Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86DA285E447211F1B8073213CF1D38B0.roa
File: 86DA285E447211F1B8073213CF1D38B0.roa (raw, json)
Hash identifier: PzBWFTYqD/Pdl77HkZVBQpfEQk7Z49niNKxfhNVYhQU=
Subject key identifier: C4:02:AB:21:64:99:3C:B5:6E:30:C6:F0:2D:51:D1:63:80:7A:41:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B00E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86DA285E447211F1B8073213CF1D38B0.roa
Signing time: Thu 30 Apr 2026 08:56:51 +0000
ROA not before: Thu 30 Apr 2026 08:56:46 +0000
ROA not after: Mon 30 Apr 2029 08:56:46 +0000
asID: 17561
IP address blocks: 45.192.133.0/24 maxlen: 24
45.194.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110606 (0x1b00e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 08:56:46 2026 GMT
Not After : Apr 30 08:56:46 2029 GMT
Subject: CN=69f31953-8479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:59:80:46:8d:87:98:63:e3:2e:f3:c8:c7:
c5:0b:25:17:2a:aa:3c:51:4e:9f:91:be:11:61:4b:
92:9d:c2:5d:00:b5:b8:8f:70:85:fb:e4:0d:63:43:
d7:39:0c:1c:c3:2a:cd:ad:70:8f:f8:bf:9d:a2:0d:
af:2b:85:6c:24:b6:bd:ad:f5:30:da:f6:86:57:ec:
de:b3:7e:90:5c:46:4d:32:d0:21:c8:09:de:06:16:
31:a5:5a:87:89:c4:91:b5:97:f6:07:ae:fd:f2:9e:
b6:5a:03:ba:0a:fc:42:95:f5:64:16:ed:82:2b:15:
ed:95:9b:f5:74:94:fe:76:7c:64:9c:02:8b:5d:59:
de:8a:65:b5:ae:5d:b2:d4:42:0b:0f:a8:79:4c:b1:
42:a4:97:24:04:8b:2c:26:2a:8b:f2:b8:d3:c2:25:
5c:c1:be:25:df:1a:d8:7c:c4:12:7d:d9:de:6e:c4:
67:59:42:f4:a3:e4:28:e5:e8:b3:23:82:c0:a8:98:
7e:01:ff:69:8b:71:d8:4a:f8:3e:c1:3a:58:ae:6e:
8c:58:78:2a:aa:ac:6d:00:e4:f4:7b:0b:4a:9e:6b:
56:7a:8e:85:f4:36:b9:aa:2c:20:51:07:f9:cb:61:
bc:ad:37:ce:45:74:9a:c3:16:8c:83:db:4f:1e:38:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:AB:21:64:99:3C:B5:6E:30:C6:F0:2D:51:D1:63:80:7A:41:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86DA285E447211F1B8073213CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.133.0/24
45.194.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:dd:4d:f0:cf:fb:1b:5e:41:e2:99:5c:7e:1a:50:cb:30:21:
3d:0e:4c:cc:2d:0b:73:02:db:f6:f4:58:74:69:e6:d2:aa:1b:
a7:78:c8:6f:49:92:39:c3:bd:b0:7b:ad:17:18:c0:d3:bf:77:
fd:c5:fb:38:76:4c:92:66:e7:3d:8d:36:9e:75:9e:48:66:96:
a2:63:1e:05:25:f3:8f:ed:f5:e6:ee:37:f8:c6:6d:4e:26:38:
e9:20:74:28:75:27:f0:89:12:5f:c7:ec:81:bb:a2:9d:4a:be:
f0:fc:6a:e0:e9:dc:65:81:f6:cc:f3:7a:95:db:a8:f9:a8:22:
75:a3:51:ce:e1:6a:31:99:f3:bc:64:43:a4:d3:57:f1:11:52:
28:c0:d9:d6:e9:2a:2f:86:92:28:02:b8:aa:fe:ed:a1:2a:c2:
14:91:74:e0:d1:da:55:de:34:e9:30:ad:d8:0a:73:b9:bb:af:
ac:76:6f:42:d7:25:be:5b:dd:b1:3e:1d:d5:a1:da:79:00:20:
51:14:84:f2:8f:55:1c:34:a9:1b:99:f6:c0:f0:56:3c:3d:97:
0f:54:f3:cf:33:1d:42:7d:e0:9a:bf:24:d8:fc:40:99:29:07:
ee:14:ad:bc:72:46:1b:17:97:98:c1:85:6a:9a:f7:23:0f:71:
c6:2d:49:a9
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAbAOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDMwMDg1NjQ2WhcNMjkwNDMwMDg1NjQ2WjAYMRYw
FAYDVQQDEw02OWYzMTk1My04NDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAylpZgEaNh5hj4y7zyMfFCyUXKqo8UU6fkb4RYUuSncJdALW4j3CF++QN
Y0PXOQwcwyrNrXCP+L+dog2vK4VsJLa9rfUw2vaGV+zes36QXEZNMtAhyAneBhYx
pVqHicSRtZf2B6798p62WgO6CvxClfVkFu2CKxXtlZv1dJT+dnxknAKLXVneimW1
rl2y1EILD6h5TLFCpJckBIssJiqL8rjTwiVcwb4l3xrYfMQSfdnebsRnWUL0o+Qo
5eizI4LAqJh+Af9pi3HYSvg+wTpYrm6MWHgqqqxtAOT0ewtKnmtWeo6F9Da5qiwg
UQf5y2G8rTfORXSawxaMg9tPHjjiRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQC
qyFkmTy1bjDG8C1R0WOAekFNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NkRBMjg1RTQ0NzIxMUYxQjgwNzMyMTNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcCFAwQALcJDMA0GCSqGSIb3
DQEBCwUAA4IBAQCt3U3wz/sbXkHimVx+GlDLMCE9DkzMLQtzAtv29Fh0aebSqhun
eMhvSZI5w72we60XGMDTv3f9xfs4dkySZuc9jTaedZ5IZpaiYx4FJfOP7fXm7jf4
xm1OJjjpIHQodSfwiRJfx+yBu6KdSr7w/Grg6dxlgfbM83qV26j5qCJ1o1HO4Wox
mfO8ZEOk01fxEVIowNnW6SovhpIoAriq/u2hKsIUkXTg0dpV3jTpMK3YCnO5u6+s
dm9C1yW+W92xPh3Vodp5ACBRFITyj1UcNKkbmfbA8FY8PZcPVPPPMx1CfeCavyTY
/ECZKQfuFK28ckYbF5eYwYVqmvcjD3HGLUmp
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:27 2026 by rpki-client