Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34AA9F2E2F3B11F194B80EF4DAE4EC9C.roa
File: 34AA9F2E2F3B11F194B80EF4DAE4EC9C.roa (raw, json)
Hash identifier: Im7Tdg0AiZXEfAVyIz4XqSbgGMePZ51ecdnprS3bEs0=
Subject key identifier: F2:23:62:DF:97:DB:F7:3F:3B:DA:2F:A1:46:71:73:9E:A6:AC:B0:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34AA9F2E2F3B11F194B80EF4DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 08:57:56 +0000
ROA not before: Fri 03 Apr 2026 08:57:51 +0000
ROA not after: Mon 16 Oct 2028 08:57:51 +0000
asID: 17561
IP address blocks: 45.198.240.0/24 maxlen: 24
45.198.241.0/24 maxlen: 24
45.198.242.0/24 maxlen: 24
45.198.243.0/24 maxlen: 24
45.198.244.0/24 maxlen: 24
45.198.245.0/24 maxlen: 24
45.199.148.0/24 maxlen: 24
45.202.76.0/24 maxlen: 24
45.202.77.0/24 maxlen: 24
45.202.78.0/24 maxlen: 24
45.202.79.0/24 maxlen: 24
45.202.240.0/24 maxlen: 24
45.202.241.0/24 maxlen: 24
45.202.242.0/24 maxlen: 24
45.202.243.0/24 maxlen: 24
45.202.244.0/24 maxlen: 24
45.202.246.0/24 maxlen: 24
45.202.247.0/24 maxlen: 24
45.207.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108972 (0x1a9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 08:57:51 2026 GMT
Not After : Oct 16 08:57:51 2028 GMT
Subject: CN=69cf8114-75a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:b8:a3:99:d1:b2:66:b8:c5:df:c6:6c:96:
e3:05:0a:cf:a0:9b:a7:c0:3e:dc:12:26:1e:b7:c6:
6c:72:4e:43:9c:59:4b:93:7d:dd:ec:d8:eb:c2:74:
d3:cb:bd:ee:5f:ad:27:0b:e1:03:1e:22:25:3f:01:
f0:27:92:0d:6d:80:c3:bd:e3:a5:6f:a4:27:37:ef:
46:7e:cb:bd:7c:2d:66:f2:a8:3c:3f:d5:0a:ec:7f:
ec:08:9e:fe:e7:da:9c:57:ae:a4:12:80:8d:a0:5c:
01:fd:8f:7f:ce:6d:33:ef:fc:f5:b4:e8:ef:a7:c5:
44:c7:ae:a3:1f:95:92:95:3e:05:a7:ee:45:91:50:
26:ee:df:88:62:8f:b7:41:da:c5:c1:2a:6a:9d:56:
ec:af:7b:10:73:1f:75:0e:9d:b5:34:25:1d:b9:01:
3d:4b:44:51:86:e0:a0:02:a3:03:ba:55:61:15:b5:
1f:5e:88:e6:e7:f2:02:a3:35:8c:fe:bf:ea:2b:33:
8d:97:e5:61:18:08:a4:bf:fd:2d:06:fb:10:e7:94:
0e:5a:6b:85:b5:47:50:7c:9c:40:00:2f:fb:af:4a:
1f:85:72:f8:94:7b:92:ef:a4:90:81:ac:f6:7f:ac:
23:54:1c:f3:3d:ee:cd:fa:7d:97:db:ff:bf:c8:5c:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:23:62:DF:97:DB:F7:3F:3B:DA:2F:A1:46:71:73:9E:A6:AC:B0:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34AA9F2E2F3B11F194B80EF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.240.0-45.198.245.255
