Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7319CF823A311F185465D99DAE4EC9C.roa
File: A7319CF823A311F185465D99DAE4EC9C.roa (raw, json)
Hash identifier: F/9IpCEWYRuPuNuIrLkj1nb+yrbsZLtRn/1FlQJYZ7g=
Subject key identifier: 94:C9:0F:09:39:1B:61:C7:5F:E7:F9:34:F6:51:A4:51:BD:02:DE:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A608
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7319CF823A311F185465D99DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 14:55:22 +0000
ROA not before: Thu 19 Mar 2026 14:55:17 +0000
ROA not after: Wed 18 Nov 2026 14:55:17 +0000
asID: 152686
IP address blocks: 45.198.60.0/24 maxlen: 24
45.198.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108040 (0x1a608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 19 14:55:17 2026 GMT
Not After : Nov 18 14:55:17 2026 GMT
Subject: CN=69bc0e5a-9c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:e8:2d:0a:65:ad:5f:bb:3f:78:68:c9:10:
8f:32:f5:1d:b5:31:72:86:ee:1d:ab:24:b1:6c:85:
56:d8:b7:52:73:0d:c9:2c:c0:ae:f9:11:6d:a8:67:
8f:bb:20:3b:bb:15:01:52:84:c0:0f:16:4c:b2:5c:
ac:3f:05:67:1f:43:89:94:ff:d5:54:67:07:c1:f6:
2a:4a:8f:28:cd:a0:90:ef:0c:12:18:0b:04:18:88:
47:50:62:ff:5f:83:a1:ee:d7:72:7a:63:1c:6a:9a:
6f:83:50:47:26:5b:58:64:56:e5:b1:92:77:b0:dc:
b4:fe:73:d5:11:f5:89:a1:dc:67:4e:d2:76:bb:b6:
a3:19:de:a7:d0:d7:00:81:18:ea:a8:fb:43:28:92:
ef:e1:21:fe:6f:08:c3:c8:ba:46:2d:78:5d:72:b3:
26:53:7b:54:82:43:c4:a2:43:5d:55:66:c9:c2:e8:
48:b3:96:53:c0:1a:d4:22:36:c8:b1:90:d1:78:46:
24:50:39:aa:fc:44:6a:dd:68:c9:c1:1f:52:a8:65:
7d:91:b1:cd:19:a1:01:c9:0d:04:14:df:58:41:1b:
a1:f5:d4:4a:9c:a8:59:43:71:ff:1f:8c:d9:4e:21:
bc:2a:4a:4c:0e:e5:bf:6f:6b:25:1a:15:2d:57:15:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C9:0F:09:39:1B:61:C7:5F:E7:F9:34:F6:51:A4:51:BD:02:DE:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7319CF823A311F185465D99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.60.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:83:48:41:e8:1a:99:2b:ac:2e:a1:4a:ac:d6:d9:1f:cd:e2:
e1:74:79:d0:f1:f9:b6:55:b0:0a:07:6a:97:fa:b7:3a:76:12:
e5:c5:a0:07:d2:be:d5:79:e1:ea:be:35:f4:70:6c:ff:08:10:
dd:ad:29:b2:5c:2a:3d:2f:84:df:d4:19:f6:17:3c:f8:37:00:
0e:d2:f2:2a:3a:2d:e3:67:6f:e3:0b:38:5a:25:b4:39:7c:fe:
b8:db:cc:eb:8a:39:b3:3c:3d:f3:01:2d:03:2f:e5:bd:8a:d2:
56:e2:6c:67:72:28:94:9a:36:e6:51:7c:05:c4:f8:c9:7a:af:
ac:d0:5f:d4:03:17:d5:ab:fe:00:c5:8b:cb:1b:d2:3c:46:85:
50:70:f4:bf:7f:a2:fa:3f:18:1a:9f:da:3d:c3:f0:da:01:8b:
00:e8:3e:fe:cb:eb:12:72:43:13:f7:97:12:6f:d0:cc:f6:72:
34:07:e6:81:9b:ca:07:53:48:65:3c:30:93:89:1c:52:a5:e3:
30:60:7e:20:cd:97:ff:de:64:0b:00:02:72:df:dd:45:c5:44:
5f:e6:e1:75:9c:e3:cc:24:68:e5:25:1e:cd:27:5a:f2:b0:2d:
aa:dd:1b:2b:ba:c7:20:35:3a:65:ed:58:df:52:c8:5b:7d:93:
a6:97:fc:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaYIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE5MTQ1NTE3WhcNMjYxMTE4MTQ1NTE3WjAYMRYw
FAYDVQQDEw02OWJjMGU1YS05YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt77oLQplrV+7P3hoyRCPMvUdtTFyhu4dqySxbIVW2LdScw3JLMCu+RFt
qGePuyA7uxUBUoTADxZMslysPwVnH0OJlP/VVGcHwfYqSo8ozaCQ7wwSGAsEGIhH
UGL/X4Oh7tdyemMcappvg1BHJltYZFblsZJ3sNy0/nPVEfWJodxnTtJ2u7ajGd6n
0NcAgRjqqPtDKJLv4SH+bwjDyLpGLXhdcrMmU3tUgkPEokNdVWbJwuhIs5ZTwBrU
IjbIsZDReEYkUDmq/ERq3WjJwR9SqGV9kbHNGaEByQ0EFN9YQRuh9dRKnKhZQ3H/
H4zZTiG8KkpMDuW/b2slGhUtVxUS5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJTJ
Dwk5G2HHX+f5NPZRpFG9At6lMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNzMxOUNGODIzQTMxMUYxODU0NjVEOTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcY8MA0GCSqGSIb3DQEBCwUA
A4IBAQANg0hB6BqZK6wuoUqs1tkfzeLhdHnQ8fm2VbAKB2qX+rc6dhLlxaAH0r7V
eeHqvjX0cGz/CBDdrSmyXCo9L4Tf1Bn2Fzz4NwAO0vIqOi3jZ2/jCzhaJbQ5fP64
28zrijmzPD3zAS0DL+W9itJW4mxnciiUmjbmUXwFxPjJeq+s0F/UAxfVq/4AxYvL
G9I8RoVQcPS/f6L6Pxgan9o9w/DaAYsA6D7+y+sSckMT95cSb9DM9nI0B+aBm8oH
U0hlPDCTiRxSpeMwYH4gzZf/3mQLAAJy391FxURf5uF1nOPMJGjlJR7NJ1rysC2q
3RsruscgNTpl7VjfUshbfZOml/wQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:32 2026 by rpki-client