Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D290B4358F11F1B8B80409CF1D38B0.roa
File: 21D290B4358F11F1B8B80409CF1D38B0.roa (raw, json)
Hash identifier: M9fCUwHdBGXdSPOkV7Xb35nYurwdrv8VUlS9BQja324=
Subject key identifier: 78:39:75:E3:6C:2E:7C:87:40:43:FB:B5:B1:90:98:71:0D:B5:41:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D290B4358F11F1B8B80409CF1D38B0.roa
Signing time: Sat 11 Apr 2026 10:13:49 +0000
ROA not before: Sat 11 Apr 2026 10:13:43 +0000
ROA not after: Mon 18 May 2026 10:13:43 +0000
asID: 215925
IP address blocks: 45.194.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109572 (0x1ac04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 10:13:43 2026 GMT
Not After : May 18 10:13:43 2026 GMT
Subject: CN=69da1edd-3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:36:3c:33:98:fe:f1:2b:14:5e:de:9c:d1:
1b:ab:37:99:67:76:f5:7e:bf:5f:a3:94:74:2e:44:
ae:84:a7:2c:89:31:39:ac:f5:4c:64:23:5e:df:b2:
67:29:8a:94:89:e8:20:80:a6:78:71:cb:6d:9b:bc:
05:9d:19:09:0a:28:32:b1:ad:c1:00:79:1f:1b:0a:
98:bb:77:52:fe:81:90:4b:92:5c:d3:0e:63:9a:67:
1c:13:bc:2c:e9:b5:08:02:ee:25:a7:c4:9c:c4:ff:
64:cf:ca:18:5b:9f:10:2c:90:e9:d7:66:8b:5d:1c:
71:29:bd:24:8b:3f:e9:89:da:09:96:91:52:ec:17:
b3:e3:02:7e:ab:de:ec:db:5a:e9:04:e9:0b:4e:cc:
db:47:03:eb:c8:9c:77:0e:60:1e:48:d5:d8:7d:b6:
5b:23:06:04:74:7a:cb:82:10:ca:8e:16:42:d9:57:
e8:62:67:53:46:7d:2e:3f:02:d0:02:0c:fc:89:1f:
59:0e:f7:0a:85:a5:06:bf:e8:9b:ce:40:1b:ce:23:
21:e9:f7:54:e2:d2:35:99:6a:69:86:e7:c5:a9:94:
75:a7:60:ee:db:4e:f7:1b:02:ef:61:f5:0e:4b:ec:
33:34:44:fb:01:43:0b:8d:35:8f:28:55:0e:8c:c2:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:75:E3:6C:2E:7C:87:40:43:FB:B5:B1:90:98:71:0D:B5:41:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D290B4358F11F1B8B80409CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.92.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ee:aa:74:4d:ce:e3:95:6e:2e:e9:49:c3:e1:29:c8:b5:e6:
8d:e2:18:a4:39:76:0d:d9:f0:a4:e0:66:bd:0f:6e:f4:52:05:
1c:4d:69:be:0a:eb:0b:1a:cd:3e:4f:34:ca:cd:1a:d8:c4:5c:
ca:c6:44:ee:ea:f3:75:8e:81:be:75:52:39:36:02:50:5b:35:
d6:c0:e9:5b:68:a5:d3:9b:ee:8f:e1:59:ae:d5:76:fb:6a:47:
b0:8d:2b:9e:20:f6:aa:fc:f4:d0:af:19:67:43:8f:26:3b:bc:
62:1c:91:68:7b:ba:f9:8b:98:c6:3d:32:1a:64:d4:1f:a2:90:
8d:eb:27:ea:8e:3e:5a:e6:84:a3:5a:47:25:65:76:02:6b:6e:
95:a2:b9:f7:e8:63:97:69:32:ae:eb:2f:a5:22:96:1d:4a:e1:
67:b1:10:52:8e:d4:b2:51:37:59:f0:42:ef:99:63:02:47:b4:
08:a9:1e:8d:a6:1e:59:90:2a:46:aa:ee:14:02:c0:83:89:17:
57:e9:c2:a5:fd:99:9a:8e:60:26:f7:37:82:36:cb:4b:ad:ad:
a2:a6:b1:98:4f:24:7a:f1:49:c6:9b:88:1f:af:df:b0:d4:14:
7a:c7:76:71:08:90:dd:e0:6c:f4:24:38:2a:af:db:d5:9f:eb:
6d:64:5a:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAawEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDExMTAxMzQzWhcNMjYwNTE4MTAxMzQzWjAYMRYw
FAYDVQQDEw02OWRhMWVkZC0zZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA61o2PDOY/vErFF7enNEbqzeZZ3b1fr9fo5R0LkSuhKcsiTE5rPVMZCNe
37JnKYqUiegggKZ4ccttm7wFnRkJCigysa3BAHkfGwqYu3dS/oGQS5Jc0w5jmmcc
E7ws6bUIAu4lp8ScxP9kz8oYW58QLJDp12aLXRxxKb0kiz/pidoJlpFS7Bez4wJ+
q97s21rpBOkLTszbRwPryJx3DmAeSNXYfbZbIwYEdHrLghDKjhZC2VfoYmdTRn0u
PwLQAgz8iR9ZDvcKhaUGv+ibzkAbziMh6fdU4tI1mWpphufFqZR1p2Du2073GwLv
YfUOS+wzNET7AUMLjTWPKFUOjMKOkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHg5
deNsLnyHQEP7tbGQmHENtUHVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMUQyOTBCNDM1OEYxMUYxQjhCODA0MDlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJcMA0GCSqGSIb3DQEBCwUA
A4IBAQB17qp0Tc7jlW4u6UnD4SnIteaN4hikOXYN2fCk4Ga9D270UgUcTWm+CusL
Gs0+TzTKzRrYxFzKxkTu6vN1joG+dVI5NgJQWzXWwOlbaKXTm+6P4Vmu1Xb7akew
jSueIPaq/PTQrxlnQ48mO7xiHJFoe7r5i5jGPTIaZNQfopCN6yfqjj5a5oSjWkcl
ZXYCa26Vorn36GOXaTKu6y+lIpYdSuFnsRBSjtSyUTdZ8ELvmWMCR7QIqR6Nph5Z
kCpGqu4UAsCDiRdX6cKl/ZmajmAm9zeCNstLra2iprGYTyR68UnGm4gfr9+w1BR6
x3ZxCJDd4Gz0JDgqr9vVn+ttZFp9
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:31 2026 by rpki-client