Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A756F46657311F1B75C6AD4CE1D38B0.roa
File: 9A756F46657311F1B75C6AD4CE1D38B0.roa (raw, json)
Hash identifier: Ammpoa3m9JtvMJn/cWOXGrkg0KgYVUS9Oo+bTxIMoXM=
Subject key identifier: A0:D4:BC:27:E9:F8:C3:A5:7E:A8:63:FC:5B:2F:A8:7C:A1:42:A7:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A756F46657311F1B75C6AD4CE1D38B0.roa
Signing time: Thu 11 Jun 2026 08:57:41 +0000
ROA not before: Thu 11 Jun 2026 08:57:37 +0000
ROA not after: Thu 16 Jul 2026 08:57:37 +0000
asID: 212238
IP address blocks: 45.195.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113903 (0x1bcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:57:37 2026 GMT
Not After : Jul 16 08:57:37 2026 GMT
Subject: CN=6a2a7885-d0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:46:f2:3b:8d:d7:f5:fb:bf:75:92:03:a2:
93:de:05:96:ce:16:33:73:30:57:fd:05:a5:1f:3e:
cf:d4:a2:5a:09:81:2e:b8:87:17:d8:a1:1d:f4:43:
6f:1c:75:e2:45:ab:78:4a:bb:42:60:ca:55:77:b1:
73:9c:bd:70:72:96:c9:f4:5d:f0:e5:9d:0f:99:df:
81:3f:96:6c:aa:cf:21:5b:13:fb:5c:ec:44:a6:5f:
f4:c3:1f:78:db:ca:12:aa:39:9e:41:35:49:da:23:
c7:a7:36:95:e3:84:38:24:42:4d:a8:82:e0:f4:b2:
e3:b2:04:58:1b:55:25:ec:64:17:b8:d4:e3:84:10:
7a:39:cf:56:34:30:e5:07:32:9f:75:71:d6:95:ba:
8d:49:0a:6d:8f:af:6d:f4:57:7b:72:1e:26:a9:78:
c1:9b:8f:9c:21:29:f6:ef:85:c5:25:17:51:53:90:
67:c7:a0:95:58:c1:3d:99:18:eb:9d:66:c2:ac:b6:
2b:67:57:eb:1e:59:29:a9:4d:df:23:45:1a:41:ea:
fa:7b:51:d4:cb:ac:ed:d9:43:31:14:55:d3:65:60:
eb:e2:16:15:02:12:48:93:8f:ae:9d:1e:f7:e3:19:
1b:9f:16:c6:2f:5f:77:3e:d0:1d:66:38:1c:6b:62:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:BC:27:E9:F8:C3:A5:7E:A8:63:FC:5B:2F:A8:7C:A1:42:A7:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A756F46657311F1B75C6AD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.88.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:a0:70:ac:86:16:f4:7f:8e:c2:64:c6:83:78:1b:8a:3d:63:
5f:93:1c:2a:21:52:20:d4:bf:f3:ae:34:8c:4f:a3:b3:c9:ae:
42:10:1a:0e:d0:7a:e0:16:69:24:8b:14:f9:45:85:ea:63:52:
10:e3:86:30:61:13:34:1c:6c:bd:27:de:31:cf:82:20:db:4f:
12:4c:3c:5c:1e:ff:db:52:1a:5a:eb:99:ee:82:6c:f5:d5:00:
a8:01:aa:4a:84:a9:b2:51:c0:20:89:59:31:68:61:b0:ae:e3:
bf:13:2b:81:53:c4:36:1e:40:ce:ae:41:ea:a0:cd:f9:95:0a:
f9:92:87:28:a7:18:9a:dd:09:fb:fd:2c:39:ca:b9:ba:ff:d1:
e8:da:98:4e:7d:b8:55:d9:93:fe:95:df:6a:55:c4:8d:1a:8d:
0f:72:94:2d:83:3a:0c:07:df:b5:cb:19:d9:f9:cd:ea:d2:bb:
4d:63:9b:40:a9:fb:f8:41:2c:32:ff:f2:90:3e:28:5f:56:87:
83:d6:11:e6:bc:96:50:5b:d0:96:57:c8:19:d7:31:00:f2:a6:
1d:2c:4e:f1:9e:44:3f:4f:9e:4c:ea:28:ba:3f:b3:95:8a:86:
91:f2:72:04:a7:bb:57:a9:2e:f3:10:2a:d1:53:76:9f:af:2e:
7e:70:94:0a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbzvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjExMDg1NzM3WhcNMjYwNzE2MDg1NzM3WjAYMRYw
FAYDVQQDEw02YTJhNzg4NS1kMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1XBG8juN1/X7v3WSA6KT3gWWzhYzczBX/QWlHz7P1KJaCYEuuIcX2KEd
9ENvHHXiRat4SrtCYMpVd7FznL1wcpbJ9F3w5Z0Pmd+BP5Zsqs8hWxP7XOxEpl/0
wx9428oSqjmeQTVJ2iPHpzaV44Q4JEJNqILg9LLjsgRYG1Ul7GQXuNTjhBB6Oc9W
NDDlBzKfdXHWlbqNSQptj69t9Fd7ch4mqXjBm4+cISn274XFJRdRU5Bnx6CVWME9
mRjrnWbCrLYrZ1frHlkpqU3fI0UaQer6e1HUy6zt2UMxFFXTZWDr4hYVAhJIk4+u
nR734xkbnxbGL193PtAdZjgca2KxwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKDU
vCfp+MOlfqhj/FsvqHyhQqdiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTc1NkY0NjY1NzMxMUYxQjc1QzZBRDRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcNYMA0GCSqGSIb3DQEBCwUA
A4IBAQAsoHCshhb0f47CZMaDeBuKPWNfkxwqIVIg1L/zrjSMT6Ozya5CEBoO0Hrg
FmkkixT5RYXqY1IQ44YwYRM0HGy9J94xz4Ig208STDxcHv/bUhpa65nugmz11QCo
AapKhKmyUcAgiVkxaGGwruO/EyuBU8Q2HkDOrkHqoM35lQr5kocopxia3Qn7/Sw5
yrm6/9Ho2phOfbhV2ZP+ld9qVcSNGo0PcpQtgzoMB9+1yxnZ+c3q0rtNY5tAqfv4
QSwy//KQPihfVoeD1hHmvJZQW9CWV8gZ1zEA8qYdLE7xnkQ/T55M6ii6P7OVioaR
8nIEp7tXqS7zECrRU3afry5+cJQK
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:36 2026 by rpki-client