Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30FF78CA25E711F1BBBC7AC9DAE4EC9C.roa
File: 30FF78CA25E711F1BBBC7AC9DAE4EC9C.roa (raw, json)
Hash identifier: a9rDCCljwEbmwC+7cFgrkgAkY+egjxvTtNnhYp6J9AQ=
Subject key identifier: 9C:27:43:34:7A:FE:2E:13:B4:76:EB:71:6E:4B:A3:2C:48:FE:86:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30FF78CA25E711F1BBBC7AC9DAE4EC9C.roa
Signing time: Sun 22 Mar 2026 12:03:52 +0000
ROA not before: Sun 22 Mar 2026 12:03:46 +0000
ROA not after: Thu 09 Apr 2026 12:03:46 +0000
asID: 216211
IP address blocks: 45.192.196.0/22 maxlen: 24
45.192.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108208 (0x1a6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 22 12:03:46 2026 GMT
Not After : Apr 9 12:03:46 2026 GMT
Subject: CN=69bfdaa8-e55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:7e:87:41:34:fe:4a:f3:91:da:13:9d:3f:
f5:b0:2e:06:22:c5:b1:a5:0c:5c:73:f8:b9:3c:9c:
06:72:47:0d:fb:13:72:2d:54:6f:bd:f4:b5:74:62:
15:7d:0f:5b:e5:cc:7b:8b:ba:5b:aa:55:37:ad:77:
6b:b9:1f:9a:e7:33:68:3d:c4:42:52:a9:ea:0c:f4:
76:8f:de:c8:4f:e2:91:1a:10:34:23:fe:ad:6b:91:
ca:e2:1c:43:5b:e3:b4:7f:ca:9c:f3:c8:fb:32:4e:
33:0f:70:b1:33:ca:58:8f:82:4e:f8:b6:28:ee:40:
8c:46:8a:05:86:f3:da:75:bf:95:95:88:a3:cd:2e:
67:b9:76:e5:35:27:a8:19:40:be:82:21:31:a4:78:
18:e4:23:b6:55:df:85:82:00:4d:92:5b:2a:91:7d:
22:52:d3:19:9e:04:25:2d:64:49:4c:be:32:a5:e6:
dc:6c:bb:1f:e9:15:34:7c:9e:5f:3a:16:62:48:3a:
73:b5:bc:a4:fc:07:33:d1:fa:4b:55:40:bb:bd:55:
4e:40:df:5b:42:74:71:bc:b8:c8:e8:bd:d4:86:5e:
e4:36:b7:e0:f1:60:6b:99:72:ef:e6:74:16:27:21:
bd:17:e5:53:1e:98:69:5d:ce:79:f2:98:1c:66:6f:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:27:43:34:7A:FE:2E:13:B4:76:EB:71:6E:4B:A3:2C:48:FE:86:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30FF78CA25E711F1BBBC7AC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.196.0-45.192.203.255
Signature Algorithm: sha256WithRSAEncryption
24:53:fa:28:e9:8e:d1:84:68:96:84:d9:9c:84:dd:0c:81:25:
f7:09:cf:99:27:fa:5a:0d:57:ba:71:8f:8d:58:bb:a0:60:4c:
33:4c:ce:41:0a:69:75:7b:4e:d1:fe:ab:c4:fc:03:bb:31:74:
0a:44:14:a0:3f:3b:39:3d:73:84:fb:d3:82:02:6e:88:1d:fa:
1b:85:7d:ff:9d:46:32:ea:a5:af:e3:88:1c:b4:3b:75:4c:b8:
fe:0b:61:1b:00:1d:87:ac:0a:4e:3b:52:15:c0:b1:36:59:cc:
03:fa:e5:de:ae:7d:75:e8:4d:3f:f8:74:a3:85:a6:00:b3:a5:
30:01:99:08:67:7c:e0:39:11:bc:14:fa:9c:db:d5:31:17:2d:
77:fe:0e:95:81:28:c9:9e:73:26:76:0e:7c:18:9e:bc:ce:40:
ce:0c:74:08:c2:37:d9:8f:e7:46:2a:4d:ea:a3:0b:48:97:04:
7c:9d:72:ee:6a:1f:8b:8a:07:a0:d0:c3:6e:f2:e2:c3:ef:f8:
9f:38:d9:06:be:31:40:fb:c4:e0:c9:81:e8:0b:a7:f1:9c:38:
e1:ee:c4:89:ac:34:68:5c:5b:4c:7a:47:32:f4:1a:fe:52:27:
6e:71:e9:9b:17:60:44:18:2f:bb:42:46:0b:cb:84:ff:0e:ea:
7f:75:a7:6c
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaawMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIyMTIwMzQ2WhcNMjYwNDA5MTIwMzQ2WjAYMRYw
FAYDVQQDEw02OWJmZGFhOC1lNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsdd+h0E0/krzkdoTnT/1sC4GIsWxpQxcc/i5PJwGckcN+xNyLVRvvfS1
dGIVfQ9b5cx7i7pbqlU3rXdruR+a5zNoPcRCUqnqDPR2j97IT+KRGhA0I/6ta5HK
4hxDW+O0f8qc88j7Mk4zD3CxM8pYj4JO+LYo7kCMRooFhvPadb+VlYijzS5nuXbl
NSeoGUC+giExpHgY5CO2Vd+FggBNklsqkX0iUtMZngQlLWRJTL4ypebcbLsf6RU0
fJ5fOhZiSDpztbyk/Acz0fpLVUC7vVVOQN9bQnRxvLjI6L3Uhl7kNrfg8WBrmXLv
5nQWJyG9F+VTHphpXc558pgcZm+u6QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJwn
QzR6/i4TtHbrcW5LoyxI/oagMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMEZGNzhDQTI1RTcxMUYxQkJCQzdBQzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItwMQDBAItwMgwDQYJKoZI
hvcNAQELBQADggEBACRT+ijpjtGEaJaE2ZyE3QyBJfcJz5kn+loNV7pxj41Yu6Bg
TDNMzkEKaXV7TtH+q8T8A7sxdApEFKA/Ozk9c4T704ICbogd+huFff+dRjLqpa/j
iBy0O3VMuP4LYRsAHYesCk47UhXAsTZZzAP65d6ufXXoTT/4dKOFpgCzpTABmQhn
fOA5EbwU+pzb1TEXLXf+DpWBKMmecyZ2DnwYnrzOQM4MdAjCN9mP50YqTeqjC0iX
BHydcu5qH4uKB6DQw27y4sPv+J842Qa+MUD7xODJgegLp/GcOOHuxImsNGhcW0x6
RzL0Gv5SJ25x6ZsXYEQYL7tCRgvLhP8O6n91p2w=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:42 2026 by rpki-client