Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD21514417BE11F1A42C637CDAE4EC9C.roa
File: FD21514417BE11F1A42C637CDAE4EC9C.roa (raw, json)
Hash identifier: O7RDD6yf0Vq+XUlI2C2KmVf7yCVh65GBlweA/YSYXtc=
Subject key identifier: 78:D3:4B:C1:07:07:86:5C:31:31:02:04:A4:89:8A:73:4A:50:82:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A242
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD21514417BE11F1A42C637CDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 11:40:48 +0000
ROA not before: Wed 04 Mar 2026 11:40:44 +0000
ROA not after: Thu 09 Apr 2026 11:40:44 +0000
asID: 205463
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107074 (0x1a242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 11:40:44 2026 GMT
Not After : Apr 9 11:40:44 2026 GMT
Subject: CN=69a81a40-e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:30:ef:6e:0a:d1:e3:d6:8c:97:a0:95:25:
9f:9e:54:da:98:b9:3b:49:71:be:ed:fb:d7:ab:78:
6f:86:1d:fc:96:8d:8f:5c:dd:9c:b6:2a:85:c5:b2:
41:8f:51:3d:8f:57:ac:88:8e:59:b1:6d:46:fa:95:
d6:cb:48:a3:1a:6f:91:e4:9a:75:99:24:bd:62:a7:
79:d7:66:0b:67:f6:d9:4b:1c:bf:c2:90:1b:dd:fb:
a7:11:17:a5:ee:f7:6c:d7:f9:c3:25:f5:de:aa:7f:
36:21:c9:b5:fe:b1:d0:a2:9e:a5:a8:ce:56:97:bd:
22:07:e7:34:b3:d7:b0:74:03:5f:77:0b:51:2e:6a:
2a:da:fd:1b:ea:02:d2:f7:35:bd:a6:cc:97:3c:c3:
ef:5f:2d:19:1b:8e:0a:13:0b:32:cd:29:5e:bb:8a:
7a:97:1f:cd:9b:53:be:3b:30:27:23:8c:8c:ca:20:
a9:58:b4:40:b5:c8:2d:7d:02:28:b2:f3:f9:9b:79:
53:59:13:e7:ab:57:fb:a9:e9:f2:22:33:dc:4c:b1:
dc:89:74:be:a9:49:db:4b:45:a2:7e:c1:d1:09:3c:
2b:12:81:c1:d5:43:37:e0:dd:9f:0b:2f:4e:05:46:
83:da:ea:5c:9a:4c:8c:4c:0e:90:de:a0:26:b0:6e:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:4B:C1:07:07:86:5C:31:31:02:04:A4:89:8A:73:4A:50:82:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD21514417BE11F1A42C637CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:35:29:6f:eb:b2:53:12:ac:df:0e:2b:2a:b5:1b:19:cb:f5:
de:a0:7d:f2:3a:31:5d:c4:98:3f:b1:56:db:2e:39:1f:19:0e:
dc:13:a0:10:ec:4a:d1:d4:26:82:f2:59:6d:38:83:64:39:a7:
04:38:dc:53:65:c8:76:f1:a6:45:96:09:e5:ee:d2:7d:89:2c:
a1:eb:77:a2:08:18:01:61:8b:2c:b4:a0:b7:ad:1d:28:8e:6a:
dd:57:38:0f:98:29:f8:50:3e:67:6e:87:1d:6d:89:f3:e0:2e:
45:31:12:59:d8:0f:b0:1f:2a:1b:05:0b:94:47:ca:3b:97:78:
05:64:c7:4e:67:14:9d:68:f9:a2:ef:95:01:13:3c:1d:f9:45:
15:dd:f2:48:7c:88:6b:af:91:be:80:28:cc:03:42:f7:9d:d1:
76:ba:5b:f3:2d:34:34:1e:ce:68:e8:b8:d8:df:9c:fc:03:32:
e8:50:13:43:9b:78:79:b9:e7:70:cf:cd:86:e2:6c:9d:37:d5:
f7:62:c2:18:1a:ac:38:a0:3d:13:ef:5c:48:a7:39:a4:de:ce:
4b:0e:e5:55:93:36:4b:e5:01:2a:c2:0d:30:6c:e7:69:10:50:
1d:ef:9a:21:14:2b:41:43:e6:2c:ae:63:31:2a:d9:6c:0a:0f:
61:4d:d9:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaJCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA0MTE0MDQ0WhcNMjYwNDA5MTE0MDQ0WjAYMRYw
FAYDVQQDEw02OWE4MWE0MC1lNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0c0w724K0ePWjJeglSWfnlTamLk7SXG+7fvXq3hvhh38lo2PXN2ctiqF
xbJBj1E9j1esiI5ZsW1G+pXWy0ijGm+R5Jp1mSS9Yqd512YLZ/bZSxy/wpAb3fun
ERel7vds1/nDJfXeqn82Icm1/rHQop6lqM5Wl70iB+c0s9ewdANfdwtRLmoq2v0b
6gLS9zW9psyXPMPvXy0ZG44KEwsyzSleu4p6lx/Nm1O+OzAnI4yMyiCpWLRAtcgt
fQIosvP5m3lTWRPnq1f7qenyIjPcTLHciXS+qUnbS0WifsHRCTwrEoHB1UM34N2f
Cy9OBUaD2upcmkyMTA6Q3qAmsG6R0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHjT
S8EHB4ZcMTECBKSJinNKUIIzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRDIxNTE0NDE3QkUxMUYxQTQyQzYzN0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcATMA0GCSqGSIb3DQEBCwUA
A4IBAQCqNSlv67JTEqzfDisqtRsZy/XeoH3yOjFdxJg/sVbbLjkfGQ7cE6AQ7ErR
1CaC8lltOINkOacEONxTZch28aZFlgnl7tJ9iSyh63eiCBgBYYsstKC3rR0ojmrd
VzgPmCn4UD5nbocdbYnz4C5FMRJZ2A+wHyobBQuUR8o7l3gFZMdOZxSdaPmi75UB
Ezwd+UUV3fJIfIhrr5G+gCjMA0L3ndF2ulvzLTQ0Hs5o6LjY35z8AzLoUBNDm3h5
uedwz82G4mydN9X3YsIYGqw4oD0T71xIpzmk3s5LDuVVkzZL5QEqwg0wbOdpEFAd
75ohFCtBQ+YsrmMxKtlsCg9hTdkm
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:13 2026 by rpki-client