Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3316E3BC37B911F1BF0206C7CE1D38B0.roa
File: 3316E3BC37B911F1BF0206C7CE1D38B0.roa (raw, json)
Hash identifier: ReBaH6DiCF7f55IP5CFHL5HoIusJuTgDgUbxKdFSJ0Q=
Subject key identifier: 28:64:DB:A5:E5:13:02:B6:84:63:21:B1:F1:C9:8E:E2:78:58:47:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3316E3BC37B911F1BF0206C7CE1D38B0.roa
Signing time: Tue 14 Apr 2026 04:19:59 +0000
ROA not before: Tue 14 Apr 2026 04:19:54 +0000
ROA not after: Wed 20 May 2026 04:19:54 +0000
asID: 25198
IP address blocks: 45.198.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109728 (0x1aca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 04:19:54 2026 GMT
Not After : May 20 04:19:54 2026 GMT
Subject: CN=69ddc06f-3d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:06:e7:b2:c1:7f:49:0d:d3:b7:87:28:f8:
ec:f4:14:68:7f:fc:d6:eb:25:9a:3d:44:38:c7:4a:
fc:d1:8b:d9:88:fc:de:87:1a:bf:bb:83:83:c3:2e:
14:15:6d:f6:81:95:c5:43:91:12:e6:bb:78:91:6d:
52:cc:a2:47:23:ea:ac:e8:b1:44:4f:84:60:85:2e:
27:74:0a:f2:77:de:9a:69:1c:2a:c8:2f:d6:06:9f:
37:bf:07:b9:92:9d:aa:8f:aa:7d:2c:b1:0c:de:9d:
04:c1:9a:9f:f5:a5:da:10:0a:7e:86:3d:2c:c0:d3:
6c:4b:c7:79:26:0b:9b:8f:a5:4d:13:9d:0a:b9:a2:
0e:e4:d3:1a:5f:84:d8:53:3e:b7:c2:0a:60:0a:e6:
4d:29:12:d9:67:d4:c0:b7:58:24:3e:c4:57:f1:82:
17:bc:36:96:eb:78:d2:85:07:17:e5:cc:78:c4:a2:
6d:b7:79:76:16:0c:cc:7b:3e:25:4f:0a:02:59:89:
9c:fd:78:61:f2:9c:16:ba:19:20:e1:9a:33:d3:db:
b6:65:97:af:ee:87:1c:45:ad:21:aa:c7:20:bf:d6:
2c:23:42:f0:82:9b:eb:06:2c:a2:91:18:5b:20:de:
d0:50:13:96:8e:17:82:90:48:3b:62:5a:89:90:db:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:DB:A5:E5:13:02:B6:84:63:21:B1:F1:C9:8E:E2:78:58:47:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3316E3BC37B911F1BF0206C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fe:24:b0:76:1e:79:5f:a8:95:9a:64:2d:7e:b9:fe:f6:a9:
ef:21:83:37:26:a5:ca:9b:5c:71:09:7e:03:c1:87:ef:f7:20:
88:55:53:2d:05:1a:db:5a:d6:39:5d:59:97:d8:ec:36:3c:8a:
99:5e:07:c4:f0:33:3b:93:13:ff:ff:a4:32:dd:0c:8e:02:28:
90:06:1e:00:77:41:10:11:78:d3:82:f8:44:82:12:ce:7e:8c:
c7:6a:40:45:77:c3:08:cc:25:4c:77:54:29:a8:58:bf:31:8a:
07:77:d6:c7:b9:3d:57:46:56:30:55:d3:17:a8:8d:ce:69:66:
89:a4:e7:b6:25:ab:73:b4:a3:53:e4:ae:86:92:b4:a9:8f:a2:
5e:be:9c:c4:cc:9d:23:90:84:96:ab:e3:54:72:57:ad:2c:ab:
45:b5:99:dc:aa:98:20:c4:b4:8b:cd:e6:11:7f:1b:63:57:db:
02:84:ef:be:7c:15:8c:41:82:bd:39:5f:fe:d5:ce:dc:56:2c:
15:c6:c9:23:4a:71:18:14:32:65:11:9d:c4:15:b9:a0:b9:a6:
3a:1f:ed:4c:d9:39:5b:b6:b6:63:5c:9e:c7:ac:5d:ff:ef:17:
48:e4:43:0a:ae:f7:bd:14:4c:be:cf:43:91:ac:91:5e:cc:cc:
bb:75:ae:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaygMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE0MDQxOTU0WhcNMjYwNTIwMDQxOTU0WjAYMRYw
FAYDVQQDEw02OWRkYzA2Zi0zZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0/QG57LBf0kN07eHKPjs9BRof/zW6yWaPUQ4x0r80YvZiPzehxq/u4OD
wy4UFW32gZXFQ5ES5rt4kW1SzKJHI+qs6LFET4RghS4ndAryd96aaRwqyC/WBp83
vwe5kp2qj6p9LLEM3p0EwZqf9aXaEAp+hj0swNNsS8d5Jgubj6VNE50KuaIO5NMa
X4TYUz63wgpgCuZNKRLZZ9TAt1gkPsRX8YIXvDaW63jShQcX5cx4xKJtt3l2FgzM
ez4lTwoCWYmc/Xhh8pwWuhkg4Zoz09u2ZZev7occRa0hqscgv9YsI0LwgpvrBiyi
kRhbIN7QUBOWjheCkEg7YlqJkNvA+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFChk
26XlEwK2hGMhsfHJjuJ4WEcIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzE2RTNCQzM3QjkxMUYxQkYwMjA2QzdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcZKMA0GCSqGSIb3DQEBCwUA
A4IBAQB+/iSwdh55X6iVmmQtfrn+9qnvIYM3JqXKm1xxCX4DwYfv9yCIVVMtBRrb
WtY5XVmX2Ow2PIqZXgfE8DM7kxP//6Qy3QyOAiiQBh4Ad0EQEXjTgvhEghLOfozH
akBFd8MIzCVMd1QpqFi/MYoHd9bHuT1XRlYwVdMXqI3OaWaJpOe2JatztKNT5K6G
krSpj6JevpzEzJ0jkISWq+NUcletLKtFtZncqpggxLSLzeYRfxtjV9sChO++fBWM
QYK9OV/+1c7cViwVxskjSnEYFDJlEZ3EFbmguaY6H+1M2TlbtrZjXJ7HrF3/7xdI
5EMKrve9FEy+z0ORrJFezMy7da5H
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:21 2026 by rpki-client