Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1612592407D11F18D6F35FECE1D38B0.roa
File: D1612592407D11F18D6F35FECE1D38B0.roa (raw, json)
Hash identifier: 2QXOBrlcUQh3//Z3GOAChvOY6d7iCXvsPgCngNgRrkQ=
Subject key identifier: 8F:8F:48:C7:52:31:AA:0B:3B:F8:1E:8D:6F:E8:E2:16:D5:3B:E6:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1612592407D11F18D6F35FECE1D38B0.roa
Signing time: Sat 25 Apr 2026 08:07:36 +0000
ROA not before: Sat 25 Apr 2026 08:07:30 +0000
ROA not after: Sun 31 May 2026 08:07:30 +0000
asID: 202656
IP address blocks: 45.195.208.0/24 maxlen: 24
45.195.209.0/24 maxlen: 24
45.199.135.0/24 maxlen: 24
45.199.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110355 (0x1af13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 08:07:30 2026 GMT
Not After : May 31 08:07:30 2026 GMT
Subject: CN=69ec7647-242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:14:c9:f0:90:86:7f:fa:00:91:3f:0e:b4:
86:0a:c0:59:72:09:ca:6b:11:9c:ba:e7:4e:a4:c5:
04:be:2b:db:be:d3:3a:ed:6e:4b:e9:04:19:20:0d:
d7:35:71:23:03:52:31:cc:48:fa:9a:df:9e:66:3a:
03:78:d3:8b:a2:47:30:09:10:f0:60:5d:f4:f9:de:
5e:d9:01:4f:64:32:8d:6b:6e:19:bc:59:f6:63:0e:
a7:bd:32:c3:fe:52:43:ec:e4:11:ef:0e:32:d2:81:
d0:05:7f:c8:43:23:ed:bd:23:72:b3:2e:df:37:df:
27:9e:96:24:c2:c1:b7:57:92:a4:5e:26:4b:b2:fa:
20:83:f1:f8:23:ef:06:d9:b2:24:07:ba:a9:2f:36:
9e:f7:63:b8:9a:4f:db:d7:ff:1f:d2:cb:b3:2c:52:
d9:38:72:7b:5b:bd:60:34:d6:90:72:db:57:11:3c:
03:09:7d:da:4e:ea:f5:52:f7:3c:2c:2b:20:4a:b9:
af:ed:82:cf:60:fa:97:6e:ae:0a:b1:aa:f3:10:e0:
4f:38:17:fd:a8:b9:d7:ef:dc:94:58:86:f5:e7:06:
f5:02:1f:c3:b8:5c:a3:da:4c:12:e8:2c:cd:2d:af:
7a:c9:3c:bd:64:a2:93:97:3c:f4:86:c7:40:6e:07:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8F:48:C7:52:31:AA:0B:3B:F8:1E:8D:6F:E8:E2:16:D5:3B:E6:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1612592407D11F18D6F35FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.208.0/23
45.199.135.0-45.199.136.255
Signature Algorithm: sha256WithRSAEncryption
ac:bd:b5:10:3a:5d:b7:8f:4d:e3:69:06:fe:3a:98:d4:47:4e:
c8:ee:2c:00:91:24:07:36:83:42:f6:0d:4e:41:0f:7c:84:2b:
d9:37:12:59:f8:fd:1f:05:8c:da:09:2a:1c:ea:71:43:64:de:
fd:d5:31:c8:62:24:aa:86:bd:97:82:c9:28:81:43:5c:b1:8c:
85:11:ed:6f:57:d3:90:7f:7d:ff:46:ba:ed:49:a7:25:27:01:
17:a0:eb:18:51:ec:b5:6d:56:40:ba:f0:a4:f1:c5:8f:54:7a:
34:94:8a:89:84:c8:a3:de:dc:21:72:92:56:c3:99:c0:62:03:
61:18:61:82:e8:41:4d:c9:d8:13:7f:8b:5b:78:f3:07:ce:fe:
1f:b8:ef:fa:6e:e1:36:bc:fe:52:eb:80:59:8a:cb:b6:ad:ca:
5f:b0:b7:bd:20:70:3c:a7:f7:f4:b6:6d:46:19:de:d3:0a:a7:
f9:28:a7:ec:e4:68:a0:af:cf:25:04:e4:55:88:ff:8f:66:19:
9d:57:75:b0:8a:bf:ba:7c:7a:0f:de:41:9f:3f:e8:d5:b5:26:
d5:44:bd:83:28:6f:cd:04:b3:fb:51:05:16:d3:81:8d:34:a6:
67:de:2c:44:06:89:a4:60:99:4b:5a:7d:82:e7:aa:ad:e5:d3:
d0:39:c1:f3
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAa8TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDI1MDgwNzMwWhcNMjYwNTMxMDgwNzMwWjAYMRYw
FAYDVQQDEw02OWVjNzY0Ny0yNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz68UyfCQhn/6AJE/DrSGCsBZcgnKaxGcuudOpMUEvivbvtM67W5L6QQZ
IA3XNXEjA1IxzEj6mt+eZjoDeNOLokcwCRDwYF30+d5e2QFPZDKNa24ZvFn2Yw6n
vTLD/lJD7OQR7w4y0oHQBX/IQyPtvSNysy7fN98nnpYkwsG3V5KkXiZLsvogg/H4
I+8G2bIkB7qpLzae92O4mk/b1/8f0suzLFLZOHJ7W71gNNaQcttXETwDCX3aTur1
Uvc8LCsgSrmv7YLPYPqXbq4KsarzEOBPOBf9qLnX79yUWIb15wb1Ah/DuFyj2kwS
6CzNLa96yTy9ZKKTlzz0hsdAbgfTGwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFI+P
SMdSMaoLO/gejW/o4hbVO+ZuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMTYxMjU5MjQwN0QxMUYxOEQ2RjM1RkVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLcPQMAwDBAAtx4cDBAAtx4gw
DQYJKoZIhvcNAQELBQADggEBAKy9tRA6XbePTeNpBv46mNRHTsjuLACRJAc2g0L2
DU5BD3yEK9k3Eln4/R8FjNoJKhzqcUNk3v3VMchiJKqGvZeCySiBQ1yxjIUR7W9X
05B/ff9Guu1JpyUnAReg6xhR7LVtVkC68KTxxY9UejSUiomEyKPe3CFyklbDmcBi
A2EYYYLoQU3J2BN/i1t48wfO/h+47/pu4Ta8/lLrgFmKy7atyl+wt70gcDyn9/S2
bUYZ3tMKp/kop+zkaKCvzyUE5FWI/49mGZ1XdbCKv7p8eg/eQZ8/6NW1JtVEvYMo
b80Es/tRBRbTgY00pmfeLEQGiaRgmUtafYLnqq3l09A5wfM=
-----END CERTIFICATE-----
Generated at Wed May 13 10:32:49 2026 by rpki-client