45.199.148.0/24
45.202.76.0/22
45.202.240.0-45.202.244.255
45.202.246.0/23
45.207.170.0/24
Signature Algorithm: sha256WithRSAEncryption
55:13:04:2b:6f:66:1f:09:8f:6f:24:1e:c2:6c:8b:e8:f5:ec:
dd:5b:28:8d:22:95:0c:22:aa:20:5c:49:a4:d8:a5:b4:12:03:
77:1e:3c:4f:1f:25:81:a1:37:2f:cf:b7:32:c8:4f:93:eb:24:
97:6d:d3:d7:73:3c:c6:c8:43:ea:fe:3b:9d:fd:55:52:7b:b0:
c0:ee:17:a6:57:30:97:8f:38:3a:91:9d:c7:80:10:44:e4:0b:
a6:7d:02:e6:59:18:78:77:ac:78:13:5f:06:7f:6a:2a:64:df:
16:7f:bc:fa:36:0e:1a:7c:55:f7:87:8c:21:45:18:14:49:fc:
d0:88:dc:84:92:94:cc:a7:5e:34:99:64:f1:27:4b:a0:9a:01:
8c:4b:8c:57:7b:f1:7d:5c:f4:8c:da:67:54:5b:7f:15:58:f9:
85:6b:bc:b1:c2:97:eb:25:1d:59:19:38:00:97:72:d9:87:96:
e1:9e:e0:20:63:bd:f3:23:17:de:11:aa:0b:2f:70:66:16:43:
d3:6b:c3:bf:00:07:1b:8b:51:66:18:bc:03:89:f1:17:aa:84:
d0:f4:e1:cd:1d:65:71:53:0a:82:95:14:6e:6d:6a:e6:fb:21:
1b:a7:41:d5:97:96:f6:9b:01:ae:d4:8f:75:1f:68:fa:1d:fd:
31:f8:e8:73
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAamsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDAzMDg1NzUxWhcNMjgxMDE2MDg1NzUxWjAYMRYw
FAYDVQQDEw02OWNmODExNC03NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwY64o5nRsma4xd/GbJbjBQrPoJunwD7cEiYet8Zsck5DnFlLk33d7Njr
wnTTy73uX60nC+EDHiIlPwHwJ5INbYDDveOlb6QnN+9Gfsu9fC1m8qg8P9UK7H/s
CJ7+59qcV66kEoCNoFwB/Y9/zm0z7/z1tOjvp8VEx66jH5WSlT4Fp+5FkVAm7t+I
Yo+3QdrFwSpqnVbsr3sQcx91Dp21NCUduQE9S0RRhuCgAqMDulVhFbUfXojm5/IC
ozWM/r/qKzONl+VhGAikv/0tBvsQ55QOWmuFtUdQfJxAAC/7r0ofhXL4lHuS76SQ
gaz2f6wjVBzzPe7N+n2X2/+/yFy7qQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFPIj
Yt+X2/c/O9ovoUZxc56mrLCkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNEFBOUYyRTJGM0IxMUYxOTRCODBFRjREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAQtxvADBAEtxvQDBAAtx5QD
BAItykwwDAMEBC3K8AMEAC3K9AMEAS3K9gMEAC3PqjANBgkqhkiG9w0BAQsFAAOC
AQEAVRMEK29mHwmPbyQewmyL6PXs3VsojSKVDCKqIFxJpNiltBIDdx48Tx8lgaE3
L8+3MshPk+skl23T13M8xshD6v47nf1VUnuwwO4Xplcwl484OpGdx4AQROQLpn0C
5lkYeHeseBNfBn9qKmTfFn+8+jYOGnxV94eMIUUYFEn80IjchJKUzKdeNJlk8SdL
oJoBjEuMV3vxfVz0jNpnVFt/FVj5hWu8scKX6yUdWRk4AJdy2YeW4Z7gIGO98yMX
3hGqCy9wZhZD02vDvwAHG4tRZhi8A4nxF6qE0PThzR1lcVMKgpUUbm1q5vshG6dB
1ZeW9psBrtSPdR9o+h39Mfjocw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:48 2026 by rpki-client