Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D7578D21C7F11F1A5E82BE9DAE4EC9C.roa
File: 3D7578D21C7F11F1A5E82BE9DAE4EC9C.roa (raw, json)
Hash identifier: odio0qvAPk0pMj9PHCGkC5TxhDjUr8T4TCtxtEsvx2c=
Subject key identifier: 5E:DE:3E:2B:56:52:95:E0:C5:35:6D:0B:4F:45:D9:0B:8C:D8:81:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D7578D21C7F11F1A5E82BE9DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 12:47:04 +0000
ROA not before: Tue 10 Mar 2026 12:47:00 +0000
ROA not after: Thu 26 Mar 2026 12:47:00 +0000
asID: 142002
IP address blocks: 45.197.12.0/24 maxlen: 24
45.197.13.0/24 maxlen: 24
45.197.14.0/24 maxlen: 24
45.197.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 12:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107464 (0x1a3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 12:47:00 2026 GMT
Not After : Mar 26 12:47:00 2026 GMT
Subject: CN=69b012c8-f9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:b1:ec:c8:e1:53:55:a1:a1:c7:0c:c4:20:
06:1a:83:4f:ac:d1:d7:e4:57:80:a4:c4:58:76:32:
71:85:4a:af:f8:af:d7:be:18:fe:6d:bb:9e:7d:a8:
af:f1:41:0f:f8:64:73:39:c6:cd:af:51:41:9e:3e:
ec:c8:3c:67:eb:90:49:7d:27:04:3d:04:38:6a:f6:
aa:ab:1d:f5:83:76:89:67:db:86:36:cd:10:7f:bd:
9f:23:a4:d1:fc:39:ff:ac:95:da:49:1f:68:d2:3f:
b0:27:c0:44:79:4b:ed:b0:fe:84:c2:62:af:ec:03:
67:50:4c:a9:eb:16:b9:f8:13:86:8b:ea:e0:f6:dd:
b1:63:a9:3b:4c:d7:40:0a:48:65:58:40:e7:62:7f:
d8:46:87:1e:2e:3d:10:0d:9f:5e:1c:ce:fc:b9:f3:
cc:80:27:87:d2:6f:8a:d4:fc:a3:57:2d:89:88:76:
e2:8a:e8:e1:6e:3f:de:c4:18:d4:05:14:c1:4f:d4:
96:b4:6c:d6:7a:f5:b8:f9:11:c9:83:2c:78:2b:eb:
e5:9e:8f:af:71:48:3f:cd:8d:0b:22:17:fd:cc:0b:
83:d6:b9:1b:66:bc:ad:86:5e:df:91:92:a7:44:e5:
2c:06:eb:39:52:0d:80:9d:d9:c1:d6:d8:7e:90:70:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DE:3E:2B:56:52:95:E0:C5:35:6D:0B:4F:45:D9:0B:8C:D8:81:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D7578D21C7F11F1A5E82BE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:51:34:41:86:16:e5:c9:c9:61:87:b1:74:73:32:44:a2:68:
4f:52:7c:3e:f0:3e:63:d1:d4:f7:e9:46:d7:67:d3:19:e2:7a:
30:60:b4:d4:01:9c:d7:19:8a:d4:9d:8c:e3:0f:84:e3:ae:2c:
39:a7:26:83:46:a7:bc:14:4d:bd:5c:83:3f:20:21:59:05:14:
5a:24:38:fe:b6:31:39:13:a4:29:b8:de:e9:4b:df:ab:1b:55:
00:20:15:a2:3e:e9:e8:87:d1:8f:65:08:9d:2e:ca:3b:aa:31:
89:6e:88:a7:8b:98:57:8d:71:6a:65:92:9d:be:15:40:b8:45:
37:03:11:c7:ca:06:a3:7a:c6:5d:6c:34:ed:78:a8:98:01:14:
ca:0d:80:08:e5:a9:a4:f1:5c:5b:ef:de:d3:d0:69:de:ea:2b:
04:fb:33:99:45:a4:53:55:2d:eb:91:f0:4b:79:bd:fd:20:10:
ab:d5:83:15:b5:65:a1:2c:9f:35:5f:f6:2a:e1:23:38:42:af:
57:64:f2:be:71:1b:75:97:93:a0:81:83:a8:ec:04:ed:cc:4c:
dd:14:61:d8:93:31:ec:a9:4f:74:cb:12:27:c4:e3:2e:2d:66:
56:04:d8:02:97:28:8f:62:b5:34:84:45:3d:07:34:a2:52:29:
69:33:89:6b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaPIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEwMTI0NzAwWhcNMjYwMzI2MTI0NzAwWjAYMRYw
FAYDVQQDEw02OWIwMTJjOC1mOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzbWx7MjhU1WhoccMxCAGGoNPrNHX5FeApMRYdjJxhUqv+K/Xvhj+bbue
faiv8UEP+GRzOcbNr1FBnj7syDxn65BJfScEPQQ4avaqqx31g3aJZ9uGNs0Qf72f
I6TR/Dn/rJXaSR9o0j+wJ8BEeUvtsP6EwmKv7ANnUEyp6xa5+BOGi+rg9t2xY6k7
TNdACkhlWEDnYn/YRoceLj0QDZ9eHM78ufPMgCeH0m+K1PyjVy2JiHbiiujhbj/e
xBjUBRTBT9SWtGzWevW4+RHJgyx4K+vlno+vcUg/zY0LIhf9zAuD1rkbZrythl7f
kZKnROUsBus5Ug2AndnB1th+kHBZcwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF7e
PitWUpXgxTVtC09F2QuM2IEnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRDc1NzhEMjFDN0YxMUYxQTVFODJCRTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcUMMA0GCSqGSIb3DQEBCwUA
A4IBAQCyUTRBhhblyclhh7F0czJEomhPUnw+8D5j0dT36UbXZ9MZ4nowYLTUAZzX
GYrUnYzjD4Tjriw5pyaDRqe8FE29XIM/ICFZBRRaJDj+tjE5E6QpuN7pS9+rG1UA
IBWiPunoh9GPZQidLso7qjGJboini5hXjXFqZZKdvhVAuEU3AxHHygajesZdbDTt
eKiYARTKDYAI5amk8Vxb797T0Gne6isE+zOZRaRTVS3rkfBLeb39IBCr1YMVtWWh
LJ81X/Yq4SM4Qq9XZPK+cRt1l5OggYOo7ATtzEzdFGHYkzHsqU90yxInxOMuLWZW
BNgClyiPYrU0hEU9BzSiUilpM4lr
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:19 2026 by rpki-client