Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA979444C5D11F1A28D97BCCE1D38B0.roa
File: 1AA979444C5D11F1A28D97BCCE1D38B0.roa (raw, json)
Hash identifier: VWqiw5Kk+D8cE++8f1VTXt2UKLpPtFx0k+vbcS3yWaQ=
Subject key identifier: 9C:80:83:3A:F5:B8:2D:E5:84:C3:1C:91:52:7D:31:76:7F:B3:C7:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B345
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA979444C5D11F1A28D97BCCE1D38B0.roa
Signing time: Sun 10 May 2026 10:43:39 +0000
ROA not before: Sun 10 May 2026 10:43:34 +0000
ROA not after: Wed 10 Jun 2026 10:43:34 +0000
asID: 216211
IP address blocks: 45.192.196.0/22 maxlen: 24
45.192.200.0/22 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111429 (0x1b345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 10 10:43:34 2026 GMT
Not After : Jun 10 10:43:34 2026 GMT
Subject: CN=6a00615b-a09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:69:ef:35:fe:39:6a:59:a8:d8:d5:ed:d5:
a5:60:71:39:73:4f:57:88:11:de:ab:23:ad:7d:f6:
be:9a:17:9e:8e:18:f7:d1:5e:d0:4a:14:15:a2:47:
48:11:6c:3c:2e:fb:c2:cd:7b:19:99:5f:df:12:ad:
e6:e5:13:b1:ef:f2:67:a6:ff:3c:79:55:26:a2:cf:
04:41:ea:93:ec:c8:4f:60:b1:a2:cb:cd:18:1e:d9:
c0:d1:82:64:9e:e6:76:1c:d5:d7:1e:9f:00:6c:bc:
2d:72:f0:b8:f2:7f:cb:18:d3:1e:dd:65:4f:1d:d6:
e1:2e:5c:ff:de:e9:e4:75:cc:4a:ef:c2:17:e0:65:
78:0e:6c:64:64:d1:06:9a:8e:c5:4d:ac:05:36:d1:
5b:7a:e9:7d:e6:83:7e:92:6e:41:52:ee:28:47:53:
b8:fa:9e:6d:ae:f5:18:3d:4c:74:7c:2f:0c:1e:78:
ab:4e:aa:12:d0:31:7d:08:1f:aa:f2:d5:4d:22:c9:
78:ee:ed:aa:24:29:c1:a2:db:b5:15:4f:e8:92:01:
55:bf:fc:af:29:3d:c5:d0:ca:a2:63:af:d5:43:42:
86:8a:f1:f8:c1:1b:08:cc:54:a4:b6:81:96:c7:ac:
52:55:57:1c:e0:1e:a5:89:f1:43:39:61:82:f8:d9:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:83:3A:F5:B8:2D:E5:84:C3:1C:91:52:7D:31:76:7F:B3:C7:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA979444C5D11F1A28D97BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.196.0-45.192.203.255
45.192.241.0/24
45.192.243.0/24
Signature Algorithm: sha256WithRSAEncryption
81:18:ae:ef:75:ca:71:bf:a2:3f:84:bb:70:a2:f3:08:12:30:
ac:4a:b6:9d:e9:dc:47:89:67:b5:d8:12:8b:90:20:3c:fd:5f:
13:a4:1e:9d:20:ad:fc:b0:b3:cc:19:24:25:e8:4c:64:0c:fc:
65:31:9c:f6:2c:a4:90:50:f8:a5:c8:db:2a:6e:61:14:4f:34:
6c:48:3b:97:d3:ac:cc:5d:b9:2b:67:24:95:7c:88:e3:94:9d:
be:f2:43:df:66:74:27:cd:04:4b:60:a7:78:1a:b0:34:bc:f4:
ee:e7:75:45:64:9f:09:ce:cd:05:5d:60:a8:8a:ae:67:e3:75:
e6:79:53:4b:33:ea:2a:2e:26:86:77:07:b5:2a:4d:34:95:89:
c0:e9:8c:4d:42:5c:6e:fa:89:29:a6:d6:44:80:06:40:ae:33:
8e:ef:14:83:44:b0:f5:8b:d4:ff:b3:ee:6f:9d:7f:7e:e9:14:
e2:73:bf:c7:8c:da:87:54:52:de:bc:d9:ce:99:70:95:4e:c8:
86:dd:3f:42:8b:77:41:28:5d:14:73:57:0e:6f:5f:a2:45:37:
f3:21:68:6e:6a:3a:75:a2:2b:f9:fc:b2:c1:d0:8c:85:6e:b4:
55:b5:3b:9b:fd:2f:bc:bf:a8:76:48:c8:11:f3:4b:09:fc:9d:
fb:c2:d0:37
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAbNFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTEwMTA0MzM0WhcNMjYwNjEwMTA0MzM0WjAYMRYw
FAYDVQQDEw02YTAwNjE1Yi1hMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwXpp7zX+OWpZqNjV7dWlYHE5c09XiBHeqyOtffa+mheejhj30V7QShQV
okdIEWw8LvvCzXsZmV/fEq3m5ROx7/Jnpv88eVUmos8EQeqT7MhPYLGiy80YHtnA
0YJknuZ2HNXXHp8AbLwtcvC48n/LGNMe3WVPHdbhLlz/3unkdcxK78IX4GV4Dmxk
ZNEGmo7FTawFNtFbeul95oN+km5BUu4oR1O4+p5trvUYPUx0fC8MHnirTqoS0DF9
CB+q8tVNIsl47u2qJCnBotu1FU/okgFVv/yvKT3F0MqiY6/VQ0KGivH4wRsIzFSk
toGWx6xSVVcc4B6lifFDOWGC+NmhMQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJyA
gzr1uC3lhMMckVJ9MXZ/s8eCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQUE5Nzk0NDRDNUQxMUYxQTI4RDk3QkNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAItwMQDBAItwMgDBAAtwPED
BAAtwPMwDQYJKoZIhvcNAQELBQADggEBAIEYru91ynG/oj+Eu3Ci8wgSMKxKtp3p
3EeJZ7XYEouQIDz9XxOkHp0grfyws8wZJCXoTGQM/GUxnPYspJBQ+KXI2ypuYRRP
NGxIO5fTrMxduStnJJV8iOOUnb7yQ99mdCfNBEtgp3gasDS89O7ndUVknwnOzQVd
YKiKrmfjdeZ5U0sz6iouJoZ3B7UqTTSVicDpjE1CXG76iSmm1kSABkCuM47vFINE
sPWL1P+z7m+df37pFOJzv8eM2odUUt682c6ZcJVOyIbdP0KLd0EoXRRzVw5vX6JF
N/MhaG5qOnWiK/n8ssHQjIVutFW1O5v9L7y/qHZIyBHzSwn8nfvC0Dc=
-----END CERTIFICATE-----
Generated at Wed May 13 14:13:22 2026 by rpki-client