Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB5496E242F11F1B656F7CFDAE4EC9C.roa
File: DDB5496E242F11F1B656F7CFDAE4EC9C.roa (raw, json)
Hash identifier: 3dm9xHSENyECucyPK8AFhtOk47VmstGQ1BG16L5XPTo=
Subject key identifier: 10:45:87:2A:CC:60:5B:DB:5A:69:45:C1:22:CF:6E:4D:58:34:AD:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A61A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB5496E242F11F1B656F7CFDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 07:39:03 +0000
ROA not before: Fri 20 Mar 2026 07:38:57 +0000
ROA not after: Mon 27 Apr 2026 07:38:57 +0000
asID: 6079
IP address blocks: 45.203.198.0/24 maxlen: 24
45.203.210.0/24 maxlen: 24
45.203.221.0/24 maxlen: 24
45.203.222.0/23 maxlen: 24
45.203.244.0/24 maxlen: 24
45.205.85.0/24 maxlen: 24
45.205.110.0/23 maxlen: 24
45.205.132.0/24 maxlen: 24
45.205.154.0/24 maxlen: 24
45.205.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108058 (0x1a61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 20 07:38:57 2026 GMT
Not After : Apr 27 07:38:57 2026 GMT
Subject: CN=69bcf997-0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:3d:57:f5:c6:23:33:26:66:d8:30:24:80:
f7:21:f7:aa:e9:e3:70:d3:6a:c3:99:23:0f:9c:8b:
71:43:60:06:c0:de:eb:c0:56:54:5a:60:3b:b3:b7:
43:8b:39:9c:c6:90:b8:33:c8:38:99:cb:10:9e:f7:
db:eb:b6:08:18:44:64:00:95:a9:64:42:57:52:9b:
08:b1:bc:72:cd:65:34:3a:64:e6:f2:30:1a:d3:a1:
88:b9:c4:16:54:e8:e5:c2:9b:ec:26:ca:ab:0f:dc:
e8:67:c5:81:3e:f2:71:23:2c:e0:de:ac:6e:dc:7d:
40:c8:f4:03:d7:55:bc:a1:b1:72:14:94:ef:b4:cd:
dc:74:d5:e7:92:0c:5d:48:8c:a4:05:02:25:c0:cf:
32:66:b8:5d:ba:1e:6d:ed:79:18:79:4b:99:96:92:
60:58:af:a3:dc:28:aa:fc:bb:c4:c0:b4:51:e2:1f:
bf:f1:cd:eb:c2:9f:67:84:f6:1c:16:9a:db:8a:53:
09:19:dd:c3:f2:1f:40:42:d9:49:d5:d7:48:16:9e:
70:07:29:57:30:c2:22:5e:b4:f1:21:48:69:83:e5:
08:bc:bc:75:dd:ad:92:51:c5:ac:6a:cf:dc:ca:5e:
fb:bd:81:98:3b:15:e8:2e:26:93:90:d2:2d:70:21:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:45:87:2A:CC:60:5B:DB:5A:69:45:C1:22:CF:6E:4D:58:34:AD:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB5496E242F11F1B656F7CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.198.0/24
45.203.210.0/24
45.203.221.0-45.203.223.255
45.203.244.0/24
45.205.85.0/24
45.205.110.0/23
45.205.132.0/24
45.205.154.0/24
45.205.172.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:d3:2f:8e:09:ab:76:7c:db:c8:24:59:3f:c4:72:0b:bd:3a:
75:63:66:8f:81:11:b2:3f:50:75:0d:2a:55:fb:4e:77:78:b8:
30:0c:12:3f:2c:5b:0e:13:a4:6c:8e:ed:3b:7c:5c:bf:59:8e:
57:59:b7:5e:f7:15:be:8c:40:fe:95:20:aa:f0:91:e9:23:97:
8e:01:5d:14:6c:cf:d5:be:7e:07:59:fe:09:a8:5d:f0:76:24:
25:f7:07:f2:8e:1b:f6:a3:7d:58:42:d9:bb:38:bd:19:99:8e:
b2:01:1d:86:e8:32:be:ff:8c:9e:3f:9e:7b:d5:c7:7f:c4:70:
ad:25:31:d4:7e:61:d9:63:8a:2b:b2:c9:b0:38:b9:ce:9d:e1:
fb:77:ef:d2:8f:18:5c:3c:d7:b8:a4:2b:91:91:bc:0b:e4:e9:
8e:b9:5c:81:cf:e0:b5:10:b4:8b:09:44:9b:0f:37:36:f6:ec:
08:d1:84:a7:b7:74:c7:66:bf:3c:f1:bd:c8:6c:7d:39:06:c0:
fe:de:f6:2a:b1:3d:b5:75:a6:77:a5:cc:49:2c:6e:68:93:25:
23:5e:23:7f:58:87:16:80:e9:90:62:d8:45:d0:45:23:04:80:
70:88:b8:53:4d:0b:68:b7:50:3d:2a:5a:21:5c:18:0e:9f:8b:
c6:51:0c:6f
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAaYaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIwMDczODU3WhcNMjYwNDI3MDczODU3WjAYMRYw
FAYDVQQDEw02OWJjZjk5Ny0wMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAryw9V/XGIzMmZtgwJID3Ifeq6eNw02rDmSMPnItxQ2AGwN7rwFZUWmA7
s7dDizmcxpC4M8g4mcsQnvfb67YIGERkAJWpZEJXUpsIsbxyzWU0OmTm8jAa06GI
ucQWVOjlwpvsJsqrD9zoZ8WBPvJxIyzg3qxu3H1AyPQD11W8obFyFJTvtM3cdNXn
kgxdSIykBQIlwM8yZrhduh5t7XkYeUuZlpJgWK+j3Ciq/LvEwLRR4h+/8c3rwp9n
hPYcFprbilMJGd3D8h9AQtlJ1ddIFp5wBylXMMIiXrTxIUhpg+UIvLx13a2SUcWs
as/cyl77vYGYOxXoLiaTkNItcCEX8QIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFBBF
hyrMYFvbWmlFwSLPbk1YNK3YMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EREI1NDk2RTI0MkYxMUYxQjY1NkY3Q0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALcvGAwQALcvSMAwDBAAty90D
BAUty8ADBAAty/QDBAAtzVUDBAEtzW4DBAAtzYQDBAAtzZoDBAEtzawwDQYJKoZI
hvcNAQELBQADggEBAHvTL44Jq3Z828gkWT/Ecgu9OnVjZo+BEbI/UHUNKlX7Tnd4
uDAMEj8sWw4TpGyO7Tt8XL9ZjldZt173Fb6MQP6VIKrwkekjl44BXRRsz9W+fgdZ
/gmoXfB2JCX3B/KOG/ajfVhC2bs4vRmZjrIBHYboMr7/jJ4/nnvVx3/EcK0lMdR+
YdljiiuyybA4uc6d4ft379KPGFw817ikK5GRvAvk6Y65XIHP4LUQtIsJRJsPNzb2
7AjRhKe3dMdmvzzxvchsfTkGwP7e9iqxPbV1pnelzEksbmiTJSNeI39YhxaA6ZBi
2EXQRSMEgHCIuFNNC2i3UD0qWiFcGA6fi8ZRDG8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:46 2026 by rpki-client