Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC5A24C253A11F1BC1D8CD5DAE4EC9C.roa
File: 9EC5A24C253A11F1BC1D8CD5DAE4EC9C.roa (raw, json)
Hash identifier: nKtBOStrJl1M1FF/CZx9f1bFIRr4SUW1vIUb/14VLFs=
Subject key identifier: 01:93:22:FA:62:75:44:36:60:F4:EC:1C:3A:43:A1:59:BC:B3:79:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A67C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC5A24C253A11F1BC1D8CD5DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 15:28:33 +0000
ROA not before: Sat 21 Mar 2026 15:28:28 +0000
ROA not after: Tue 28 Apr 2026 15:28:28 +0000
asID: 202656
IP address blocks: 45.192.48.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108156 (0x1a67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 15:28:28 2026 GMT
Not After : Apr 28 15:28:28 2026 GMT
Subject: CN=69beb921-de41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:11:6a:c7:a7:1b:30:d6:63:fb:1b:95:29:
f9:65:27:62:56:8b:82:b3:84:91:d8:db:e5:1e:7f:
6a:62:a6:5d:97:7c:eb:23:f3:33:69:e9:ec:da:04:
ad:13:9f:e6:50:b1:40:85:0b:88:02:4e:6d:f4:fa:
82:78:34:59:22:2b:c2:d7:ca:ce:de:9f:50:85:28:
c4:f4:5b:3d:f8:b7:59:be:50:73:67:31:a1:19:e1:
97:a0:ca:93:d3:23:82:5b:59:f8:c3:9f:ab:c6:03:
be:2b:db:36:82:c3:6c:3a:a7:2a:68:5c:1e:49:00:
25:dd:52:51:1e:4e:ee:75:0a:27:31:bc:4c:7f:56:
a4:94:60:68:a8:b8:2f:59:0f:fd:0e:3b:db:b4:29:
f4:1d:5d:5d:ab:db:ba:89:5a:a1:5e:1c:87:33:19:
97:8c:16:65:fa:97:11:f5:5e:27:b4:c9:8c:bb:1f:
f7:d1:dd:82:e9:e0:28:82:e1:4a:9b:cc:f4:55:54:
35:a5:41:a2:97:07:41:4d:6c:26:5d:9a:f4:07:3e:
34:92:4d:1c:9e:fc:55:dd:98:4b:61:6b:aa:08:47:
5e:d9:bd:a5:01:57:4c:aa:bf:41:82:b4:22:1b:01:
eb:5d:be:ae:94:46:bc:27:22:18:87:aa:46:92:35:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:93:22:FA:62:75:44:36:60:F4:EC:1C:3A:43:A1:59:BC:B3:79:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC5A24C253A11F1BC1D8CD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/24
45.199.230.0/24
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
13:17:45:38:b1:be:a9:e3:d9:77:bb:6f:9c:aa:cc:9f:24:92:
d1:de:13:9e:a5:69:5b:5f:a3:2e:d8:f0:29:9e:fb:50:fe:49:
2b:c0:90:91:79:da:8e:8f:6b:20:6d:d4:9f:16:84:30:12:07:
d4:98:fc:3b:40:39:19:dd:fd:c3:16:50:16:71:91:e4:f3:c5:
38:60:38:26:6f:9a:ec:32:06:1a:4e:fa:50:cf:50:60:cb:06:
1d:86:ab:d1:14:78:d7:84:32:7c:3d:97:f9:49:27:e9:3f:e0:
41:41:25:67:fe:3a:69:9f:53:76:e5:40:f3:c8:65:40:f8:bd:
0f:6f:39:fa:6b:44:50:00:74:41:6b:a6:5f:84:9a:75:7d:db:
23:a2:65:1c:12:07:ac:2f:f3:ed:02:c0:9b:f8:03:0c:3c:b7:
91:6c:cf:8c:23:3e:1f:1b:87:3c:b1:bb:82:2d:bc:dc:3e:57:
9c:28:db:37:5b:dc:ca:76:ba:bf:1b:96:fb:ed:25:05:21:69:
c5:92:c5:00:80:9e:52:1b:b5:7c:98:e7:47:54:5c:ff:99:63:
fc:73:3b:d2:85:c1:b5:73:b9:59:bd:e6:71:41:32:a1:e6:ed:
b9:fc:f7:88:07:8a:71:1e:56:ed:1c:c0:b8:7c:77:88:b4:d3:
9e:41:da:65
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAaZ8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIxMTUyODI4WhcNMjYwNDI4MTUyODI4WjAYMRYw
FAYDVQQDEw02OWJlYjkyMS1kZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwhwRasenGzDWY/sblSn5ZSdiVouCs4SR2NvlHn9qYqZdl3zrI/Mzaens
2gStE5/mULFAhQuIAk5t9PqCeDRZIivC18rO3p9QhSjE9Fs9+LdZvlBzZzGhGeGX
oMqT0yOCW1n4w5+rxgO+K9s2gsNsOqcqaFweSQAl3VJRHk7udQonMbxMf1aklGBo
qLgvWQ/9DjvbtCn0HV1dq9u6iVqhXhyHMxmXjBZl+pcR9V4ntMmMux/30d2C6eAo
guFKm8z0VVQ1pUGilwdBTWwmXZr0Bz40kk0cnvxV3ZhLYWuqCEde2b2lAVdMqr9B
grQiGwHrXb6ulEa8JyIYh6pGkjX/4wIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFAGT
IvpidUQ2YPTsHDpDoVm8s3lQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUM1QTI0QzI1M0ExMUYxQkMxRDhDRDVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQALcAwAwQALcfmMAwDBAAtx/ED
BAEtx/QwDAMEAC3H+QMEAC3H+gMEAC3H/DANBgkqhkiG9w0BAQsFAAOCAQEAExdF
OLG+qePZd7tvnKrMnySS0d4TnqVpW1+jLtjwKZ77UP5JK8CQkXnajo9rIG3UnxaE
MBIH1Jj8O0A5Gd39wxZQFnGR5PPFOGA4Jm+a7DIGGk76UM9QYMsGHYar0RR414Qy
fD2X+Ukn6T/gQUElZ/46aZ9TduVA88hlQPi9D285+mtEUAB0QWumX4SadX3bI6Jl
HBIHrC/z7QLAm/gDDDy3kWzPjCM+HxuHPLG7gi283D5XnCjbN1vcyna6vxuW++0l
BSFpxZLFAICeUhu1fJjnR1Rc/5lj/HM70oXBtXO5Wb3mcUEyoebtufz3iAeKcR5W
7RzAuHx3iLTTnkHaZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:12 2026 by rpki-client