Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA9C318E1AB111F1BD1334A7DAE4EC9C.roa
File: DA9C318E1AB111F1BD1334A7DAE4EC9C.roa (raw, json)
Hash identifier: FxW8/8i9V8QoNqS/F/zw0Hj0l4GqSlNZObnbQ9zYYUM=
Subject key identifier: 8D:05:62:81:BE:7B:39:DC:C6:C0:0A:FE:CE:79:F2:9C:ED:05:EC:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A345
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA9C318E1AB111F1BD1334A7DAE4EC9C.roa
Signing time: Sun 08 Mar 2026 05:44:21 +0000
ROA not before: Sun 08 Mar 2026 05:44:15 +0000
ROA not after: Mon 13 Apr 2026 05:44:15 +0000
asID: 273980
IP address blocks: 45.192.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107333 (0x1a345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 8 05:44:15 2026 GMT
Not After : Apr 13 05:44:15 2026 GMT
Subject: CN=69ad0cb5-0b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:ea:15:bf:c8:34:7e:7c:1e:a3:b3:89:ca:
82:09:f8:e0:d7:e9:ff:8f:8c:fc:95:7b:1e:57:70:
ac:5e:91:10:e9:3a:fc:a4:17:0b:a6:94:86:18:d3:
c5:ff:f9:bb:1f:54:b3:37:4a:a8:0e:f0:82:23:0f:
53:e4:4c:bb:65:a5:16:1b:7c:d4:39:fa:0c:81:a1:
7e:8a:a3:20:47:38:44:b8:d6:56:81:91:b1:35:fa:
7d:76:69:c5:52:63:c6:89:54:6d:4b:23:48:89:fd:
5a:d7:d4:54:22:48:e2:33:bb:c0:77:23:15:66:f3:
2a:85:09:bf:1c:72:d6:fc:86:68:fb:db:b4:75:e8:
64:e7:6c:20:f2:73:9b:92:6e:60:c5:45:66:b2:28:
33:fe:23:5f:76:6d:19:a8:02:20:dc:0b:1a:a1:3d:
6a:52:33:3f:eb:cf:72:d5:00:a5:08:f6:0a:e0:ad:
53:83:ea:a3:4f:76:92:59:d5:59:d7:08:66:62:bf:
d5:61:78:0c:64:5c:7b:ef:7c:ad:02:ce:b1:2e:23:
be:47:b3:ed:6e:59:37:da:ca:40:5d:6a:63:98:64:
e0:de:3c:21:48:99:7c:8d:94:48:94:d3:b1:31:4c:
64:f4:ea:c9:28:4a:19:1d:f0:51:2d:7a:8f:1a:f9:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:62:81:BE:7B:39:DC:C6:C0:0A:FE:CE:79:F2:9C:ED:05:EC:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA9C318E1AB111F1BD1334A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.3.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a3:c8:64:cd:37:e1:3c:43:7d:66:da:72:28:cd:d4:87:0c:
f6:dc:01:2f:0f:4d:a2:a8:32:a1:46:e3:91:5a:e2:d3:30:f8:
7e:ba:e2:1f:48:fd:fc:66:95:8f:d9:a7:37:c9:ab:5f:0b:32:
89:e8:7c:b1:02:ca:d3:04:7c:c5:fa:f7:77:4e:66:31:36:af:
e9:6e:d1:0e:9c:c6:ae:fb:85:4b:f8:43:31:5e:df:4b:dd:4d:
1a:56:9a:36:23:6f:22:aa:d0:f1:13:7f:d4:da:9d:9e:69:56:
8a:cd:f9:80:05:b3:cc:fa:18:9a:0f:82:8e:4c:16:2d:04:b3:
55:27:82:d4:f4:35:dc:e1:07:e0:bc:9f:29:25:a8:c0:a0:fe:
b6:31:ba:c6:13:23:32:5d:64:31:a8:f9:01:b7:40:bf:b2:ef:
05:b9:63:45:d3:30:ec:7d:d1:07:59:2a:ab:0a:ce:ad:34:67:
73:ff:76:27:8f:67:9d:c8:71:d4:9f:dd:6c:91:1f:54:83:91:
01:56:b5:a0:69:e3:f7:ee:88:5d:82:5f:e0:f6:49:d8:9a:fb:
af:cd:7d:13:df:8d:37:db:23:a0:65:27:f9:43:1f:e3:62:1e:
29:dd:d2:af:9a:4a:49:d0:30:62:5e:d7:9b:a7:9a:77:5b:29:
c0:b5:36:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaNFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA4MDU0NDE1WhcNMjYwNDEzMDU0NDE1WjAYMRYw
FAYDVQQDEw02OWFkMGNiNS0wYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo6HqFb/INH58HqOzicqCCfjg1+n/j4z8lXseV3CsXpEQ6Tr8pBcLppSG
GNPF//m7H1SzN0qoDvCCIw9T5Ey7ZaUWG3zUOfoMgaF+iqMgRzhEuNZWgZGxNfp9
dmnFUmPGiVRtSyNIif1a19RUIkjiM7vAdyMVZvMqhQm/HHLW/IZo+9u0dehk52wg
8nObkm5gxUVmsigz/iNfdm0ZqAIg3AsaoT1qUjM/689y1QClCPYK4K1Tg+qjT3aS
WdVZ1whmYr/VYXgMZFx773ytAs6xLiO+R7Ptblk32spAXWpjmGTg3jwhSJl8jZRI
lNOxMUxk9OrJKEoZHfBRLXqPGvm6KQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI0F
YoG+ezncxsAK/s558pztBez0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQTlDMzE4RTFBQjExMUYxQkQxMzM0QTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcADMA0GCSqGSIb3DQEBCwUA
A4IBAQARo8hkzTfhPEN9ZtpyKM3Uhwz23AEvD02iqDKhRuORWuLTMPh+uuIfSP38
ZpWP2ac3yatfCzKJ6HyxAsrTBHzF+vd3TmYxNq/pbtEOnMau+4VL+EMxXt9L3U0a
Vpo2I28iqtDxE3/U2p2eaVaKzfmABbPM+hiaD4KOTBYtBLNVJ4LU9DXc4QfgvJ8p
JajAoP62MbrGEyMyXWQxqPkBt0C/su8FuWNF0zDsfdEHWSqrCs6tNGdz/3Ynj2ed
yHHUn91skR9Ug5EBVrWgaeP37ohdgl/g9knYmvuvzX0T34032yOgZSf5Qx/jYh4p
3dKvmkpJ0DBiXtebp5p3WynAtTYV
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:43 2026 by rpki-client