3e:39:d5:7f:
35:21:1a:0f:a5:fc:40:a3:93:40:68:8e:70:d4:5a:
e3:a5:1c:4a:d9:b8:64:a1:0f:9d:b8:27:57:7a:e3:
6b:3c:22:0f:0d:dd:7e:0b:16:42:db:09:55:43:23:
61:a4:b0:a0:6c:2c:39:7b:80:49:d9:39:3e:df:44:
96:05:69:68:5c:6f:6a:cd:b0:1e:43:63:83:9c:09:
60:6c:af:7d:98:27:6f:54:35:ff:01:16:70:26:b2:
5f:11:28:88:9f:7e:a8:21:a2:40:8b:fa:70:cc:54:
eb:0d:6e:89:35:68:1a:10:f1:84:5b:d6:98:7e:6b:
98:ce:45:95:9b:a1:a4:64:73:4d:20:24:b5:4e:aa:
c2:88:75:63:08:70:9d:d6:4c:f5:4c:d4:7f:1b:47:
91:c7:6f:fa:82:d8:1b:e7:0b:7c:83:d2:bb:06:fe:
92:18:4d:b7:67:65:57:5d:b0:90:bc:ca:ef:26:fd:
af:3d:5d:32:a5:e8:bb:11:96:94:8d:1a:c3:52:d9:
e3:c8:31:13:4d:6f:59:80:7e:5c:b0:dd:4f:8f:ae:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:CC:71:37:D6:2E:30:F2:21:A7:DE:F2:79:0E:2A:7C:37:58:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A95388646D11F1BD493B0ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.98.0/23
Signature Algorithm: sha256WithRSAEncryption
80:2c:7d:c4:b5:88:a8:02:83:3b:6c:58:cd:ff:2c:2b:b4:09:
b4:bb:6e:f6:92:b3:43:d0:fb:12:31:98:50:f1:f0:70:0b:3f:
70:b0:68:3a:77:ea:86:52:06:c8:ee:03:f8:df:f7:75:bb:9f:
6c:d1:2c:11:95:f9:c8:cd:ba:47:c0:d1:12:5e:d7:1b:b7:ef:
30:d5:77:d6:0c:2b:3d:03:e5:cf:28:35:ed:f9:ac:e0:06:29:
2c:0d:16:38:d7:0c:56:0c:e2:a2:e2:b7:5a:22:48:d2:64:5d:
59:a7:ae:25:d2:24:1b:d6:a2:57:ad:69:2b:de:7c:3b:2f:01:
a1:2e:97:ab:89:0d:33:2d:f0:0e:ce:36:a0:b3:65:d2:66:39:
cd:3b:a4:36:b3:6b:6e:33:cf:ed:0c:02:52:3d:e2:3d:8c:db:
73:5b:b3:68:80:cf:70:b0:55:50:ee:a6:49:00:91:e6:51:7b:
4e:bb:8a:bb:6d:a9:83:dc:17:42:47:7d:8c:c3:2a:7e:ba:b7:
92:8e:8d:61:a0:09:c9:34:6f:54:a3:20:fe:53:d8:5c:d3:a1:
a7:41:47:20:a1:42:f9:4d:af:a3:57:80:a9:3d:94:40:27:81:
b5:c1:6d:6d:61:56:4d:95:99:d1:4d:f4:21:a0:df:d2:36:19:
3d:ab:07:71
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbyIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjEwMDE0MTM5WhcNMjYwNjE3MDE0MTM5WjAYMRYw
FAYDVQQDEw02YTI4YzBkNy0xZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwLjQrQ51EB0Wdl5AbWFyhKLfmWW1MH1rGzVI8kyE4MBisED0APMk7D45
1X81IRoPpfxAo5NAaI5w1FrjpRxK2bhkoQ+duCdXeuNrPCIPDd1+CxZC2wlVQyNh
pLCgbCw5e4BJ2Tk+30SWBWloXG9qzbAeQ2ODnAlgbK99mCdvVDX/ARZwJrJfESiI
n36oIaJAi/pwzFTrDW6JNWgaEPGEW9aYfmuYzkWVm6GkZHNNICS1TqrCiHVjCHCd
1kz1TNR/G0eRx2/6gtgb5wt8g9K7Bv6SGE23Z2VXXbCQvMrvJv2vPV0ypei7EZaU
jRrDUtnjyDETTW9ZgH5csN1Pj64DawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLmh
zHE31i4w8iGn3vJ5Dip8N1gpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OEE5NTM4ODY0NkQxMUYxQkQ0OTNCMEFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcRiMA0GCSqGSIb3DQEBCwUA
A4IBAQCALH3EtYioAoM7bFjN/ywrtAm0u272krND0PsSMZhQ8fBwCz9wsGg6d+qG
UgbI7gP43/d1u59s0SwRlfnIzbpHwNESXtcbt+8w1XfWDCs9A+XPKDXt+azgBiks
DRY41wxWDOKi4rdaIkjSZF1Zp64l0iQb1qJXrWkr3nw7LwGhLperiQ0zLfAOzjag
s2XSZjnNO6Q2s2tuM8/tDAJSPeI9jNtzW7NogM9wsFVQ7qZJAJHmUXtOu4q7bamD
3BdCR32Mwyp+ureSjo1hoAnJNG9UoyD+U9hc06GnQUcgoUL5Ta+jV4CpPZRAJ4G1
wW1tYVZNlZnRTfQhoN/SNhk9qwdx
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:07:40 2026 by rpki-client