Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F232DC23D6311F1B1BE95EFCE1D38B0.roa
File: 4F232DC23D6311F1B1BE95EFCE1D38B0.roa (raw, json)
Hash identifier: SYryjom+NrnWgr5IC5bB2ldc8ljer/wfERkUX1OwqQU=
Subject key identifier: 0E:72:47:9B:45:0F:14:92:7D:FB:D5:8F:2C:EB:16:10:7A:6C:A3:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ADCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F232DC23D6311F1B1BE95EFCE1D38B0.roa
Signing time: Tue 21 Apr 2026 09:20:17 +0000
ROA not before: Tue 21 Apr 2026 09:20:12 +0000
ROA not after: Thu 28 May 2026 09:20:12 +0000
asID: 152711
IP address blocks: 45.202.209.0/24 maxlen: 24
45.202.210.0/24 maxlen: 24
45.202.211.0/24 maxlen: 24
45.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110028 (0x1adcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 21 09:20:12 2026 GMT
Not After : May 28 09:20:12 2026 GMT
Subject: CN=69e74151-2854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:41:5d:d3:c5:62:6c:82:d0:bc:94:c0:25:
38:d2:1e:4e:99:e6:60:a7:da:0e:c9:91:e2:96:fa:
a2:ff:d4:91:a4:fa:36:10:32:49:14:2a:8b:82:64:
c5:5b:a1:52:6a:3b:53:77:37:df:60:59:0e:09:f3:
fd:40:1d:b6:8a:97:e7:99:45:be:63:05:56:d3:83:
12:2e:4c:e1:f4:22:ed:47:ab:7d:6a:42:df:e9:23:
21:b5:55:95:48:4a:a5:56:36:06:d1:aa:d8:c2:03:
e9:e9:14:e5:da:4d:dd:09:0b:91:7f:bb:09:ca:ff:
f0:7e:aa:72:96:b4:1b:45:98:b0:51:b3:3c:b0:8a:
e0:f8:26:9c:cc:e4:64:04:de:1c:66:7a:b3:f0:fd:
05:27:7b:62:26:df:68:ed:b3:79:92:49:56:a5:2e:
30:08:b1:df:c2:ba:0f:85:27:b7:72:85:f0:ec:66:
af:6d:ac:e0:ab:38:65:c0:a4:c8:82:a7:32:cf:fa:
7f:a8:ff:fc:c4:0a:1d:bb:52:df:d4:22:36:03:88:
0b:c9:a4:43:4e:a7:ba:fb:be:6b:77:d7:71:e3:fe:
21:f8:01:64:0a:41:65:50:59:e4:d1:ee:15:3c:77:
be:d0:3e:45:7e:26:b7:8c:ce:e9:2c:ea:7f:ab:3b:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:47:9B:45:0F:14:92:7D:FB:D5:8F:2C:EB:16:10:7A:6C:A3:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F232DC23D6311F1B1BE95EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.209.0-45.202.212.255
Signature Algorithm: sha256WithRSAEncryption
71:cf:3e:c0:08:f8:df:05:49:a0:8f:3a:dd:97:b4:6e:74:b6:
c8:59:9d:02:8b:a7:aa:0a:3c:8a:28:21:7a:23:dc:57:3e:40:
5d:ef:ba:bd:e5:fc:e8:9e:15:e6:3b:85:c6:36:b0:3d:d6:f5:
07:ad:6d:51:17:4c:27:c8:fb:7c:30:6b:74:1a:d5:0a:30:54:
fc:c7:1c:e5:c4:04:cb:4e:eb:8d:77:67:b4:0b:b5:ac:ed:7b:
75:3e:85:73:e5:23:3c:f2:8c:6d:15:ae:1e:2c:bd:28:a4:eb:
4d:de:99:38:76:43:09:c6:4c:94:de:57:40:0e:32:b3:44:5d:
7d:8e:0f:8c:7f:c2:f2:00:e4:88:ce:c1:01:64:d2:8a:c1:70:
cc:66:85:2b:dd:18:7e:a7:72:59:48:06:9f:ad:9b:10:88:ad:
75:2b:e6:7c:ff:a2:84:f6:d5:30:5b:92:c7:63:76:29:95:ff:
fd:12:24:60:d0:dc:a4:f7:8d:5a:35:d6:97:fe:64:fc:b8:89:
88:bc:8a:f4:83:8d:53:9f:20:c2:c5:27:f0:cf:8d:31:ee:1a:
53:b2:a8:ee:ce:c1:77:1c:6a:c5:5e:9b:80:8b:eb:2b:0e:02:
b8:3e:4e:9e:66:9f:dd:f8:0c:a0:ae:53:80:22:af:5b:3a:b3:
f6:f8:84:fe
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAa3MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIxMDkyMDEyWhcNMjYwNTI4MDkyMDEyWjAYMRYw
FAYDVQQDEw02OWU3NDE1MS0yODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw3NBXdPFYmyC0LyUwCU40h5OmeZgp9oOyZHilvqi/9SRpPo2EDJJFCqL
gmTFW6FSajtTdzffYFkOCfP9QB22ipfnmUW+YwVW04MSLkzh9CLtR6t9akLf6SMh
tVWVSEqlVjYG0arYwgPp6RTl2k3dCQuRf7sJyv/wfqpylrQbRZiwUbM8sIrg+Cac
zORkBN4cZnqz8P0FJ3tiJt9o7bN5kklWpS4wCLHfwroPhSe3coXw7Gavbazgqzhl
wKTIgqcyz/p/qP/8xAodu1Lf1CI2A4gLyaRDTqe6+75rd9dx4/4h+AFkCkFlUFnk
0e4VPHe+0D5Ffia3jM7pLOp/qzvV/wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFA5y
R5tFDxSSffvVjyzrFhB6bKO/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RjIzMkRDMjNENjMxMUYxQjFCRTk1RUZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtytEDBAAtytQwDQYJKoZI
hvcNAQELBQADggEBAHHPPsAI+N8FSaCPOt2XtG50tshZnQKLp6oKPIooIXoj3Fc+
QF3vur3l/OieFeY7hcY2sD3W9QetbVEXTCfI+3wwa3Qa1QowVPzHHOXEBMtO6413
Z7QLtazte3U+hXPlIzzyjG0Vrh4svSik603emTh2QwnGTJTeV0AOMrNEXX2OD4x/
wvIA5IjOwQFk0orBcMxmhSvdGH6ncllIBp+tmxCIrXUr5nz/ooT21TBbksdjdimV
//0SJGDQ3KT3jVo11pf+ZPy4iYi8ivSDjVOfIMLFJ/DPjTHuGlOyqO7OwXccasVe
m4CL6ysOArg+Tp5mn934DKCuU4Air1s6s/b4hP4=
-----END CERTIFICATE-----
Generated at Wed May 13 09:21:10 2026 by rpki-client