Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6570DA288BF11F18DD7B1D5CE1D38B0.roa
File: D6570DA288BF11F18DD7B1D5CE1D38B0.roa (raw, json)
Hash identifier: HelMbHNerbYjwoLTrSaw1fYNK9osEYlTuckBJ1O5I+E=
Subject key identifier: 1F:05:F1:BA:E8:51:76:69:A6:5F:14:3E:3A:E4:4E:AE:46:DD:63:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C80E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6570DA288BF11F18DD7B1D5CE1D38B0.roa
Signing time: Sun 26 Jul 2026 07:01:34 +0000
ROA not before: Sun 26 Jul 2026 07:01:30 +0000
ROA not after: Fri 04 Sep 2026 07:01:30 +0000
asID: 44509
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116750 (0x1c80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:01:30 2026 GMT
Not After : Sep 4 07:01:30 2026 GMT
Subject: CN=6a65b0ce-ef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f8:57:49:17:7c:77:e1:a8:02:2b:41:c8:8f:
68:42:18:1d:36:59:c1:df:06:d1:0d:c6:ad:b5:48:
73:0c:c6:2a:f7:9c:07:8f:e7:84:aa:3a:dd:f6:be:
36:a4:ff:01:02:a0:16:b7:2a:8d:c2:0f:04:72:ac:
ce:7a:45:61:f2:67:dc:dd:bc:da:8b:db:98:d5:48:
bb:cf:33:4a:24:30:19:bc:19:b9:48:27:6e:52:3b:
86:8b:f1:5a:06:b2:9d:76:dd:fa:56:cf:3b:7c:b3:
fe:75:50:82:a7:3f:91:56:7c:24:bc:75:14:fc:86:
d2:2b:ba:34:a2:a6:66:8a:fb:22:53:71:08:ef:56:
a8:95:64:be:48:80:c2:9b:21:45:c7:de:77:23:e4:
aa:c8:cc:a0:98:79:16:1e:be:a0:59:8d:17:36:17:
e3:06:e0:02:8f:a4:a3:1f:d6:4d:86:0a:38:09:4c:
96:7e:7f:b3:7f:ba:71:68:dd:99:98:e0:e8:e9:68:
56:0b:1e:5b:c2:9c:57:0d:5a:c2:24:6c:ac:0f:05:
6a:b1:60:f7:a1:26:3c:ee:69:24:20:c0:f6:2c:7d:
f9:0d:f9:37:43:28:33:a1:ac:76:c7:56:19:85:e9:
32:d4:3e:0c:18:41:39:8d:2a:9b:bd:e8:15:fd:35:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:F1:BA:E8:51:76:69:A6:5F:14:3E:3A:E4:4E:AE:46:DD:63:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6570DA288BF11F18DD7B1D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9e:b2:56:96:8d:a1:ed:34:ff:a6:05:fa:be:57:0a:fe:04:
05:99:c2:0a:a1:0c:9f:c4:95:25:a3:e0:01:c7:38:ae:93:35:
b5:43:dc:23:14:26:d7:2f:54:ee:f1:4f:ff:07:ed:69:e5:d4:
76:d3:92:98:35:c6:82:43:0f:e0:f3:37:e2:1c:62:59:90:8c:
ed:81:fd:c3:0f:71:fb:13:13:a2:c2:03:d2:a8:17:93:a9:9a:
14:9b:24:3a:c7:f6:d7:cb:d8:73:cc:6e:53:41:c3:23:d7:7a:
fa:9b:ae:e8:41:ee:c5:1e:43:93:d6:bc:21:f3:d5:20:48:df:
57:e7:f7:71:55:11:cb:55:e8:55:12:19:7c:98:e8:6c:8b:e3:
12:9e:34:a1:82:55:3b:49:8c:6c:20:66:65:f2:2e:22:3f:de:
34:f0:12:8a:fe:22:bc:6b:d1:fd:7f:a0:aa:0d:ec:a9:df:8b:
75:e0:f5:c7:f1:fa:c9:9d:64:e6:91:75:95:79:cf:19:80:0d:
a7:91:5d:3a:dd:bf:1b:30:d9:6b:7e:63:aa:7c:40:7e:cc:56:
73:ef:1e:8c:cb:b0:fc:b8:be:95:2a:ed:52:58:bb:82:f9:97:
c7:2d:df:25:03:33:1c:b7:d4:b1:2a:48:88:49:ea:b7:34:f0:
99:e5:5a:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcgOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI2MDcwMTMwWhcNMjYwOTA0MDcwMTMwWjAYMRYw
FAYDVQQDEw02YTY1YjBjZS1lZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5vhXSRd8d+GoAitByI9oQhgdNlnB3wbRDcattUhzDMYq95wHj+eEqjrd
9r42pP8BAqAWtyqNwg8EcqzOekVh8mfc3bzai9uY1Ui7zzNKJDAZvBm5SCduUjuG
i/FaBrKddt36Vs87fLP+dVCCpz+RVnwkvHUU/IbSK7o0oqZmivsiU3EI71aolWS+
SIDCmyFFx953I+SqyMygmHkWHr6gWY0XNhfjBuACj6SjH9ZNhgo4CUyWfn+zf7px
aN2ZmODo6WhWCx5bwpxXDVrCJGysDwVqsWD3oSY87mkkIMD2LH35Dfk3Qygzoax2
x1YZheky1D4MGEE5jSqbvegV/TXdHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB8F
8broUXZppl8UPjrkTq5G3WOqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjU3MERBMjg4QkYxMUYxOEREN0IxRDVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8oMA0GCSqGSIb3DQEBCwUA
A4IBAQCLnrJWlo2h7TT/pgX6vlcK/gQFmcIKoQyfxJUlo+ABxziukzW1Q9wjFCbX
L1Tu8U//B+1p5dR205KYNcaCQw/g8zfiHGJZkIztgf3DD3H7ExOiwgPSqBeTqZoU
myQ6x/bXy9hzzG5TQcMj13r6m67oQe7FHkOT1rwh89UgSN9X5/dxVRHLVehVEhl8
mOhsi+MSnjShglU7SYxsIGZl8i4iP9408BKK/iK8a9H9f6CqDeyp34t14PXH8frJ
nWTmkXWVec8ZgA2nkV063b8bMNlrfmOqfEB+zFZz7x6My7D8uL6VKu1SWLuC+ZfH
Ld8lAzMct9SxKkiISeq3NPCZ5Vrs
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:24:57 2026 by rpki-client