Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B53D1E027AF11F1974FD0A6DAE4EC9C.roa
File: 2B53D1E027AF11F1974FD0A6DAE4EC9C.roa (raw, json)
Hash identifier: kayfowReAWEYmVCBsbXDqXRVQ646Totv+jctEltLtUQ=
Subject key identifier: 30:96:83:85:85:2D:00:D1:BC:96:C3:B5:49:81:B7:D0:49:D3:13:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A71A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B53D1E027AF11F1974FD0A6DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 18:27:53 +0000
ROA not before: Tue 24 Mar 2026 18:27:48 +0000
ROA not after: Tue 05 May 2026 18:27:48 +0000
asID: 33182
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108314 (0x1a71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 18:27:48 2026 GMT
Not After : May 5 18:27:48 2026 GMT
Subject: CN=69c2d7a9-b7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:44:fb:8a:0b:65:62:54:5e:89:83:26:7e:
85:d9:33:65:93:2d:bc:41:ee:d4:e1:42:f3:11:b9:
20:2d:2a:5e:2a:74:a8:ee:ff:92:4f:b1:d8:ed:9c:
d9:c0:85:ae:2a:de:a8:01:be:fb:63:5b:0e:b7:28:
cb:ed:01:b6:fb:fe:5e:f0:ce:f6:f5:53:2f:8d:9e:
ea:3e:89:3f:07:c8:62:2a:88:df:38:a3:fc:e4:00:
30:19:ea:01:c6:08:ef:0c:d4:f0:d8:02:96:75:ca:
6a:d6:78:15:8b:79:fe:a3:c3:b5:02:41:b3:39:81:
ce:1d:23:bb:36:e1:56:96:14:13:fc:e2:fe:21:27:
eb:d2:3a:f5:39:21:be:ee:e7:fe:2b:77:47:f2:6f:
5d:aa:e4:f3:33:08:d4:7c:e3:5b:92:6a:06:da:30:
77:0d:56:57:f2:07:54:f2:9d:1c:86:96:49:4e:c9:
e5:94:3a:c2:aa:72:17:b9:78:67:6a:f7:b2:c2:57:
17:39:ad:e1:59:69:44:75:98:96:75:ef:67:74:c5:
70:16:f6:29:a1:be:95:a4:65:31:f4:24:05:cc:81:
4e:37:57:4b:b7:42:23:5c:2a:76:0f:7c:fc:aa:08:
df:77:2b:1a:b5:9b:1b:3e:c6:22:2e:ec:b7:31:6f:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:83:85:85:2D:00:D1:BC:96:C3:B5:49:81:B7:D0:49:D3:13:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B53D1E027AF11F1974FD0A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8f:51:17:fb:46:d2:24:b9:7c:bc:b6:39:8a:3a:30:f9:a5:
5e:9d:75:95:3e:c7:b9:f7:1b:6f:0f:4f:df:da:b4:2d:b3:b9:
c8:f0:aa:f7:27:3e:db:8e:70:12:3b:24:dd:ab:5d:5b:62:00:
4c:16:fc:9c:76:f2:2b:ef:b1:cd:7d:33:4d:75:e9:6d:66:e5:
53:37:ea:bb:ce:47:cf:59:ca:69:fd:cf:55:ed:b2:ff:3d:d3:
ae:8a:7f:b8:52:ce:ab:a3:7d:27:38:44:c9:39:5b:24:40:75:
e5:a2:be:d8:e7:26:71:58:e0:d5:e3:86:b6:d3:83:46:de:16:
73:d1:9c:1e:a7:2c:82:23:0d:cb:b8:96:7c:7f:ab:3f:10:69:
fa:5b:bf:ae:b9:d8:b4:ed:ce:db:db:01:7b:ed:e7:59:03:76:
0d:a2:0e:53:d7:c2:72:26:d5:f8:be:72:29:a1:04:58:7f:87:
ff:95:2e:90:8f:6c:7a:c4:5b:15:10:5a:cb:16:3c:06:e3:ac:
54:9b:60:fb:24:a4:1a:42:9c:25:51:30:83:55:ed:19:64:88:
37:0d:33:3b:95:fb:7e:89:88:ea:0a:8d:97:a4:44:ca:bf:f3:
a1:7c:58:0c:b1:e8:ed:88:8d:21:ea:3c:7c:3f:6b:6e:eb:7f:
8f:33:e4:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAacaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI0MTgyNzQ4WhcNMjYwNTA1MTgyNzQ4WjAYMRYw
FAYDVQQDEw02OWMyZDdhOS1iN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtbxE+4oLZWJUXomDJn6F2TNlky28Qe7U4ULzEbkgLSpeKnSo7v+ST7HY
7ZzZwIWuKt6oAb77Y1sOtyjL7QG2+/5e8M729VMvjZ7qPok/B8hiKojfOKP85AAw
GeoBxgjvDNTw2AKWdcpq1ngVi3n+o8O1AkGzOYHOHSO7NuFWlhQT/OL+ISfr0jr1
OSG+7uf+K3dH8m9dquTzMwjUfONbkmoG2jB3DVZX8gdU8p0chpZJTsnllDrCqnIX
uXhnaveywlcXOa3hWWlEdZiWde9ndMVwFvYpob6VpGUx9CQFzIFON1dLt0IjXCp2
D3z8qgjfdysatZsbPsYiLuy3MW9f+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDCW
g4WFLQDRvJbDtUmBt9BJ0xMVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQjUzRDFFMDI3QUYxMUYxOTc0RkQwQTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcD6MA0GCSqGSIb3DQEBCwUA
A4IBAQBnj1EX+0bSJLl8vLY5ijow+aVenXWVPse59xtvD0/f2rQts7nI8Kr3Jz7b
jnASOyTdq11bYgBMFvycdvIr77HNfTNNdeltZuVTN+q7zkfPWcpp/c9V7bL/PdOu
in+4Us6ro30nOETJOVskQHXlor7Y5yZxWODV44a204NG3hZz0ZwepyyCIw3LuJZ8
f6s/EGn6W7+uudi07c7b2wF77edZA3YNog5T18JyJtX4vnIpoQRYf4f/lS6Qj2x6
xFsVEFrLFjwG46xUm2D7JKQaQpwlUTCDVe0ZZIg3DTM7lft+iYjqCo2XpETKv/Oh
fFgMsejtiI0h6jx8P2tu63+PM+S0
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:40 2026 by rpki-client