Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4C8FB421DE11F18D5686C9DAE4EC9C.roa
File: 4A4C8FB421DE11F18D5686C9DAE4EC9C.roa (raw, json)
Hash identifier: zdGVs0qp3o2kFTKiz7hcgjjzss8CX8k1sPjeUKtCSw4=
Subject key identifier: BF:4A:36:05:05:7F:04:0E:ED:60:62:E5:95:33:85:E0:29:08:A3:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4C8FB421DE11F18D5686C9DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 08:50:04 +0000
ROA not before: Tue 17 Mar 2026 08:49:59 +0000
ROA not after: Fri 19 Mar 2027 08:49:59 +0000
asID: 60609
IP address blocks: 45.200.136.0/24 maxlen: 24
45.200.137.0/24 maxlen: 24
45.200.138.0/24 maxlen: 24
45.200.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107942 (0x1a5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 08:49:59 2026 GMT
Not After : Mar 19 08:49:59 2027 GMT
Subject: CN=69b915bc-6979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:c5:b9:43:05:a3:0e:e9:5a:70:95:26:54:
ad:62:36:32:79:63:f3:17:ed:61:4d:33:f3:12:30:
0c:e9:16:37:f8:af:b0:9a:4d:bd:44:c5:f1:7c:94:
5d:f6:a4:5e:aa:f7:45:ae:df:04:50:97:75:e4:42:
5f:b0:a2:e7:a0:84:3d:b7:c9:7f:65:af:fe:5d:1c:
95:9b:99:5c:7b:67:dd:9d:48:ab:45:ce:1c:b6:34:
70:52:07:e2:66:9a:96:26:16:ef:6d:11:78:df:0b:
58:07:7d:59:e2:69:be:e9:c2:95:84:36:06:c0:13:
6c:d3:ab:62:53:3a:d4:3a:0a:7a:72:f1:30:ce:80:
d6:11:6a:93:2e:b6:68:29:e3:15:72:45:86:54:38:
5c:1d:21:d2:d7:08:27:56:83:e7:68:a6:aa:1b:bc:
a8:de:69:c9:65:62:44:e7:fa:1f:a2:88:e4:da:ac:
da:f6:d0:a4:57:71:6a:4c:a9:e8:94:ce:14:33:f5:
16:2b:82:e1:10:1c:3f:c9:79:99:71:87:5f:a8:46:
a1:86:12:09:c8:b6:37:74:64:0f:e8:9e:ad:2a:b2:
98:a5:c8:0e:d0:b3:b8:fd:f0:c0:56:d3:a5:39:57:
96:85:64:85:16:b2:c9:e9:7e:d9:63:11:a2:8f:bc:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:36:05:05:7F:04:0E:ED:60:62:E5:95:33:85:E0:29:08:A3:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4C8FB421DE11F18D5686C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.136.0/22
Signature Algorithm: sha256WithRSAEncryption
13:27:36:af:77:08:0a:a7:7c:c9:5c:8f:fe:bf:b4:ed:c5:e7:
26:42:fd:2e:48:9f:70:ed:50:80:fc:31:39:2e:4d:fd:d4:1e:
f6:73:52:cd:0c:10:9b:be:74:72:22:92:e2:af:e5:01:e0:b5:
5d:4b:2d:48:0f:23:1f:e3:83:05:70:c2:20:03:78:f3:64:fa:
95:f7:48:ef:35:b0:30:bb:40:c4:bb:56:ef:ba:c9:25:08:e3:
74:b5:f1:16:4d:c0:07:3d:a3:8a:ad:51:11:af:6a:86:84:cf:
15:e1:8a:9a:86:25:84:3d:a7:f5:27:47:ce:e6:3a:8f:04:db:
2e:17:ab:af:bd:e8:d2:6d:54:cb:a0:ae:a8:b0:57:0e:8e:e4:
3b:3f:72:4e:a2:cc:5a:c2:fa:1a:59:e5:eb:70:89:9e:3d:96:
72:55:f6:93:e3:c2:a7:96:8b:dd:f8:ba:f7:c4:d3:7b:3c:40:
57:2b:6d:fa:72:f8:91:94:63:cb:4f:74:4e:1f:70:11:01:58:
d7:2a:89:47:5f:13:09:23:80:6f:1c:64:04:e0:52:47:63:d8:
e9:22:64:07:fd:bf:ba:9a:dc:f7:cc:9d:e4:96:1e:cb:1c:4f:
f3:e6:d0:bb:17:15:01:59:b8:b9:94:bb:5b:81:14:ca:5a:a1:
6f:65:f9:d1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaWmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE3MDg0OTU5WhcNMjcwMzE5MDg0OTU5WjAYMRYw
FAYDVQQDEw02OWI5MTViYy02OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyTvFuUMFow7pWnCVJlStYjYyeWPzF+1hTTPzEjAM6RY3+K+wmk29RMXx
fJRd9qReqvdFrt8EUJd15EJfsKLnoIQ9t8l/Za/+XRyVm5lce2fdnUirRc4ctjRw
UgfiZpqWJhbvbRF43wtYB31Z4mm+6cKVhDYGwBNs06tiUzrUOgp6cvEwzoDWEWqT
LrZoKeMVckWGVDhcHSHS1wgnVoPnaKaqG7yo3mnJZWJE5/ofoojk2qza9tCkV3Fq
TKnolM4UM/UWK4LhEBw/yXmZcYdfqEahhhIJyLY3dGQP6J6tKrKYpcgO0LO4/fDA
VtOlOVeWhWSFFrLJ6X7ZYxGij7yI1QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL9K
NgUFfwQO7WBi5ZUzheApCKPrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QTRDOEZCNDIxREUxMUYxOEQ1Njg2QzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLciIMA0GCSqGSIb3DQEBCwUA
A4IBAQATJzavdwgKp3zJXI/+v7TtxecmQv0uSJ9w7VCA/DE5Lk391B72c1LNDBCb
vnRyIpLir+UB4LVdSy1IDyMf44MFcMIgA3jzZPqV90jvNbAwu0DEu1bvusklCON0
tfEWTcAHPaOKrVERr2qGhM8V4YqahiWEPaf1J0fO5jqPBNsuF6uvvejSbVTLoK6o
sFcOjuQ7P3JOosxawvoaWeXrcImePZZyVfaT48Knlovd+Lr3xNN7PEBXK236cviR
lGPLT3ROH3ARAVjXKolHXxMJI4BvHGQE4FJHY9jpImQH/b+6mtz3zJ3klh7LHE/z
5tC7FxUBWbi5lLtbgRTKWqFvZfnR
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:27 2026 by rpki-client