Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE52B38250A11F18F30DFC3DAE4EC9C.roa
File: 8FE52B38250A11F18F30DFC3DAE4EC9C.roa (raw, json)
Hash identifier: ypZt8q7KyK8WZD0s7TkZaYC099c7auavqnjrZZYBxp0=
Subject key identifier: 85:9D:D4:35:15:E1:A0:1B:4E:6F:70:7A:0C:0F:DA:AF:0E:2F:C2:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A65A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE52B38250A11F18F30DFC3DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 09:44:33 +0000
ROA not before: Sat 21 Mar 2026 09:44:27 +0000
ROA not after: Tue 28 Apr 2026 09:44:27 +0000
asID: 202656
IP address blocks: 45.199.206.0/24 maxlen: 24
45.199.221.0/24 maxlen: 24
45.199.222.0/24 maxlen: 24
45.199.223.0/24 maxlen: 24
45.199.224.0/24 maxlen: 24
45.199.225.0/24 maxlen: 24
45.199.226.0/24 maxlen: 24
45.199.227.0/24 maxlen: 24
45.199.228.0/24 maxlen: 24
45.199.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108122 (0x1a65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 09:44:27 2026 GMT
Not After : Apr 28 09:44:27 2026 GMT
Subject: CN=69be6880-25ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:b6:64:bd:ed:9b:47:c8:ae:48:38:25:59:
a3:2c:bf:61:87:05:07:b0:17:7e:43:6b:01:0e:6a:
89:88:f3:54:73:48:fc:ae:bf:bc:9e:32:9c:df:0d:
e5:03:15:2e:0d:0a:9a:5c:10:47:b6:d3:61:12:bc:
da:d4:f4:67:a2:9d:32:a3:c3:05:dd:f5:14:07:0a:
a6:d9:3f:35:00:a6:bc:27:c5:53:64:c3:32:b3:c3:
88:3a:8d:b9:bc:b3:43:c1:b4:d8:c8:19:b1:5e:d6:
72:5f:fd:e7:04:fb:ca:d6:ca:70:6c:d5:9a:81:e5:
21:38:a3:fd:5c:0f:e8:ea:5a:14:d3:d4:d1:e5:05:
bb:57:c2:42:58:48:4c:c1:d2:b2:bc:92:a0:c7:86:
8b:0e:4e:04:89:5f:29:b2:0b:22:a0:2c:4d:c5:91:
98:16:3b:9e:ba:8b:fc:df:7f:fd:71:23:76:19:06:
08:3a:a8:64:d1:9d:41:76:13:89:6e:ab:28:e7:d2:
3b:63:d1:6e:7b:93:74:7e:27:51:97:64:6f:d8:d5:
b5:6e:3e:72:d8:76:0b:87:f8:ad:ea:55:7f:cc:26:
cc:fb:75:0f:ba:78:2e:b7:27:0f:d7:2f:8c:e7:ba:
8e:75:65:d1:79:b1:2b:b7:0d:b1:7c:dc:e5:b4:a9:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:D4:35:15:E1:A0:1B:4E:6F:70:7A:0C:0F:DA:AF:0E:2F:C2:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE52B38250A11F18F30DFC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.206.0/24
45.199.221.0-45.199.229.255
Signature Algorithm: sha256WithRSAEncryption
14:62:b4:e1:8d:aa:8e:b5:fa:c4:98:92:3c:31:e7:2c:ad:38:
45:f5:14:c7:6e:ae:64:6c:0c:60:d0:86:bf:1c:1a:2d:0c:32:
12:97:d6:5a:03:71:3c:5e:82:30:20:91:2f:3c:3d:b4:97:43:
69:b6:d2:4c:6b:0f:18:f9:b7:7e:fb:f4:40:ae:a3:b1:2d:e3:
83:f5:79:e9:29:14:06:eb:b2:22:6b:59:15:70:ca:50:6d:0f:
9a:92:05:d5:af:19:67:3e:99:95:5b:6e:14:6f:b9:23:09:26:
0b:42:98:0a:31:d2:4a:00:2f:41:e2:8c:04:65:ab:ea:d3:7c:
04:f9:d8:dd:53:18:15:e7:3d:41:b9:a5:c3:30:4c:e6:aa:f4:
91:f5:17:85:e2:b2:27:c2:c5:9a:47:c9:27:02:f2:dd:8f:3a:
e6:f2:ac:74:83:c5:ed:36:d4:aa:ce:2b:c0:41:b3:a4:ff:b3:
4f:be:1e:da:ae:7b:73:33:11:66:83:88:21:8d:7f:59:cd:e6:
e3:88:fe:12:f9:f0:32:2a:7b:ed:fd:01:5b:50:e5:0d:b5:99:
2c:85:1c:15:08:e3:80:c8:c1:31:e6:79:ec:4e:9d:2c:6d:f5:
44:7e:d1:fa:41:03:a8:4b:d4:c9:23:e6:d6:d6:19:33:1a:54:
7b:64:02:27
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAaZaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIxMDk0NDI3WhcNMjYwNDI4MDk0NDI3WjAYMRYw
FAYDVQQDEw02OWJlNjg4MC0yNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy5K2ZL3tm0fIrkg4JVmjLL9hhwUHsBd+Q2sBDmqJiPNUc0j8rr+8njKc
3w3lAxUuDQqaXBBHttNhErza1PRnop0yo8MF3fUUBwqm2T81AKa8J8VTZMMys8OI
Oo25vLNDwbTYyBmxXtZyX/3nBPvK1spwbNWageUhOKP9XA/o6loU09TR5QW7V8JC
WEhMwdKyvJKgx4aLDk4EiV8psgsioCxNxZGYFjueuov833/9cSN2GQYIOqhk0Z1B
dhOJbqso59I7Y9Fue5N0fidRl2Rv2NW1bj5y2HYLh/it6lV/zCbM+3UPungutycP
1y+M57qOdWXRebErtw2xfNzltKk58wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIWd
1DUV4aAbTm9wegwP2q8OL8KPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RkU1MkIzODI1MEExMUYxOEYzMERGQzNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALcfOMAwDBAAtx90DBAEtx+Qw
DQYJKoZIhvcNAQELBQADggEBABRitOGNqo61+sSYkjwx5yytOEX1FMdurmRsDGDQ
hr8cGi0MMhKX1loDcTxegjAgkS88PbSXQ2m20kxrDxj5t3779ECuo7Et44P1eekp
FAbrsiJrWRVwylBtD5qSBdWvGWc+mZVbbhRvuSMJJgtCmAox0koAL0HijARlq+rT
fAT52N1TGBXnPUG5pcMwTOaq9JH1F4XisifCxZpHyScC8t2POubyrHSDxe021KrO
K8BBs6T/s0++Htque3MzEWaDiCGNf1nN5uOI/hL58DIqe+39AVtQ5Q21mSyFHBUI
44DIwTHmeexOnSxt9UR+0fpBA6hL1Mkj5tbWGTMaVHtkAic=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:54 2026 by rpki-client