Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9745F3C6239311F1918CE3BCDAE4EC9C.roa
File: 9745F3C6239311F1918CE3BCDAE4EC9C.roa (raw, json)
Hash identifier: OycO1thra5tfrkYUKPX6aWD8FG8uYqhTuVaN9wZ+uhM=
Subject key identifier: 6A:70:05:E6:75:AB:C8:CA:37:13:5E:F9:E6:76:29:43:5B:D6:BB:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A600
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9745F3C6239311F1918CE3BCDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 13:00:23 +0000
ROA not before: Thu 19 Mar 2026 13:00:18 +0000
ROA not after: Tue 31 Mar 2026 13:00:18 +0000
asID: 401783
IP address blocks: 45.198.227.0/24 maxlen: 24
156.230.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108032 (0x1a600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 19 13:00:18 2026 GMT
Not After : Mar 31 13:00:18 2026 GMT
Subject: CN=69bbf367-ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:6c:ce:db:cf:81:6b:14:a6:b6:be:c6:70:
22:b9:52:30:1b:f0:1c:09:01:c3:ad:b2:c9:c7:ba:
f8:65:28:90:fe:74:9f:d0:78:a0:b7:1d:49:dc:38:
0f:4b:81:f7:4c:77:aa:dc:27:33:fc:e7:58:bb:61:
ba:ab:06:b9:24:8a:bc:06:c8:25:78:45:60:a9:48:
55:a2:a8:ee:ca:69:13:48:27:b5:b6:d8:2e:30:61:
7b:c4:d5:aa:77:bf:25:4b:5d:f7:01:65:2a:c7:e2:
0c:3f:d3:4e:34:fa:16:bf:39:d9:33:9c:33:e1:ce:
43:75:84:f5:f2:76:5f:1b:16:9d:b8:11:74:76:fd:
ae:02:8a:13:60:06:f4:48:f3:1a:b2:b1:0c:79:20:
ff:2a:0b:27:16:6d:bb:1e:9f:05:d0:e6:36:45:95:
a8:a3:92:3b:c9:15:24:bd:ea:a5:ab:ed:98:8a:67:
dc:ed:99:f4:eb:d9:be:0c:6b:14:a5:2c:de:d4:49:
ce:84:ba:1e:a5:57:6f:bc:77:92:78:75:15:e5:1e:
c4:48:0e:88:51:9a:54:40:48:b2:49:47:37:78:86:
c8:81:d3:b0:2a:f1:49:55:30:ff:8c:67:ac:01:bb:
42:a4:97:f0:c3:ee:0c:58:fa:ee:5c:6b:89:38:1f:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:70:05:E6:75:AB:C8:CA:37:13:5E:F9:E6:76:29:43:5B:D6:BB:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9745F3C6239311F1918CE3BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.227.0/24
156.230.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c9:39:f1:6b:1d:50:06:d5:da:0c:d3:54:0c:b3:aa:c3:b4:
39:e0:f6:18:73:cd:74:73:ff:e2:a8:57:cd:c3:c4:fc:50:d0:
d9:9d:6e:fa:24:d9:b4:38:60:07:21:b5:01:6a:eb:dd:5d:2d:
48:db:d2:2c:94:51:ec:78:0d:6b:45:b9:20:a6:ae:d7:71:3c:
79:57:8c:fc:aa:36:17:63:3b:6f:60:94:82:d9:6b:52:ba:e2:
12:79:a2:97:c9:d5:d9:f2:25:e9:b0:cd:3b:e8:26:be:e9:a2:
f9:ba:78:53:49:3f:6c:05:6c:33:b8:16:3f:5f:36:d7:d5:75:
3b:70:f5:2d:fc:f9:71:73:4f:f2:25:92:40:25:d9:22:18:9f:
0b:6e:69:fd:7d:29:1f:e2:f8:fe:2b:8a:58:37:cd:59:af:f8:
0e:fd:4c:66:cd:5d:88:a5:5f:8d:d2:e0:a6:1d:05:35:3b:82:
e7:fc:8f:fa:2f:63:90:d5:44:3f:81:c5:cd:4b:b3:66:e8:e2:
6c:73:a2:05:38:06:bd:79:3b:18:d2:de:a8:64:3d:63:5f:13:
d7:e7:f9:07:0d:45:df:ef:f1:9d:43:82:3e:78:62:24:5e:7e:
a7:3a:ae:ed:d1:90:b7:11:dd:5f:b8:0f:4e:cd:04:62:81:cd:
be:4d:0b:38
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAaYAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE5MTMwMDE4WhcNMjYwMzMxMTMwMDE4WjAYMRYw
FAYDVQQDEw02OWJiZjM2Ny1lZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4s1sztvPgWsUpra+xnAiuVIwG/AcCQHDrbLJx7r4ZSiQ/nSf0Higtx1J
3DgPS4H3THeq3Ccz/OdYu2G6qwa5JIq8BsgleEVgqUhVoqjuymkTSCe1ttguMGF7
xNWqd78lS133AWUqx+IMP9NONPoWvznZM5wz4c5DdYT18nZfGxaduBF0dv2uAooT
YAb0SPMasrEMeSD/KgsnFm27Hp8F0OY2RZWoo5I7yRUkveqlq+2Yimfc7Zn069m+
DGsUpSze1EnOhLoepVdvvHeSeHUV5R7ESA6IUZpUQEiySUc3eIbIgdOwKvFJVTD/
jGesAbtCpJfww+4MWPruXGuJOB8HYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpw
BeZ1q8jKNxNe+eZ2KUNb1rt/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NzQ1RjNDNjIzOTMxMUYxOTE4Q0UzQkNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcbjAwQAnOagMA0GCSqGSIb3
DQEBCwUAA4IBAQCtyTnxax1QBtXaDNNUDLOqw7Q54PYYc810c//iqFfNw8T8UNDZ
nW76JNm0OGAHIbUBauvdXS1I29IslFHseA1rRbkgpq7XcTx5V4z8qjYXYztvYJSC
2WtSuuISeaKXydXZ8iXpsM076Ca+6aL5unhTST9sBWwzuBY/XzbX1XU7cPUt/Plx
c0/yJZJAJdkiGJ8Lbmn9fSkf4vj+K4pYN81Zr/gO/UxmzV2IpV+N0uCmHQU1O4Ln
/I/6L2OQ1UQ/gcXNS7Nm6OJsc6IFOAa9eTsY0t6oZD1jXxPX5/kHDUXf7/GdQ4I+
eGIkXn6nOq7t0ZC3Ed1fuA9OzQRigc2+TQs4
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:19 2026 by rpki-client