Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C6257E1E1111F1BA7AC895DAE4EC9C.roa
File: 14C6257E1E1111F1BA7AC895DAE4EC9C.roa (raw, json)
Hash identifier: cOLD8+AQwKY+Q3eu2Pr4cX33XwvfLWJUStFgWqe6Wb4=
Subject key identifier: C1:F6:6B:8A:73:19:2B:AE:D9:44:E1:04:C3:37:C2:CD:5D:F0:D7:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A498
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C6257E1E1111F1BA7AC895DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 12:43:34 +0000
ROA not before: Thu 12 Mar 2026 12:43:28 +0000
ROA not after: Sun 19 Apr 2026 12:43:28 +0000
asID: 6079
IP address blocks: 45.205.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107672 (0x1a498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 12:43:28 2026 GMT
Not After : Apr 19 12:43:28 2026 GMT
Subject: CN=69b2b4f6-6de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:b3:32:b4:01:8a:bd:a4:a7:44:ab:36:12:
ad:63:cb:b3:23:e0:33:3b:64:78:4b:cb:83:31:0b:
81:e8:54:91:65:b2:8e:36:1d:8d:cb:60:94:aa:98:
41:cc:b3:25:0a:33:59:95:3e:c2:07:be:a7:18:74:
67:a9:5c:90:de:18:29:f3:ef:d3:74:73:bf:77:d7:
af:88:1c:be:74:b1:f5:ec:28:35:e0:34:96:d0:a0:
11:0e:41:0e:c3:98:d7:2b:a4:fd:da:9e:19:a9:08:
20:3d:06:fb:49:82:04:6e:47:56:f9:0f:a1:c1:85:
7e:34:2d:25:14:93:6a:1b:b3:6a:66:ef:53:84:ab:
d9:bf:d9:78:f0:d7:6a:38:96:dd:d5:78:a0:8c:48:
db:f9:19:62:30:19:9c:f4:db:66:db:d6:4b:da:5a:
29:e6:bf:9b:b7:8c:4b:f9:7b:2c:df:1f:18:49:ed:
39:76:d4:40:8e:8c:ec:79:5a:48:0c:f6:ea:7c:2d:
44:4a:a1:d3:39:22:b9:a1:26:5d:50:a1:e5:76:13:
3a:c1:8c:0f:91:3f:1c:1e:33:05:d9:0d:de:ea:94:
fe:94:7a:96:13:6f:e7:c0:91:96:7e:62:09:59:ad:
bb:c6:17:10:c3:d8:af:d9:37:a0:43:96:79:76:8f:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:6B:8A:73:19:2B:AE:D9:44:E1:04:C3:37:C2:CD:5D:F0:D7:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C6257E1E1111F1BA7AC895DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.152.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:3b:b2:86:f5:c9:0d:ee:c9:e8:5b:cf:cb:e4:ef:f1:ec:f6:
06:81:93:61:83:bc:85:30:ad:9c:e7:12:71:6c:6f:3d:f4:5f:
4c:2e:71:cb:00:2b:34:5a:79:46:01:79:42:b5:4e:a9:77:4c:
e7:93:0a:90:85:bb:eb:9c:a3:b6:de:b3:f3:8f:8a:8c:b7:10:
dd:f7:91:4c:ba:af:d3:80:36:de:7a:e8:dc:82:e0:9a:4b:ba:
5c:ab:03:71:c9:e8:db:fe:54:30:eb:49:9f:ac:77:e4:52:24:
8d:84:0c:e7:b2:76:94:e7:1e:1e:2a:1d:94:f4:85:0d:16:48:
f0:33:c7:b9:31:b9:34:05:b2:20:40:d6:0a:70:18:f2:ee:7c:
1b:bf:69:54:fd:27:2d:e7:17:f6:ec:06:00:8b:07:b2:50:2c:
cb:05:a2:26:45:ce:9f:57:a6:7d:04:1f:c0:65:d4:0c:96:14:
25:65:08:66:60:72:11:00:39:d7:b4:6d:9d:82:9f:eb:b9:81:
4f:31:5b:53:b5:30:b3:06:92:0c:55:31:90:f6:63:5c:3d:dc:
3d:c7:38:39:71:25:53:a0:09:a4:3a:c7:b5:ce:d0:da:4d:c0:
91:91:76:5d:82:18:ac:5e:84:4d:88:20:ae:b0:74:09:7a:80:
e9:e2:a2:8a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaSYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEyMTI0MzI4WhcNMjYwNDE5MTI0MzI4WjAYMRYw
FAYDVQQDEw02OWIyYjRmNi02ZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2xSzMrQBir2kp0SrNhKtY8uzI+AzO2R4S8uDMQuB6FSRZbKONh2Ny2CU
qphBzLMlCjNZlT7CB76nGHRnqVyQ3hgp8+/TdHO/d9eviBy+dLH17Cg14DSW0KAR
DkEOw5jXK6T92p4ZqQggPQb7SYIEbkdW+Q+hwYV+NC0lFJNqG7NqZu9ThKvZv9l4
8NdqOJbd1XigjEjb+RliMBmc9Ntm29ZL2lop5r+bt4xL+Xss3x8YSe05dtRAjozs
eVpIDPbqfC1ESqHTOSK5oSZdUKHldhM6wYwPkT8cHjMF2Q3e6pT+lHqWE2/nwJGW
fmIJWa27xhcQw9iv2TegQ5Z5do85VQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMH2
a4pzGSuu2UThBMM3ws1d8NePMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEM2MjU3RTFFMTExMUYxQkE3QUM4OTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc2YMA0GCSqGSIb3DQEBCwUA
A4IBAQC0O7KG9ckN7snoW8/L5O/x7PYGgZNhg7yFMK2c5xJxbG899F9MLnHLACs0
WnlGAXlCtU6pd0znkwqQhbvrnKO23rPzj4qMtxDd95FMuq/TgDbeeujcguCaS7pc
qwNxyejb/lQw60mfrHfkUiSNhAznsnaU5x4eKh2U9IUNFkjwM8e5Mbk0BbIgQNYK
cBjy7nwbv2lU/Sct5xf27AYAiweyUCzLBaImRc6fV6Z9BB/AZdQMlhQlZQhmYHIR
ADnXtG2dgp/ruYFPMVtTtTCzBpIMVTGQ9mNcPdw9xzg5cSVToAmkOse1ztDaTcCR
kXZdghisXoRNiCCusHQJeoDp4qKK
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:25 2026 by rpki-client