Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED9256F444A211F1BF66C3B5CE1D38B0.roa
File: ED9256F444A211F1BF66C3B5CE1D38B0.roa (raw, json)
Hash identifier: 4ZXaDEkFSrznKa9S4XSO+ty7gpJuSG0hNDvH+8AxBq4=
Subject key identifier: 44:03:DE:AC:2D:2C:40:57:98:62:BE:8E:F5:BD:CF:16:A1:40:FB:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B040
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED9256F444A211F1BF66C3B5CE1D38B0.roa
Signing time: Thu 30 Apr 2026 14:43:19 +0000
ROA not before: Thu 30 Apr 2026 14:43:14 +0000
ROA not after: Tue 09 Jun 2026 14:43:14 +0000
asID: 211577
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110656 (0x1b040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 14:43:14 2026 GMT
Not After : Jun 9 14:43:14 2026 GMT
Subject: CN=69f36a87-6291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:82:c1:4d:e5:70:72:5a:ec:97:98:a0:75:70:
7b:10:b9:ea:0a:71:40:01:3b:68:cb:cd:2f:18:2c:
dc:14:72:db:d5:87:b2:7d:01:fd:e3:75:1a:ed:99:
0c:e0:0b:72:9a:22:fa:56:b7:c7:f9:9f:56:9f:52:
d5:a7:5e:1e:f1:d5:bb:5c:79:63:e3:db:82:cd:0e:
2c:d9:09:98:f8:7f:a5:dc:23:bc:b3:65:85:ff:a8:
78:ec:cd:cb:f5:95:e0:c0:db:a0:b0:7c:56:1c:f8:
bf:89:8f:2c:fa:94:68:d3:a5:53:a6:99:03:0e:a6:
ce:ad:ca:72:43:40:2a:76:cc:61:f6:c3:ae:f3:ad:
16:0a:2c:c8:14:a4:43:09:79:a6:a6:54:ee:33:80:
eb:6b:d1:8c:80:a7:3e:80:11:44:ff:17:74:dd:b2:
17:dc:ac:6f:c7:76:36:6b:f8:8b:8c:b9:d3:e8:da:
67:29:04:ea:21:a4:29:2e:06:4c:b3:05:e6:51:0e:
6f:80:84:0d:75:79:ae:89:96:da:92:1c:f8:e6:68:
34:2d:d2:58:b4:7d:fd:b8:45:13:ce:9d:a1:42:a4:
f1:21:43:e2:22:94:39:99:99:ed:6e:f7:37:99:69:
cb:81:e5:aa:15:90:09:26:28:2c:33:65:0c:07:02:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:03:DE:AC:2D:2C:40:57:98:62:BE:8E:F5:BD:CF:16:A1:40:FB:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED9256F444A211F1BF66C3B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a5:0e:90:1a:ea:77:cc:b9:34:43:50:43:ed:fc:52:d1:db:
87:ca:64:ca:ed:d6:0f:ee:f4:38:0c:6c:ba:68:0c:07:5e:14:
94:c3:6a:f6:c1:cd:6e:db:8f:83:c1:d3:ed:9b:61:02:90:f4:
86:8d:67:09:b2:63:02:34:1d:f3:41:3f:c2:1d:c9:92:9b:24:
7f:39:47:f3:80:34:e4:85:e8:a2:26:e1:e7:02:39:f4:90:9b:
7c:91:19:b0:23:ca:23:ce:5f:90:dc:08:64:e6:5a:46:2b:f6:
22:b2:38:7a:fb:af:7d:7c:0c:2b:cf:30:6f:b5:13:a6:80:f3:
e8:3f:23:27:23:e4:55:74:77:d0:62:b2:b1:ca:d8:1c:de:de:
eb:fd:f7:ce:90:d3:3a:e3:79:40:b6:9b:6b:40:4c:4d:da:61:
8f:00:cf:db:29:88:8a:ee:f9:8b:20:2f:7e:43:02:df:6c:43:
d7:42:ad:23:11:51:a0:03:76:dc:cd:3f:c3:27:00:60:ae:34:
2a:4f:e2:e1:07:b7:f9:55:25:d6:0e:83:71:73:8b:88:22:53:
ba:ed:14:af:72:b0:05:3e:fa:d3:53:21:1a:2f:fb:9c:1c:e7:
18:c7:ec:26:ce:c3:29:83:7f:ed:46:ad:b5:d8:2e:bc:2b:a9:
54:4b:79:5c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbBAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDMwMTQ0MzE0WhcNMjYwNjA5MTQ0MzE0WjAYMRYw
FAYDVQQDEw02OWYzNmE4Ny02MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7oLBTeVwclrsl5igdXB7ELnqCnFAATtoy80vGCzcFHLb1YeyfQH943Ua
7ZkM4AtymiL6VrfH+Z9Wn1LVp14e8dW7XHlj49uCzQ4s2QmY+H+l3CO8s2WF/6h4
7M3L9ZXgwNugsHxWHPi/iY8s+pRo06VTppkDDqbOrcpyQ0Aqdsxh9sOu860WCizI
FKRDCXmmplTuM4Dra9GMgKc+gBFE/xd03bIX3Kxvx3Y2a/iLjLnT6NpnKQTqIaQp
LgZMswXmUQ5vgIQNdXmuiZbakhz45mg0LdJYtH39uEUTzp2hQqTxIUPiIpQ5mZnt
bvc3mWnLgeWqFZAJJigsM2UMBwKq5wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEQD
3qwtLEBXmGK+jvW9zxahQPseMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRDkyNTZGNDQ0QTIxMUYxQkY2NkMzQjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcATMA0GCSqGSIb3DQEBCwUA
A4IBAQCopQ6QGup3zLk0Q1BD7fxS0duHymTK7dYP7vQ4DGy6aAwHXhSUw2r2wc1u
24+DwdPtm2ECkPSGjWcJsmMCNB3zQT/CHcmSmyR/OUfzgDTkheiiJuHnAjn0kJt8
kRmwI8ojzl+Q3Ahk5lpGK/Yisjh6+699fAwrzzBvtROmgPPoPyMnI+RVdHfQYrKx
ytgc3t7r/ffOkNM643lAtptrQExN2mGPAM/bKYiK7vmLIC9+QwLfbEPXQq0jEVGg
A3bczT/DJwBgrjQqT+LhB7f5VSXWDoNxc4uIIlO67RSvcrAFPvrTUyEaL/ucHOcY
x+wmzsMpg3/tRq212C68K6lUS3lc
-----END CERTIFICATE-----
Generated at Wed May 13 10:30:07 2026 by rpki-client