Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB51C32427C111F1BEFDDF8EDAE4EC9C.roa
File: DB51C32427C111F1BEFDDF8EDAE4EC9C.roa (raw, json)
Hash identifier: sQgjSm3pLwZngeDqw84CUhuWlWMlHalevFr2T47LUSs=
Subject key identifier: A0:F6:CE:BB:5F:9E:63:BC:64:AD:E3:5C:BA:4C:1C:9E:F5:16:57:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A73C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB51C32427C111F1BEFDDF8EDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 20:41:39 +0000
ROA not before: Tue 24 Mar 2026 20:41:34 +0000
ROA not after: Fri 01 May 2026 20:41:34 +0000
asID: 44559
IP address blocks: 45.196.140.0/24 maxlen: 24
45.196.141.0/24 maxlen: 24
45.196.142.0/24 maxlen: 24
45.196.143.0/24 maxlen: 24
45.196.152.0/24 maxlen: 24
45.196.198.0/24 maxlen: 24
45.196.199.0/24 maxlen: 24
45.202.119.0/24 maxlen: 24
45.202.125.0/24 maxlen: 24
45.202.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108348 (0x1a73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 20:41:34 2026 GMT
Not After : May 1 20:41:34 2026 GMT
Subject: CN=69c2f703-6bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:bf:0b:02:8c:f9:61:e4:0c:4f:43:6b:8d:
a5:cf:ea:1d:f5:d2:8a:b7:9b:e4:88:5e:03:3e:44:
fa:61:38:ce:54:78:a9:4a:c9:1b:05:16:78:24:be:
7f:09:63:c4:a4:49:a7:77:06:ab:f5:3c:77:9e:a1:
df:2a:10:80:72:2d:d8:1e:13:b1:7e:a0:eb:03:ba:
b6:c6:80:ab:28:d0:b8:ca:84:aa:57:66:21:45:73:
c2:82:0a:19:88:81:01:05:7e:f2:6d:9e:2e:6f:9d:
86:a9:88:a8:d0:61:6d:b4:28:1d:d3:3f:8d:7a:d8:
1f:8d:48:e8:39:73:01:07:1b:64:87:32:9a:43:06:
9c:50:18:05:a1:a2:b4:da:67:fe:6a:be:28:41:98:
47:55:ae:99:21:57:59:df:4d:1d:ee:ae:fb:1c:7c:
0b:e2:18:a8:8a:87:e5:82:79:1f:85:65:41:04:51:
a8:3d:f2:8c:dc:98:f6:60:ce:0a:22:67:c4:34:5c:
1a:05:9d:d3:c5:e6:c5:0e:45:ff:d1:89:8d:8e:d7:
c1:ae:59:9b:32:65:9d:81:01:fc:55:9e:c5:78:1e:
c3:d7:a2:c1:61:85:ee:78:ef:9c:c6:90:5f:cc:96:
68:9e:a7:70:3f:e7:16:9d:7d:23:6f:5f:7e:80:61:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F6:CE:BB:5F:9E:63:BC:64:AD:E3:5C:BA:4C:1C:9E:F5:16:57:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB51C32427C111F1BEFDDF8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/22
45.196.152.0/24
45.196.198.0/23
45.202.119.0/24
45.202.125.0/24
45.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6e:eb:85:d6:27:24:e5:57:f5:bd:8e:62:9e:f7:a7:81:a3:
f3:af:bf:31:ab:cd:9d:72:9b:9e:b2:f5:6f:21:91:10:1f:29:
1e:0b:db:f6:4a:eb:93:58:e1:b2:03:a5:1b:e7:cd:df:e9:a8:
05:21:ff:9f:11:ae:a1:ce:08:aa:81:c3:7e:e7:ea:97:c3:cc:
c5:32:c1:67:bb:1d:e2:a6:84:37:46:0a:ca:be:01:f6:fd:2f:
bc:52:6b:a4:61:59:11:dc:e5:5c:5d:ef:8b:7f:87:90:1b:76:
6b:dd:48:19:03:5d:ef:72:11:57:4c:b0:8c:43:88:9a:69:00:
57:46:e6:9e:c6:eb:19:79:2c:2b:98:18:3c:c0:a7:7d:e6:e6:
e3:db:72:59:3e:a8:d0:56:39:61:3d:e7:9f:9b:29:eb:0c:92:
c9:d8:28:06:62:f7:b3:d7:f5:57:c7:60:ac:7a:e6:43:6b:59:
29:f9:0a:2d:86:b7:30:fd:44:33:50:42:bf:15:e7:1a:06:76:
b6:ef:f4:39:f3:c5:73:5b:21:04:26:0b:4d:a8:03:06:3e:d1:
4b:7c:e0:f3:4d:ca:a8:e8:6b:26:5b:59:b1:70:96:64:68:b9:
3f:d5:56:44:28:0e:24:1d:b8:fc:7b:83:2c:5b:a1:01:3b:b2:
ef:a8:16:37
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIDAac8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI0MjA0MTM0WhcNMjYwNTAxMjA0MTM0WjAYMRYw
FAYDVQQDEw02OWMyZjcwMy02YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5lS/CwKM+WHkDE9Da42lz+od9dKKt5vkiF4DPkT6YTjOVHipSskbBRZ4
JL5/CWPEpEmndwar9Tx3nqHfKhCAci3YHhOxfqDrA7q2xoCrKNC4yoSqV2YhRXPC
ggoZiIEBBX7ybZ4ub52GqYio0GFttCgd0z+NetgfjUjoOXMBBxtkhzKaQwacUBgF
oaK02mf+ar4oQZhHVa6ZIVdZ300d7q77HHwL4hioioflgnkfhWVBBFGoPfKM3Jj2
YM4KImfENFwaBZ3TxebFDkX/0YmNjtfBrlmbMmWdgQH8VZ7FeB7D16LBYYXueO+c
xpBfzJZonqdwP+cWnX0jb19+gGFdZQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFKD2
zrtfnmO8ZK3jXLpMHJ71FleQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQjUxQzMyNDI3QzExMUYxQkVGRERGOEVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLcSMAwQALcSYAwQBLcTGAwQA
Lcp3AwQALcp9AwQALcp/MA0GCSqGSIb3DQEBCwUAA4IBAQC7buuF1ick5Vf1vY5i
nvengaPzr78xq82dcpuesvVvIZEQHykeC9v2SuuTWOGyA6Ub583f6agFIf+fEa6h
zgiqgcN+5+qXw8zFMsFnux3ipoQ3RgrKvgH2/S+8UmukYVkR3OVcXe+Lf4eQG3Zr
3UgZA13vchFXTLCMQ4iaaQBXRuaexusZeSwrmBg8wKd95ubj23JZPqjQVjlhPeef
mynrDJLJ2CgGYvez1/VXx2CseuZDa1kp+Qothrcw/UQzUEK/FecaBna27/Q588Vz
WyEEJgtNqAMGPtFLfODzTcqo6GsmW1mxcJZkaLk/1VZEKA4kHbj8e4MsW6EBO7Lv
qBY3
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:03 2026 by rpki-client