Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A92E18097611F19936B7BADAE4EC9C.roa
File: 25A92E18097611F19936B7BADAE4EC9C.roa (raw, json)
Hash identifier: ON1cjf75SwmGBXfXjFmQcbH7bC00GTOX8cRx6V7bID8=
Subject key identifier: 4E:53:D8:40:1A:87:34:9E:A3:1F:EB:4E:C5:1A:DC:66:3B:D8:A4:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A92E18097611F19936B7BADAE4EC9C.roa
Signing time: Sat 14 Feb 2026 07:24:07 +0000
ROA not before: Sat 14 Feb 2026 07:24:01 +0000
ROA not after: Sun 22 Mar 2026 07:24:01 +0000
asID: 401696
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105846 (0x19d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 07:24:01 2026 GMT
Not After : Mar 22 07:24:01 2026 GMT
Subject: CN=69902317-f04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:bd:fb:d9:b3:94:c1:5e:f1:02:77:37:d6:
a8:9f:2f:66:a8:b0:f7:40:77:5b:25:0b:39:06:62:
7d:d5:19:ce:0e:67:f4:c4:2a:c0:c8:d2:76:2d:ef:
a3:68:1f:38:e9:5b:6f:1b:fb:7a:d7:98:15:59:62:
c1:f7:4c:8a:a0:ed:c6:e5:a1:39:6e:24:5d:75:0b:
c4:f0:ab:82:6e:0b:5d:bc:4d:6b:db:52:fc:7f:a1:
7d:40:16:17:46:02:c2:4d:79:b7:9c:30:34:27:f6:
e7:9a:0c:5c:87:ac:5b:e9:28:76:c3:22:b4:fb:97:
d5:83:e7:69:11:fa:61:57:1a:0e:c5:66:06:86:ee:
ab:c9:0f:d3:cc:05:bb:8c:f4:96:8e:57:fa:35:49:
b0:13:4f:d3:28:14:b6:e9:4e:3e:75:c0:95:95:c3:
c3:27:a6:7b:e8:91:41:a3:8c:2e:1b:93:f6:4b:16:
84:8f:98:a8:5e:27:58:62:9c:93:45:63:d2:a8:d4:
51:0f:c0:45:db:72:d9:b4:7c:c1:22:9d:59:b3:0c:
c6:d6:31:94:d6:2f:30:32:14:70:e7:23:a7:07:4c:
c7:08:8e:c8:88:c0:0d:22:f4:6d:85:6b:23:22:15:
e7:97:9f:a1:6e:e1:0f:e8:10:c3:e1:14:d8:e5:11:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:53:D8:40:1A:87:34:9E:A3:1F:EB:4E:C5:1A:DC:66:3B:D8:A4:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A92E18097611F19936B7BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
58:e5:7b:09:84:bb:21:bf:fa:e5:33:00:b4:70:ef:f9:aa:99:
87:c7:cc:fd:ef:a4:72:56:f3:77:85:86:4b:00:c3:ca:b3:66:
47:21:6c:9b:ec:aa:5e:32:bb:70:a8:0d:60:3d:89:ab:a9:c8:
46:a0:56:c1:14:cd:85:19:2c:52:a6:89:51:f0:2c:c5:ea:2a:
6a:82:9e:44:96:b3:ad:ce:a4:c3:85:71:ca:0d:99:52:d0:ea:
e9:02:62:7f:18:43:86:15:63:4d:72:66:9d:44:54:22:49:b5:
6d:92:db:3c:a1:b7:9b:17:b6:71:9c:bf:43:a0:25:a2:2f:6e:
2a:ea:aa:0e:f2:fb:29:3c:c9:bc:73:28:74:f7:54:80:8a:8b:
4f:e0:65:09:df:a6:32:9a:aa:05:16:3e:92:ea:41:a6:38:f2:
7e:58:d1:10:c1:7e:37:30:92:a5:1e:95:b3:a4:4e:f7:71:19:
49:33:a4:a6:b3:42:b1:c6:e5:11:cf:1f:a9:ec:d2:76:03:61:
bb:4e:fb:22:48:f0:98:44:b3:d2:4f:40:79:ee:19:9c:0e:83:
60:93:10:51:a5:90:a6:93:01:6a:14:2b:4a:47:7c:c8:f0:3c:
c9:d2:e9:69:26:bf:f5:ee:08:55:f1:8b:86:d7:21:ae:01:88:
25:c0:71:2b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ12MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE0MDcyNDAxWhcNMjYwMzIyMDcyNDAxWjAYMRYw
FAYDVQQDEw02OTkwMjMxNy1mMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn8m9+9mzlMFe8QJ3N9aony9mqLD3QHdbJQs5BmJ91RnODmf0xCrAyNJ2
Le+jaB846VtvG/t615gVWWLB90yKoO3G5aE5biRddQvE8KuCbgtdvE1r21L8f6F9
QBYXRgLCTXm3nDA0J/bnmgxch6xb6Sh2wyK0+5fVg+dpEfphVxoOxWYGhu6ryQ/T
zAW7jPSWjlf6NUmwE0/TKBS26U4+dcCVlcPDJ6Z76JFBo4wuG5P2SxaEj5ioXidY
YpyTRWPSqNRRD8BF23LZtHzBIp1ZswzG1jGU1i8wMhRw5yOnB0zHCI7IiMANIvRt
hWsjIhXnl5+hbuEP6BDD4RTY5RGcAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE5T
2EAahzSeox/rTsUa3GY72KRCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNUE5MkUxODA5NzYxMUYxOTkzNkI3QkFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQBY5XsJhLshv/rlMwC0cO/5qpmHx8z976RyVvN3hYZLAMPKs2ZHIWyb7Kpe
MrtwqA1gPYmrqchGoFbBFM2FGSxSpolR8CzF6ipqgp5ElrOtzqTDhXHKDZlS0Orp
AmJ/GEOGFWNNcmadRFQiSbVtkts8obebF7ZxnL9DoCWiL24q6qoO8vspPMm8cyh0
91SAiotP4GUJ36YymqoFFj6S6kGmOPJ+WNEQwX43MJKlHpWzpE73cRlJM6Sms0Kx
xuURzx+p7NJ2A2G7TvsiSPCYRLPST0B57hmcDoNgkxBRpZCmkwFqFCtKR3zI8DzJ
0ulpJr/17ghV8YuG1yGuAYglwHEr
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:44:45 2026 by rpki-client