Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9736B8841C5411F1A9369AF4DAE4EC9C.roa
File: 9736B8841C5411F1A9369AF4DAE4EC9C.roa (raw, json)
Hash identifier: FTgxIbXaJg5IkQrDwWV8oRa6drMhvjaYp59tKUI6H2s=
Subject key identifier: 8A:19:3B:A5:DA:91:B2:07:2F:3D:E8:C3:1C:6B:87:1D:8B:E0:05:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9736B8841C5411F1A9369AF4DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:41:47 +0000
ROA not before: Tue 10 Mar 2026 07:41:40 +0000
ROA not after: Thu 16 Apr 2026 07:41:40 +0000
asID: 205463
IP address blocks: 45.196.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107432 (0x1a3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 07:41:40 2026 GMT
Not After : Apr 16 07:41:40 2026 GMT
Subject: CN=69afcb3b-798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:b8:8b:cf:95:b2:b4:2c:b6:25:89:0a:f7:
d5:05:03:ed:a3:e4:45:b8:e2:b7:ab:91:6b:42:ec:
b7:3b:a5:9c:d1:41:92:57:3e:db:22:63:38:de:8b:
6c:09:1d:bf:77:0b:27:46:31:3f:66:fb:0e:54:d9:
ff:47:36:ef:44:57:06:83:f9:3a:b0:92:93:5d:a7:
19:ae:9e:e1:7a:f6:a7:ee:20:02:38:fe:95:85:0a:
d1:e3:36:79:90:d5:52:8b:c4:37:52:46:27:9e:05:
9e:22:bb:f3:98:13:30:c2:50:90:27:8c:0c:28:3d:
5a:84:f3:c9:52:65:dc:17:47:08:79:96:a6:6e:18:
aa:96:53:dd:92:cb:a3:c5:aa:e0:0b:20:89:15:c3:
5b:ec:66:9c:ff:af:80:32:2b:0c:02:44:3d:2b:aa:
c7:1c:cc:29:da:64:a2:06:9c:6d:db:64:23:0a:7c:
49:91:93:d9:1a:88:60:24:35:c5:89:42:9e:1c:0f:
45:d3:d2:86:77:d5:bf:fc:96:8e:aa:99:59:7d:3f:
ae:d1:73:fc:47:5a:18:9b:f2:55:da:00:71:b5:dc:
df:d2:24:46:2b:d3:3a:8c:59:0a:90:36:cd:d6:3f:
56:18:07:53:14:1d:8c:23:77:ca:3a:52:dc:e4:3c:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:19:3B:A5:DA:91:B2:07:2F:3D:E8:C3:1C:6B:87:1D:8B:E0:05:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9736B8841C5411F1A9369AF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4d:e5:c1:21:23:4a:7d:e8:99:22:2e:49:f5:59:36:f6:13:
92:20:7e:ac:0e:b8:94:95:19:d3:08:5e:a2:f3:79:a8:d0:d0:
c4:b5:f0:f9:5b:b0:31:f0:0b:6f:0a:32:ae:fa:bb:2b:99:c1:
26:42:6a:5b:c7:f6:aa:7d:88:7f:f8:c0:66:d6:19:25:59:31:
c8:42:bd:19:4a:eb:c3:5f:f2:de:7a:c9:0f:8a:d1:32:12:f4:
28:8c:30:dd:a3:da:c9:ba:34:a6:dc:0d:a1:c8:79:13:d2:0d:
7c:45:b5:49:2c:91:34:73:d3:f4:5e:b5:2d:74:c3:d9:98:db:
df:a4:79:9c:9c:3c:ce:31:85:d8:8d:86:23:aa:b7:ad:9f:20:
d8:02:7e:db:76:a1:89:98:69:93:31:7f:b3:fd:bd:cf:95:70:
e0:80:81:33:e7:d6:2d:6c:8f:16:5b:60:b3:da:87:4e:1c:c7:
8b:53:c9:dd:59:cd:32:4a:9a:f0:b3:34:43:93:26:20:ca:74:
23:dd:a3:8c:cb:41:51:dc:cd:38:7a:0a:90:32:00:b3:ec:9b:
ae:5e:a6:7b:bf:a3:e5:ed:3a:9e:72:5f:48:08:5d:c8:d4:33:
47:ee:1f:fe:35:45:eb:ef:c3:13:fa:78:04:42:b1:38:86:6c:
2d:5e:48:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaOoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEwMDc0MTQwWhcNMjYwNDE2MDc0MTQwWjAYMRYw
FAYDVQQDEw02OWFmY2IzYi03OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvHC4i8+VsrQstiWJCvfVBQPto+RFuOK3q5FrQuy3O6Wc0UGSVz7bImM4
3otsCR2/dwsnRjE/ZvsOVNn/RzbvRFcGg/k6sJKTXacZrp7hevan7iACOP6VhQrR
4zZ5kNVSi8Q3UkYnngWeIrvzmBMwwlCQJ4wMKD1ahPPJUmXcF0cIeZambhiqllPd
ksujxargCyCJFcNb7Gac/6+AMisMAkQ9K6rHHMwp2mSiBpxt22QjCnxJkZPZGohg
JDXFiUKeHA9F09KGd9W//JaOqplZfT+u0XP8R1oYm/JV2gBxtdzf0iRGK9M6jFkK
kDbN1j9WGAdTFB2MI3fKOlLc5DxWRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIoZ
O6XakbIHLz3owxxrhx2L4AVpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NzM2Qjg4NDFDNTQxMUYxQTkzNjlBRjREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTWMA0GCSqGSIb3DQEBCwUA
A4IBAQCjTeXBISNKfeiZIi5J9Vk29hOSIH6sDriUlRnTCF6i83mo0NDEtfD5W7Ax
8AtvCjKu+rsrmcEmQmpbx/aqfYh/+MBm1hklWTHIQr0ZSuvDX/LeeskPitEyEvQo
jDDdo9rJujSm3A2hyHkT0g18RbVJLJE0c9P0XrUtdMPZmNvfpHmcnDzOMYXYjYYj
qretnyDYAn7bdqGJmGmTMX+z/b3PlXDggIEz59YtbI8WW2Cz2odOHMeLU8ndWc0y
SprwszRDkyYgynQj3aOMy0FR3M04egqQMgCz7JuuXqZ7v6Pl7Tqecl9ICF3I1DNH
7h/+NUXr78MT+ngEQrE4hmwtXkjJ
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:28 2026 by rpki-client