Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04F3E62269A11F19D57C8E2DAE4EC9C.roa
File: C04F3E62269A11F19D57C8E2DAE4EC9C.roa (raw, json)
Hash identifier: 4Fv19uouKL/t5LqYW2CfCR6ejuufyaPh/VzZpJPReYE=
Subject key identifier: 70:E9:A2:9A:E7:2C:98:5B:AF:CE:5B:5B:86:61:04:3B:4A:B3:06:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04F3E62269A11F19D57C8E2DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 09:29:12 +0000
ROA not before: Mon 23 Mar 2026 09:29:07 +0000
ROA not after: Thu 30 Apr 2026 09:29:07 +0000
asID: 62468
IP address blocks: 45.204.192.0/19 maxlen: 24
45.204.192.0/24 maxlen: 24
45.204.193.0/24 maxlen: 24
45.204.194.0/24 maxlen: 24
45.204.195.0/24 maxlen: 24
45.204.196.0/24 maxlen: 24
45.204.197.0/24 maxlen: 24
45.204.198.0/24 maxlen: 24
45.204.199.0/24 maxlen: 24
45.204.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108253 (0x1a6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 09:29:07 2026 GMT
Not After : Apr 30 09:29:07 2026 GMT
Subject: CN=69c107e8-8e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:33:5c:af:f5:85:0a:f9:e3:da:eb:02:b4:
89:2b:47:69:73:5f:71:c3:65:3e:58:a8:12:df:06:
5d:12:b5:30:fa:08:b5:94:00:29:6a:1f:84:b0:db:
48:83:b5:24:dc:48:cc:f2:29:23:12:b5:fb:a3:31:
42:9a:5f:67:5d:cb:8f:b7:5e:14:4e:22:ac:3f:3c:
9d:84:a8:68:fb:25:a1:0d:5a:d5:62:95:aa:40:84:
ca:df:93:e9:80:d2:5e:62:c1:2a:72:2b:fe:d4:1a:
92:21:a2:8e:08:ec:d3:b0:cc:ce:68:1f:db:06:ac:
a2:98:c9:45:5b:0b:ad:0a:2d:de:96:18:a7:d8:d7:
c6:af:23:4e:74:e4:3b:8e:33:83:47:5a:ae:89:77:
15:e2:8d:19:02:0e:76:9d:f2:70:96:cf:93:7e:e3:
c8:c6:71:fe:d0:60:11:de:48:aa:41:d1:ef:70:6a:
5e:2a:6a:dd:ab:00:97:d1:c1:6f:e7:17:e8:0e:18:
e2:0a:a6:c9:39:6d:d3:34:59:23:68:dd:09:1c:c2:
58:fc:52:7e:5a:a5:99:96:c3:93:39:c5:44:52:19:
e4:41:81:13:38:79:7e:fa:f7:49:30:c9:31:99:9a:
a9:2d:5e:9c:40:33:d7:ed:09:5e:cd:e1:d7:d0:97:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:A2:9A:E7:2C:98:5B:AF:CE:5B:5B:86:61:04:3B:4A:B3:06:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04F3E62269A11F19D57C8E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
74:dd:44:8c:c1:16:fc:6c:94:ee:2d:ed:7f:b6:82:76:5f:d6:
40:76:3a:0c:e2:60:b6:32:25:3e:f4:5d:a8:92:a3:9d:f8:b0:
d1:3b:86:7d:b2:23:56:67:9c:19:5f:6d:d4:7d:6a:c9:db:a4:
00:d4:73:72:cc:1d:6a:06:d4:98:79:12:3d:11:23:50:a8:b5:
96:5b:86:78:58:53:af:7b:1f:13:83:a4:21:40:e3:22:d4:e0:
e4:a7:08:57:ff:6d:0e:42:65:a1:0d:e9:95:9e:a0:89:0d:69:
12:45:4b:63:8f:10:bc:11:5a:f5:22:4d:0d:0d:24:ae:ce:9d:
f9:52:44:2a:ac:51:2b:b0:5a:55:aa:33:c5:e0:cf:8e:03:54:
14:74:59:c7:83:ad:e7:4c:de:71:59:c5:15:05:84:31:93:79:
95:3a:cd:db:fc:5f:f7:bf:03:16:3f:d5:8f:a0:bd:97:57:a7:
69:d2:18:e2:df:13:72:06:a4:62:c5:cd:52:fd:32:4a:de:6c:
90:b0:bd:6e:bb:b9:d2:ea:26:35:2f:55:13:22:60:60:ef:34:
d3:81:2c:14:8f:f5:00:29:8b:ec:08:a5:05:b2:b0:56:f9:91:
f2:dd:c9:c1:c2:91:7f:bc:37:98:a8:52:f1:24:9e:78:8f:22:
66:22:f9:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAabdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIzMDkyOTA3WhcNMjYwNDMwMDkyOTA3WjAYMRYw
FAYDVQQDEw02OWMxMDdlOC04ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvDgzXK/1hQr549rrArSJK0dpc19xw2U+WKgS3wZdErUw+gi1lAApah+E
sNtIg7Uk3EjM8ikjErX7ozFCml9nXcuPt14UTiKsPzydhKho+yWhDVrVYpWqQITK
35PpgNJeYsEqciv+1BqSIaKOCOzTsMzOaB/bBqyimMlFWwutCi3elhin2NfGryNO
dOQ7jjODR1quiXcV4o0ZAg52nfJwls+TfuPIxnH+0GAR3kiqQdHvcGpeKmrdqwCX
0cFv5xfoDhjiCqbJOW3TNFkjaN0JHMJY/FJ+WqWZlsOTOcVEUhnkQYETOHl++vdJ
MMkxmZqpLV6cQDPX7QlezeHX0JdRzQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHDp
oprnLJhbr85bW4ZhBDtKswY2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMDRGM0U2MjI2OUExMUYxOUQ1N0M4RTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLczAMA0GCSqGSIb3DQEBCwUA
A4IBAQB03USMwRb8bJTuLe1/toJ2X9ZAdjoM4mC2MiU+9F2okqOd+LDRO4Z9siNW
Z5wZX23UfWrJ26QA1HNyzB1qBtSYeRI9ESNQqLWWW4Z4WFOvex8Tg6QhQOMi1ODk
pwhX/20OQmWhDemVnqCJDWkSRUtjjxC8EVr1Ik0NDSSuzp35UkQqrFErsFpVqjPF
4M+OA1QUdFnHg63nTN5xWcUVBYQxk3mVOs3b/F/3vwMWP9WPoL2XV6dp0hji3xNy
BqRixc1S/TJK3myQsL1uu7nS6iY1L1UTImBg7zTTgSwUj/UAKYvsCKUFsrBW+ZHy
3cnBwpF/vDeYqFLxJJ54jyJmIvn7
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:28 2026 by rpki-client