Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E8FA9E447911F1B79295BBCE1D38B0.roa
File: 22E8FA9E447911F1B79295BBCE1D38B0.roa (raw, json)
Hash identifier: 7h9k5Cy3apcJaeNKARyaLsSOnWd8ueveNtrRvCSPFmQ=
Subject key identifier: 1D:3E:72:36:BF:A2:33:F8:1A:CE:4D:A2:47:10:21:AA:DE:86:A2:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B018
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E8FA9E447911F1B79295BBCE1D38B0.roa
Signing time: Thu 30 Apr 2026 09:44:10 +0000
ROA not before: Thu 30 Apr 2026 09:44:04 +0000
ROA not after: Wed 27 May 2026 09:44:04 +0000
asID: 138456
IP address blocks: 45.202.194.0/23 maxlen: 24
45.202.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110616 (0x1b018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:44:04 2026 GMT
Not After : May 27 09:44:04 2026 GMT
Subject: CN=69f32469-5051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:cc:06:a5:fe:73:1c:98:46:da:ab:1f:30:
e7:e7:38:5a:a3:7b:c9:82:1c:c7:d9:35:f6:a9:fc:
ab:40:a8:18:08:4a:93:4a:6c:e5:44:6d:1a:fa:fc:
04:c6:0b:a6:7f:b4:36:86:bc:36:7a:26:8b:c0:5f:
73:00:92:11:87:69:08:23:92:3c:1b:f8:9b:10:9f:
49:9d:ca:e7:32:2f:1e:f9:24:15:55:65:66:88:d6:
64:d5:ab:6b:c3:a9:67:69:72:1a:25:54:56:31:db:
39:b5:80:6d:59:00:87:36:04:89:36:36:b9:91:6f:
ad:b8:35:07:58:70:3f:5a:96:72:04:0a:77:26:83:
4a:05:12:54:f8:73:04:78:2e:6a:a1:cc:71:84:c7:
0d:ee:bc:d4:db:7b:90:4d:b7:fa:5e:04:73:0c:a4:
97:b9:01:9f:60:1d:6f:3d:a8:da:8b:bf:c7:7e:68:
ff:dc:cc:a1:36:a2:40:6a:03:62:3f:77:9c:7e:ae:
36:8c:75:3e:2a:70:07:6d:aa:ec:b0:9a:43:a7:19:
39:05:c4:da:eb:de:95:f3:36:92:64:05:f3:47:c4:
22:84:8a:7b:06:90:21:1c:38:ee:8b:1d:61:a0:3c:
5f:5e:af:d3:0a:25:b1:dc:33:9d:e0:75:00:3d:70:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:72:36:BF:A2:33:F8:1A:CE:4D:A2:47:10:21:AA:DE:86:A2:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E8FA9E447911F1B79295BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.194.0-45.202.196.255
Signature Algorithm: sha256WithRSAEncryption
4e:d7:55:15:ef:2e:58:9c:75:bf:c8:73:19:5e:d6:62:39:7b:
d8:9d:2d:c1:3c:99:10:06:b0:51:9d:e5:90:48:8c:40:97:8c:
24:a1:9e:ef:91:f2:5c:92:8a:ed:d0:8e:6a:3d:10:59:e4:e7:
3b:cd:03:f6:71:bb:6b:c3:b8:c1:ef:37:df:a0:96:ba:43:0a:
08:62:27:51:40:3b:f8:22:71:56:5e:3d:c1:0a:6b:d2:51:2a:
8f:ff:c2:ba:f8:e7:df:67:11:ed:89:7e:6f:06:5e:7d:0d:d5:
f9:98:4c:a8:8a:eb:46:ab:19:80:e6:f0:07:58:89:6a:d8:13:
3a:54:3d:64:79:1b:3a:d5:e8:5e:11:9c:8a:6f:7e:0c:89:fc:
40:f8:d4:22:c1:f8:f7:81:c2:5e:6d:db:b5:8b:55:24:f7:14:
6c:79:73:d7:86:da:10:11:46:9f:64:3a:5d:3c:fb:9a:9d:9d:
80:5c:e2:6f:14:3b:4b:6a:97:d3:da:bf:2a:07:cc:9e:be:25:
4e:b9:3c:00:ff:79:28:9d:03:58:97:fe:07:6d:2c:be:68:36:
6a:b1:41:1a:c9:3a:be:6e:56:cc:f7:c5:26:61:ee:9c:4f:fd:
48:22:72:b9:51:90:be:72:32:65:f6:e2:d3:30:ed:7b:c6:e7:
9a:77:b0:02
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbAYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDMwMDk0NDA0WhcNMjYwNTI3MDk0NDA0WjAYMRYw
FAYDVQQDEw02OWYzMjQ2OS01MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuhHMBqX+cxyYRtqrHzDn5zhao3vJghzH2TX2qfyrQKgYCEqTSmzlRG0a
+vwExgumf7Q2hrw2eiaLwF9zAJIRh2kII5I8G/ibEJ9JncrnMi8e+SQVVWVmiNZk
1atrw6lnaXIaJVRWMds5tYBtWQCHNgSJNja5kW+tuDUHWHA/WpZyBAp3JoNKBRJU
+HMEeC5qocxxhMcN7rzU23uQTbf6XgRzDKSXuQGfYB1vPajai7/Hfmj/3MyhNqJA
agNiP3ecfq42jHU+KnAHbarssJpDpxk5BcTa696V8zaSZAXzR8QihIp7BpAhHDju
ix1hoDxfXq/TCiWx3DOd4HUAPXD/UQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFB0+
cja/ojP4Gs5NokcQIarehqI6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMkU4RkE5RTQ0NzkxMUYxQjc5Mjk1QkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEtysIDBAAtysQwDQYJKoZI
hvcNAQELBQADggEBAE7XVRXvLlicdb/Icxle1mI5e9idLcE8mRAGsFGd5ZBIjECX
jCShnu+R8lySiu3Qjmo9EFnk5zvNA/Zxu2vDuMHvN9+glrpDCghiJ1FAO/gicVZe
PcEKa9JRKo//wrr4599nEe2Jfm8GXn0N1fmYTKiK60arGYDm8AdYiWrYEzpUPWR5
GzrV6F4RnIpvfgyJ/ED41CLB+PeBwl5t27WLVST3FGx5c9eG2hARRp9kOl08+5qd
nYBc4m8UO0tql9PavyoHzJ6+JU65PAD/eSidA1iX/gdtLL5oNmqxQRrJOr5uVsz3
xSZh7pxP/UgicrlRkL5yMmX24tMw7XvG55p3sAI=
-----END CERTIFICATE-----
Generated at Wed May 13 14:02:56 2026 by rpki-client