Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23EEEC5003FB11F194CD0790DAE4EC9C.roa
File: 23EEEC5003FB11F194CD0790DAE4EC9C.roa (raw, json)
Hash identifier: ZLnB/p7oe+0jlIq6UB2rTzFonnypgex+ictfTCMLBKc=
Subject key identifier: A0:EF:C3:C3:7B:27:B3:38:79:EF:53:A7:7A:28:C8:41:BC:61:64:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23EEEC5003FB11F194CD0790DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 08:01:00 +0000
ROA not before: Sat 07 Feb 2026 08:00:55 +0000
ROA not after: Thu 12 Mar 2026 08:00:55 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105491 (0x19c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 7 08:00:55 2026 GMT
Not After : Mar 12 08:00:55 2026 GMT
Subject: CN=6986f13c-c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:78:62:ed:37:ba:61:73:40:cb:fd:03:15:
4a:a7:7e:67:da:4b:d8:da:e6:3d:f3:b7:89:82:08:
01:2b:bb:ae:fa:4d:e0:54:98:a6:36:ff:b4:c7:b4:
3c:9d:8d:04:74:68:01:70:c7:6b:3a:96:1f:16:95:
2d:54:05:84:83:dc:b2:75:8a:53:b6:94:3e:a1:80:
19:e5:8f:df:f2:e1:b1:e1:9e:43:9c:0c:61:06:fe:
82:ab:cc:16:69:55:c7:25:cd:2a:5b:b1:22:f9:01:
19:ae:ed:15:af:f5:2c:bf:18:f6:2a:8e:10:92:0f:
85:d5:f8:f9:25:f2:c2:28:20:6b:60:18:85:83:e8:
d9:06:4b:86:fc:59:c2:8d:d5:9d:90:13:f5:26:6c:
b6:21:30:87:ce:46:ad:bd:1e:f7:b0:84:d7:0c:ce:
78:fd:04:f9:1b:bd:db:50:ae:45:f2:f5:e4:a8:7f:
42:4b:3b:42:d8:93:65:66:22:22:c2:fb:8e:81:e7:
99:41:14:51:19:21:f7:d1:6b:1e:3d:03:02:be:6a:
09:f8:10:0c:b1:66:6c:e8:26:f3:cd:8b:71:74:41:
0c:72:00:77:3c:8c:4d:e1:52:73:46:6b:82:fe:85:
de:21:9e:7b:3e:41:9b:ef:5c:18:bf:eb:ff:55:55:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:C3:C3:7B:27:B3:38:79:EF:53:A7:7A:28:C8:41:BC:61:64:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23EEEC5003FB11F194CD0790DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
29:48:a4:98:91:9c:55:28:de:53:34:c2:8b:bb:aa:34:d7:9b:
73:be:85:c4:e3:19:3d:a6:5e:c3:12:6e:8c:f0:8d:71:f0:99:
b0:d5:fc:9d:1b:13:91:40:03:89:d6:cb:e2:d0:ab:35:95:76:
6a:78:5f:50:62:be:f4:4c:f0:0c:14:0c:e8:9a:e8:5e:53:14:
ba:4e:8b:72:48:c5:d8:24:38:e2:d6:1b:54:5d:dd:f5:50:df:
6b:27:7a:5c:a3:3f:ed:d8:14:cb:e1:5c:7f:94:f9:be:12:bf:
ac:9e:3c:43:31:31:0e:d3:ac:c8:78:8d:a8:c2:d2:b9:1d:92:
54:46:5b:a1:9d:d7:ab:b2:c7:68:70:bd:70:32:e0:b7:2c:6a:
c6:cf:c1:23:7a:7e:e6:6e:ae:7d:ee:57:7b:bf:89:32:21:67:
85:47:08:44:e4:ad:03:c5:37:d8:ee:6b:20:1b:74:cb:bb:a1:
e1:68:47:10:ce:37:19:83:9b:91:b3:f0:dc:69:04:7a:58:8b:
93:57:d3:c0:9f:c7:f7:70:0b:80:b6:96:ab:78:61:fe:5e:f5:
51:38:ab:27:da:3e:5f:33:f1:81:d6:2c:5e:90:a1:12:0d:2a:
9b:1a:92:d9:3d:15:e0:aa:67:85:64:5d:52:71:64:9f:e8:fe:
74:e8:1c:46
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZwTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA3MDgwMDU1WhcNMjYwMzEyMDgwMDU1WjAYMRYw
FAYDVQQDEw02OTg2ZjEzYy1jMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyXN4Yu03umFzQMv9AxVKp35n2kvY2uY987eJgggBK7uu+k3gVJimNv+0
x7Q8nY0EdGgBcMdrOpYfFpUtVAWEg9yydYpTtpQ+oYAZ5Y/f8uGx4Z5DnAxhBv6C
q8wWaVXHJc0qW7Ei+QEZru0Vr/Usvxj2Ko4Qkg+F1fj5JfLCKCBrYBiFg+jZBkuG
/FnCjdWdkBP1Jmy2ITCHzkatvR73sITXDM54/QT5G73bUK5F8vXkqH9CSztC2JNl
ZiIiwvuOgeeZQRRRGSH30WsePQMCvmoJ+BAMsWZs6CbzzYtxdEEMcgB3PIxN4VJz
RmuC/oXeIZ57PkGb71wYv+v/VVUp+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKDv
w8N7J7M4ee9Tp3ooyEG8YWSLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yM0VFRUM1MDAzRkIxMUYxOTRDRDA3OTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcIwMA0GCSqGSIb3DQEBCwUA
A4IBAQApSKSYkZxVKN5TNMKLu6o015tzvoXE4xk9pl7DEm6M8I1x8Jmw1fydGxOR
QAOJ1svi0Ks1lXZqeF9QYr70TPAMFAzomuheUxS6TotySMXYJDji1htUXd31UN9r
J3pcoz/t2BTL4Vx/lPm+Er+snjxDMTEO06zIeI2owtK5HZJURluhnderssdocL1w
MuC3LGrGz8Ejen7mbq597ld7v4kyIWeFRwhE5K0DxTfY7msgG3TLu6HhaEcQzjcZ
g5uRs/DcaQR6WIuTV9PAn8f3cAuAtpareGH+XvVROKsn2j5fM/GB1ixekKESDSqb
GpLZPRXgqmeFZF1ScWSf6P506BxG
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:22 2026 by rpki-client