Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/136574D6072411F1868A2D78DAE4EC9C.roa
File: 136574D6072411F1868A2D78DAE4EC9C.roa (raw, json)
Hash identifier: fBKeOXYhSZt7WifBCmHrYjdixgnYV4QXxGxZ90oHRIc=
Subject key identifier: 63:B0:53:EF:19:E0:42:4A:4C:88:88:35:17:68:93:AF:41:C9:AB:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/136574D6072411F1868A2D78DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 08:31:35 +0000
ROA not before: Wed 11 Feb 2026 08:31:31 +0000
ROA not after: Wed 18 Mar 2026 08:31:31 +0000
asID: 18779
IP address blocks: 45.202.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105713 (0x19cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 08:31:31 2026 GMT
Not After : Mar 18 08:31:31 2026 GMT
Subject: CN=698c3e67-8d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:b9:07:d3:a5:39:c0:1c:1a:40:a8:5f:6e:
6a:56:f2:58:5a:ac:3d:e8:76:79:6b:2c:f2:f2:c8:
6e:ef:d1:62:28:56:f9:9c:bc:eb:7c:da:02:95:00:
82:04:34:2d:f2:c8:04:04:c9:fc:0b:0f:f9:eb:2b:
5b:53:8e:e7:d9:7e:b9:04:47:21:36:20:63:e5:81:
f3:2e:9f:8c:e0:c8:95:6b:92:ae:7e:04:bb:8e:19:
9e:ef:f4:27:b7:54:2e:4a:f0:b5:99:91:a2:68:63:
9d:e1:5d:1c:62:7d:e1:04:27:d8:05:e8:fa:20:6e:
32:44:10:3e:62:f4:0a:cc:ba:bf:fb:f5:39:5f:18:
7c:e3:3c:14:e1:9a:a3:08:30:30:33:27:9f:77:4e:
3a:15:08:bf:69:f0:a9:5f:4f:3d:a0:ae:ab:d4:75:
97:3f:d3:c5:de:cc:0b:c0:f8:1d:56:40:a8:18:04:
20:31:ae:c7:0e:14:bf:4e:12:f6:5c:90:41:5c:30:
eb:2f:5c:3a:ad:20:b2:9d:00:9c:f3:c2:d5:a3:de:
cb:9c:37:73:ae:d4:00:77:4b:fc:86:8a:75:ae:6c:
e2:3c:7f:09:32:19:c6:81:af:8f:2c:c1:38:ec:1e:
eb:8d:6c:b4:28:44:0e:e4:19:bc:5d:ab:af:6f:ed:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:53:EF:19:E0:42:4A:4C:88:88:35:17:68:93:AF:41:C9:AB:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/136574D6072411F1868A2D78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.204.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:24:2e:d4:1c:c6:0d:cb:c9:f9:ed:96:9d:97:00:08:32:26:
9b:21:12:ba:44:ce:41:eb:d3:9c:94:12:70:bf:d8:2f:53:1b:
68:8d:0a:5f:2b:36:c8:8f:0e:4f:45:10:14:c4:ba:37:6e:a1:
38:bc:96:4b:8d:1f:38:0f:79:57:10:5d:59:8d:7e:66:b5:2a:
85:74:d4:43:4d:dc:0c:9f:68:8f:fa:b7:bf:e0:c6:37:5a:fa:
00:af:00:de:8b:97:e9:e7:92:26:fc:b9:c9:bf:04:4d:3e:80:
be:0e:b2:8b:25:97:eb:d3:0b:25:fc:eb:0e:a7:77:3b:07:99:
66:8b:5e:37:ac:71:0a:d7:7d:39:09:9c:0d:b9:1f:4c:97:84:
25:fc:57:0d:dc:a3:6a:8d:ae:8d:69:69:b8:70:35:3a:df:bb:
f7:11:b8:b5:00:b2:1f:b1:6e:92:5f:c7:50:2a:ca:e3:41:f0:
4d:39:71:b5:a8:d0:19:f1:1f:85:a7:7e:d0:18:74:0d:d5:35:
9c:6d:3f:40:9c:00:d1:1f:f7:5f:85:1b:54:23:5e:ff:09:d4:
0a:05:51:38:de:27:13:7f:02:bb:04:de:ea:c8:d5:d9:15:41:
1c:f8:13:28:55:b4:e9:ef:89:24:17:30:6f:5e:33:e5:20:8c:
cb:8f:76:8c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZzxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjExMDgzMTMxWhcNMjYwMzE4MDgzMTMxWjAYMRYw
FAYDVQQDEw02OThjM2U2Ny04ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4XG5B9OlOcAcGkCoX25qVvJYWqw96HZ5ayzy8shu79FiKFb5nLzrfNoC
lQCCBDQt8sgEBMn8Cw/56ytbU47n2X65BEchNiBj5YHzLp+M4MiVa5KufgS7jhme
7/Qnt1QuSvC1mZGiaGOd4V0cYn3hBCfYBej6IG4yRBA+YvQKzLq/+/U5Xxh84zwU
4ZqjCDAwMyefd046FQi/afCpX089oK6r1HWXP9PF3swLwPgdVkCoGAQgMa7HDhS/
ThL2XJBBXDDrL1w6rSCynQCc88LVo97LnDdzrtQAd0v8hop1rmziPH8JMhnGga+P
LME47B7rjWy0KEQO5Bm8Xauvb+0GQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGOw
U+8Z4EJKTIiINRdok69ByavvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzY1NzRENjA3MjQxMUYxODY4QTJENzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcrMMA0GCSqGSIb3DQEBCwUA
A4IBAQCqJC7UHMYNy8n57ZadlwAIMiabIRK6RM5B69OclBJwv9gvUxtojQpfKzbI
jw5PRRAUxLo3bqE4vJZLjR84D3lXEF1ZjX5mtSqFdNRDTdwMn2iP+re/4MY3WvoA
rwDei5fp55Im/LnJvwRNPoC+DrKLJZfr0wsl/OsOp3c7B5lmi143rHEK1305CZwN
uR9Ml4Ql/FcN3KNqja6NaWm4cDU637v3Ebi1ALIfsW6SX8dQKsrjQfBNOXG1qNAZ
8R+Fp37QGHQN1TWcbT9AnADRH/dfhRtUI17/CdQKBVE43icTfwK7BN7qyNXZFUEc
+BMoVbTp74kkFzBvXjPlIIzLj3aM
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:31 2026 by rpki-client