Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8DF44303E4A11F1BED70C02CF1D38B0.roa
File: A8DF44303E4A11F1BED70C02CF1D38B0.roa (raw, json)
Hash identifier: k5Y89c0CEYPLYy9xVdn6s2ISZDdV0PF/ooTDcJujnHM=
Subject key identifier: 66:5B:FB:99:95:D9:96:20:33:19:A5:95:E6:96:04:9A:6D:9B:B6:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8DF44303E4A11F1BED70C02CF1D38B0.roa
Signing time: Wed 22 Apr 2026 12:56:21 +0000
ROA not before: Wed 22 Apr 2026 12:56:16 +0000
ROA not after: Sun 31 May 2026 12:56:16 +0000
asID: 395793
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.14.0/24 maxlen: 24
45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
45.207.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110101 (0x1ae15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 12:56:16 2026 GMT
Not After : May 31 12:56:16 2026 GMT
Subject: CN=69e8c575-d80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:68:49:64:a7:2c:e1:c1:4c:6b:bb:c2:64:
22:52:9e:c1:29:fc:f6:18:35:b2:c9:5e:7e:7f:33:
47:50:ab:eb:1a:03:e8:3a:3c:a1:ea:82:59:8d:32:
a1:da:6e:cd:9a:dc:77:28:23:37:fc:68:26:25:cd:
de:ab:73:a9:bf:d0:2b:70:6e:4b:cb:b0:a0:dd:cc:
74:c4:be:4e:6d:fa:a1:80:1a:94:fa:d7:54:b2:a0:
78:e6:d3:48:c9:eb:5e:b3:e5:8e:e5:41:96:6d:c7:
ad:61:f6:65:9e:5f:01:d0:25:17:11:f6:8e:63:ae:
46:c3:4f:b4:2a:4c:be:2d:2f:bf:83:58:f4:53:66:
60:c8:08:30:55:b5:31:bc:06:ce:a2:68:af:44:98:
c6:6f:43:30:7c:a7:06:b3:32:91:e5:ef:c5:12:b1:
05:3d:d9:39:84:e5:cd:b4:12:de:2f:79:7c:f3:3a:
cc:03:e7:2a:11:29:55:04:9e:2d:6b:31:1d:b6:57:
94:ae:1d:7d:db:af:90:4f:f4:b9:ac:b5:a8:9c:f7:
db:70:cd:c2:49:f7:35:5f:5f:3e:56:01:20:4e:60:
99:8a:dd:ee:40:02:4f:23:07:61:63:db:71:d4:71:
80:4a:66:f8:82:78:5e:b3:08:99:50:05:a3:7f:bd:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:FB:99:95:D9:96:20:33:19:A5:95:E6:96:04:9A:6D:9B:B6:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8DF44303E4A11F1BED70C02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0-45.192.16.255
45.198.226.0/24
45.201.30.0/24
45.207.138.0-45.207.147.255
Signature Algorithm: sha256WithRSAEncryption
50:0f:80:b8:89:35:44:d9:d7:db:77:b6:d6:cf:4b:74:66:92:
41:ab:25:3b:74:12:25:a4:9b:03:a1:eb:46:a3:ac:98:cc:09:
c7:12:cd:0f:89:80:ed:cd:d1:59:3c:ae:9e:a5:11:08:d3:8c:
fd:22:d4:4b:de:87:06:ce:a3:64:83:b7:9b:21:4d:c0:67:08:
81:e3:8d:97:4b:5a:9c:d8:b3:c4:24:51:ad:5c:4d:0f:bd:45:
8c:be:ab:0b:d1:b5:25:cf:dc:70:85:09:b7:43:a3:2a:ba:38:
84:0d:39:53:67:0e:7c:1b:18:b6:ae:1f:e6:69:c5:f8:61:f9:
89:b8:2d:de:96:47:d9:a5:3f:0a:7c:f4:6a:c0:91:36:00:11:
8f:20:0a:c8:16:c9:fa:12:ac:b4:c1:23:43:61:20:5f:48:16:
2e:4b:5d:08:c9:6d:2e:90:93:e1:32:29:14:b8:52:ea:29:cb:
c6:1c:7d:14:8e:af:40:ec:8c:b1:82:17:15:75:d3:c5:a5:27:
37:be:5c:ac:5d:3b:88:c7:09:20:ce:d3:5f:62:3a:26:32:e3:
1f:c2:36:27:5f:58:be:f2:fc:85:e6:bb:18:01:7b:c9:34:5a:
19:6c:5f:35:a1:df:0e:46:4b:b7:b5:bb:06:73:20:37:c8:17:
5e:54:5d:74
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAa4VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMTI1NjE2WhcNMjYwNTMxMTI1NjE2WjAYMRYw
FAYDVQQDEw02OWU4YzU3NS1kODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2HBoSWSnLOHBTGu7wmQiUp7BKfz2GDWyyV5+fzNHUKvrGgPoOjyh6oJZ
jTKh2m7Nmtx3KCM3/GgmJc3eq3Opv9ArcG5Ly7Cg3cx0xL5ObfqhgBqU+tdUsqB4
5tNIyetes+WO5UGWbcetYfZlnl8B0CUXEfaOY65Gw0+0Kky+LS+/g1j0U2ZgyAgw
VbUxvAbOomivRJjGb0MwfKcGszKR5e/FErEFPdk5hOXNtBLeL3l88zrMA+cqESlV
BJ4tazEdtleUrh1926+QT/S5rLWonPfbcM3CSfc1X18+VgEgTmCZit3uQAJPIwdh
Y9tx1HGASmb4gnheswiZUAWjf71w2wIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFGZb
+5mV2ZYgMxmlleaWBJptm7bNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOERGNDQzMDNFNEExMUYxQkVENzBDMDJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAAtwA0DBAAtwBADBAAtxuID
BAAtyR4wDAMEAS3PigMEAi3PkDANBgkqhkiG9w0BAQsFAAOCAQEAUA+AuIk1RNnX
23e21s9LdGaSQaslO3QSJaSbA6HrRqOsmMwJxxLND4mA7c3RWTyunqURCNOM/SLU
S96HBs6jZIO3myFNwGcIgeONl0tanNizxCRRrVxND71FjL6rC9G1Jc/ccIUJt0Oj
Kro4hA05U2cOfBsYtq4f5mnF+GH5ibgt3pZH2aU/Cnz0asCRNgARjyAKyBbJ+hKs
tMEjQ2EgX0gWLktdCMltLpCT4TIpFLhS6inLxhx9FI6vQOyMsYIXFXXTxaUnN75c
rF07iMcJIM7TX2I6JjLjH8I2J19YvvL8hea7GAF7yTRaGWxfNaHfDkZLt7W7BnMg
N8gXXlRddA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:00:42 2026 by rpki-client