Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046B675C1C5411F1928740F2DAE4EC9C.roa
File: 046B675C1C5411F1928740F2DAE4EC9C.roa (raw, json)
Hash identifier: q6k6wn0yGebLVWxCd4xeo6nCl4kNp5vYBSe3wzsNQrU=
Subject key identifier: 3B:BD:42:DE:2E:5C:3C:29:4D:95:EF:41:C6:04:42:CD:A0:AD:BF:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046B675C1C5411F1928740F2DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:37:41 +0000
ROA not before: Tue 10 Mar 2026 07:37:36 +0000
ROA not after: Thu 26 Mar 2026 07:37:36 +0000
asID: 142002
IP address blocks: 45.197.12.0/24 maxlen: 24
45.197.13.0/24 maxlen: 24
45.197.14.0/24 maxlen: 24
45.197.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 07:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107430 (0x1a3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 07:37:36 2026 GMT
Not After : Mar 26 07:37:36 2026 GMT
Subject: CN=69afca45-4937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:08:8c:e1:10:49:2e:9e:4c:10:99:c2:da:
c5:1b:e4:64:cd:b5:c2:75:6e:26:3c:6b:2f:f0:5c:
c6:b7:44:63:8c:36:6c:4d:7e:bd:4e:ed:da:cc:fc:
3b:a8:23:1d:7e:91:de:aa:ee:ce:5c:3a:fd:82:a2:
ba:fc:da:7f:31:78:de:4d:45:d8:33:f9:1c:a7:77:
ec:f2:eb:0b:7e:89:41:31:af:bd:07:b9:6e:3a:e8:
80:5b:d1:da:6a:f1:f0:1c:e0:82:61:a0:e7:d2:9e:
63:a8:4d:b8:1e:ab:dc:d0:7a:9c:31:23:08:a0:2e:
28:45:94:ca:a6:b4:33:da:7b:ca:51:42:2b:48:1f:
ff:20:89:a8:5c:65:8b:03:c3:c0:ee:34:3e:cd:b8:
9c:44:16:4b:9f:84:bc:4d:de:ad:35:cf:25:4c:ee:
be:ee:67:23:9c:81:35:da:25:36:e7:14:c2:7f:b9:
3c:e2:78:77:66:8d:87:8b:c6:be:33:59:c3:9f:1e:
ff:08:57:54:71:d8:ac:71:30:7c:d3:ea:d9:15:88:
b4:8f:df:55:3c:23:71:57:c5:af:ee:95:6d:f9:44:
5f:85:23:fc:e0:22:a6:d6:22:43:44:4b:28:26:1c:
93:ac:28:f2:89:45:64:ff:8b:a5:c3:6e:98:b4:d9:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:42:DE:2E:5C:3C:29:4D:95:EF:41:C6:04:42:CD:A0:AD:BF:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046B675C1C5411F1928740F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.12.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7d:6b:5b:7d:f6:bc:25:59:f0:32:c3:9a:4e:c7:d7:38:66:
be:de:e7:cf:bd:a8:89:4e:70:92:d3:88:49:59:66:6a:de:45:
dc:d1:12:29:cf:72:bd:cc:52:9b:bc:a2:c9:9a:9b:9d:44:1a:
1d:c5:92:6f:df:cd:70:58:83:ff:9b:4c:33:4b:af:36:48:ac:
70:d3:2d:dd:45:1f:66:bf:98:d3:81:11:18:3d:a3:ac:7a:02:
32:6e:72:54:87:69:ca:07:96:d4:1d:76:fa:08:81:fa:6d:a2:
72:30:44:82:1b:ff:e8:66:cd:ec:a1:d4:7a:ba:4b:14:08:12:
8d:41:1e:6b:c9:e4:c9:28:4e:f4:89:bc:ac:24:b7:6d:f6:88:
68:e7:a6:4f:3b:94:f7:b5:40:08:3f:da:da:20:76:5c:81:4c:
e2:7b:05:97:67:4a:e5:21:79:fa:6d:56:d4:e7:16:8c:c9:54:
ca:e5:42:ab:a6:f6:66:9a:05:35:dc:76:b1:73:ea:6f:14:20:
58:8f:9e:bc:9e:3f:b3:eb:a6:54:59:51:bb:05:dc:9b:9f:d9:
6d:f4:88:ee:db:bd:1c:18:f1:a0:6a:de:89:55:66:ad:5b:5c:
0b:57:e3:4b:f9:df:0a:28:65:4b:5c:7b:e2:ae:06:1f:e0:69:
0d:68:39:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaOmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEwMDczNzM2WhcNMjYwMzI2MDczNzM2WjAYMRYw
FAYDVQQDEw02OWFmY2E0NS00OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmdQIjOEQSS6eTBCZwtrFG+RkzbXCdW4mPGsv8FzGt0RjjDZsTX69Tu3a
zPw7qCMdfpHequ7OXDr9gqK6/Np/MXjeTUXYM/kcp3fs8usLfolBMa+9B7luOuiA
W9HaavHwHOCCYaDn0p5jqE24Hqvc0HqcMSMIoC4oRZTKprQz2nvKUUIrSB//IImo
XGWLA8PA7jQ+zbicRBZLn4S8Td6tNc8lTO6+7mcjnIE12iU25xTCf7k84nh3Zo2H
i8a+M1nDnx7/CFdUcdiscTB80+rZFYi0j99VPCNxV8Wv7pVt+URfhSP84CKm1iJD
REsoJhyTrCjyiUVk/4ulw26YtNkpkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDu9
Qt4uXDwpTZXvQcYEQs2grb/BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDZCNjc1QzFDNTQxMUYxOTI4NzQwRjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcUMMA0GCSqGSIb3DQEBCwUA
A4IBAQAhfWtbffa8JVnwMsOaTsfXOGa+3ufPvaiJTnCS04hJWWZq3kXc0RIpz3K9
zFKbvKLJmpudRBodxZJv381wWIP/m0wzS682SKxw0y3dRR9mv5jTgREYPaOsegIy
bnJUh2nKB5bUHXb6CIH6baJyMESCG//oZs3sodR6uksUCBKNQR5ryeTJKE70ibys
JLdt9oho56ZPO5T3tUAIP9raIHZcgUziewWXZ0rlIXn6bVbU5xaMyVTK5UKrpvZm
mgU13Haxc+pvFCBYj568nj+z66ZUWVG7Bdybn9lt9Iju270cGPGgat6JVWatW1wL
V+NL+d8KKGVLXHvirgYf4GkNaDk7
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:32 2026 by rpki-client