Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2C466A43E4F11F199F737A2CE1D38B0.roa
File: D2C466A43E4F11F199F737A2CE1D38B0.roa (raw, json)
Hash identifier: as76Qobc+zeYsvAiUfFLl+pVcJiEbqQiX2NjqhFmvpY=
Subject key identifier: F0:60:2F:5F:FC:B8:97:FE:A1:FC:18:BD:60:1C:35:63:6E:3C:AA:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2C466A43E4F11F199F737A2CE1D38B0.roa
Signing time: Wed 22 Apr 2026 13:33:19 +0000
ROA not before: Wed 22 Apr 2026 13:33:13 +0000
ROA not after: Tue 09 Jun 2026 13:33:13 +0000
asID: 395793
IP address blocks: 45.196.194.0/23 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110113 (0x1ae21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 13:33:13 2026 GMT
Not After : Jun 9 13:33:13 2026 GMT
Subject: CN=69e8ce1f-940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:e7:36:90:7c:23:7b:14:19:a1:b6:c8:4a:
b1:7b:4f:33:63:9f:97:03:7b:4d:f2:6c:e3:bf:d9:
42:70:01:a8:a5:b8:b2:4c:df:f3:62:7b:69:69:bd:
cc:e9:e3:d3:da:67:78:0f:25:da:89:f2:59:8e:12:
e5:ea:7a:e6:fd:26:fd:06:4a:fb:be:83:3c:2c:10:
9a:e9:8a:b3:54:d1:1a:67:3f:5f:7b:fa:87:16:cf:
64:ea:78:80:09:9d:f8:5d:ce:48:96:a6:ee:4d:bf:
22:92:e6:29:00:bc:2f:14:4a:9f:9d:02:35:fb:25:
b0:06:90:dc:df:ec:9f:6a:58:21:19:1d:71:f4:40:
b0:8e:92:e7:10:34:b7:8b:de:6d:0e:22:ff:1c:a0:
0f:d4:67:a6:c6:15:88:a6:35:03:fd:5c:cf:ff:a0:
f7:96:01:36:db:37:f7:2b:ae:4a:78:61:3a:1e:4b:
31:b8:66:8f:bd:ce:93:a7:d3:25:b4:d3:af:34:18:
5c:ae:cb:2a:d4:47:a2:54:4a:d3:95:c3:0c:5e:30:
22:4b:3b:89:83:7e:0b:9f:ad:39:5e:ae:d7:58:7b:
04:4d:85:2c:4a:77:b4:ed:b8:44:0d:0e:33:90:70:
f2:3d:cb:a5:6e:0b:b8:13:bf:33:6c:ce:2a:f7:77:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:60:2F:5F:FC:B8:97:FE:A1:FC:18:BD:60:1C:35:63:6E:3C:AA:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2C466A43E4F11F199F737A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.194.0/23
45.196.225.0-45.196.227.255
Signature Algorithm: sha256WithRSAEncryption
3f:46:b9:89:64:59:d4:99:cf:a5:d6:05:28:87:72:2e:7e:05:
2b:ef:e5:3e:cc:c2:6b:ef:2a:f8:07:05:c8:9d:4f:d9:dc:f7:
2f:dc:09:dc:d4:6b:04:03:01:80:d6:d7:e9:40:72:57:03:18:
bc:63:bb:2a:e6:15:3a:bb:ea:14:31:25:37:6b:b3:c2:1c:9e:
d6:df:9f:56:27:13:c7:7b:71:1d:3d:34:c9:c9:53:25:a2:56:
85:13:39:d5:86:a6:4b:4a:91:dd:7f:9b:a3:a0:c3:41:a3:48:
a2:de:a4:62:46:28:0c:d8:29:a8:34:49:85:db:77:87:0e:81:
f7:b6:3b:a3:fb:81:20:e1:c4:fd:8c:21:4a:e6:6c:0c:64:e8:
09:d3:86:41:3e:12:71:ba:3e:1f:b2:dc:ac:f9:2f:2d:c9:c3:
ab:73:ea:8d:1d:e7:da:8a:73:1c:31:ca:2d:44:86:5c:61:da:
9a:ea:03:93:d2:aa:8e:9f:b2:97:89:ac:bf:79:7b:5b:50:d5:
e4:04:f9:0c:0c:12:c6:80:48:61:9f:68:0d:a9:06:c0:0e:e0:
e4:7e:6d:02:46:37:8b:b6:76:4b:d1:0d:95:65:da:d4:3b:56:
41:1e:78:01:1c:df:de:66:be:7d:1e:de:d4:99:f7:f4:13:a6:
fe:2d:f4:c4
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAa4hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMTMzMzEzWhcNMjYwNjA5MTMzMzEzWjAYMRYw
FAYDVQQDEw02OWU4Y2UxZi05NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwQ3nNpB8I3sUGaG2yEqxe08zY5+XA3tN8mzjv9lCcAGopbiyTN/zYntp
ab3M6ePT2md4DyXaifJZjhLl6nrm/Sb9Bkr7voM8LBCa6YqzVNEaZz9fe/qHFs9k
6niACZ34Xc5IlqbuTb8ikuYpALwvFEqfnQI1+yWwBpDc3+yfalghGR1x9ECwjpLn
EDS3i95tDiL/HKAP1GemxhWIpjUD/VzP/6D3lgE22zf3K65KeGE6HksxuGaPvc6T
p9MltNOvNBhcrssq1EeiVErTlcMMXjAiSzuJg34Ln605Xq7XWHsETYUsSne07bhE
DQ4zkHDyPculbgu4E78zbM4q93dmDwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPBg
L1/8uJf+ofwYvWAcNWNuPKokMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMkM0NjZBNDNFNEYxMUYxOTlGNzM3QTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLcTCMAwDBAAtxOEDBAItxOAw
DQYJKoZIhvcNAQELBQADggEBAD9GuYlkWdSZz6XWBSiHci5+BSvv5T7MwmvvKvgH
BcidT9nc9y/cCdzUawQDAYDW1+lAclcDGLxjuyrmFTq76hQxJTdrs8Icntbfn1Yn
E8d7cR09NMnJUyWiVoUTOdWGpktKkd1/m6Ogw0GjSKLepGJGKAzYKag0SYXbd4cO
gfe2O6P7gSDhxP2MIUrmbAxk6AnThkE+EnG6Ph+y3Kz5Ly3Jw6tz6o0d59qKcxwx
yi1Ehlxh2prqA5PSqo6fspeJrL95e1tQ1eQE+QwMEsaASGGfaA2pBsAO4OR+bQJG
N4u2dkvRDZVl2tQ7VkEeeAEc395mvn0e3tSZ9/QTpv4t9MQ=
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:20 2026 by rpki-client