Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ADFE8AE2F3611F197CFFFD5DAE4EC9C.roa
File: 3ADFE8AE2F3611F197CFFFD5DAE4EC9C.roa (raw, json)
Hash identifier: pJa7+PZTd60hLnxvOyFgOhIpybMgFvBjSQwmOEHO5LI=
Subject key identifier: D8:AE:CE:DC:88:84:CB:D5:9F:11:FE:16:88:DF:4E:CD:2C:F2:FB:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ADFE8AE2F3611F197CFFFD5DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 08:22:19 +0000
ROA not before: Fri 03 Apr 2026 08:22:14 +0000
ROA not after: Sun 17 May 2026 08:22:14 +0000
asID: 273824
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108960 (0x1a9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 08:22:14 2026 GMT
Not After : May 17 08:22:14 2026 GMT
Subject: CN=69cf78bb-b174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:3c:b7:4e:0b:64:a6:9e:3b:18:b9:0f:6c:
6c:8a:e1:53:47:16:b6:21:ab:46:0f:05:4e:c8:94:
c6:5c:8a:b3:ee:bf:80:08:27:61:ba:72:15:4e:d5:
c0:79:41:12:7c:f0:73:1b:82:4d:09:60:6b:2a:f1:
e2:2e:4a:60:72:88:07:2b:14:a7:91:5f:a9:4e:2c:
1a:68:0c:e3:41:26:7e:59:b4:52:b5:d2:cb:6f:5b:
0f:05:59:ec:11:76:a5:b7:aa:de:94:6e:ce:05:34:
98:7c:9b:a9:ba:e2:a1:3a:d4:26:1d:d2:c3:a4:99:
04:69:59:ab:35:6c:60:86:c1:dc:bb:63:20:72:f6:
73:7a:aa:91:e1:13:0d:07:a4:e3:a9:72:a7:82:e9:
d2:37:ee:e9:43:93:58:86:a6:b0:70:db:a0:14:00:
cb:bc:06:56:40:c9:f8:f3:88:40:a6:43:08:25:70:
8e:e2:ce:ad:1d:b1:52:a5:77:15:bf:a6:49:6c:2a:
70:62:01:8d:2a:93:ff:1b:82:20:12:4d:eb:ea:6c:
c3:76:7b:2c:7e:00:0b:68:a5:1a:0d:93:1b:26:69:
78:21:ec:5a:6e:8b:0e:82:ff:6d:e8:3f:b2:13:26:
31:86:24:11:e3:7a:da:41:16:de:6c:74:e2:a9:d8:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:CE:DC:88:84:CB:D5:9F:11:FE:16:88:DF:4E:CD:2C:F2:FB:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ADFE8AE2F3611F197CFFFD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fb:41:ab:28:3b:2a:2a:67:fc:1e:94:55:e4:07:42:15:d9:
14:cb:30:61:e1:d3:43:27:03:00:82:cf:41:b9:96:d5:7e:b6:
32:e7:4a:27:41:dc:89:87:f8:1c:f1:ea:60:85:e3:88:e1:71:
33:61:be:01:f4:53:c9:9a:1b:46:ad:70:1b:54:b4:ae:2b:30:
1d:a1:b3:ca:d9:7c:30:65:be:01:ba:44:f2:bc:69:e3:ca:42:
e4:7e:3b:6f:b4:01:d5:c5:32:9d:36:e9:0e:90:e3:56:0b:d6:
63:f2:87:5d:1a:90:88:91:bb:b8:08:a8:78:eb:04:51:fe:fe:
cc:f8:85:41:80:1c:5c:69:46:4c:00:f8:10:93:93:75:e8:5a:
3b:0f:8b:bb:77:e1:9e:c4:04:7e:f6:80:1b:25:2d:c9:13:92:
e3:9d:bf:fa:b0:c2:95:48:1f:88:25:d9:7a:de:a0:cd:35:b2:
73:64:cb:37:2b:3c:0b:62:1c:f5:24:09:ee:36:10:5b:81:e6:
b7:81:47:47:42:f6:3e:1b:e7:cf:3c:38:73:77:0a:b7:70:f3:
50:f1:4d:c8:13:56:d0:87:f6:a6:eb:10:11:03:e1:b8:89:7f:
34:44:87:33:bc:34:a6:68:53:1f:5f:5a:c9:eb:10:ff:e7:d8:
af:ae:ba:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAamgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDAzMDgyMjE0WhcNMjYwNTE3MDgyMjE0WjAYMRYw
FAYDVQQDEw02OWNmNzhiYi1iMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApS48t04LZKaeOxi5D2xsiuFTRxa2IatGDwVOyJTGXIqz7r+ACCdhunIV
TtXAeUESfPBzG4JNCWBrKvHiLkpgcogHKxSnkV+pTiwaaAzjQSZ+WbRStdLLb1sP
BVnsEXalt6relG7OBTSYfJupuuKhOtQmHdLDpJkEaVmrNWxghsHcu2MgcvZzeqqR
4RMNB6TjqXKngunSN+7pQ5NYhqawcNugFADLvAZWQMn484hApkMIJXCO4s6tHbFS
pXcVv6ZJbCpwYgGNKpP/G4IgEk3r6mzDdnssfgALaKUaDZMbJml4IexabosOgv9t
6D+yEyYxhiQR43raQRbebHTiqdhpaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNiu
ztyIhMvVnxH+FojfTs0s8vsXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQURGRThBRTJGMzYxMUYxOTdDRkZGRDVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ7MA0GCSqGSIb3DQEBCwUA
A4IBAQA1+0GrKDsqKmf8HpRV5AdCFdkUyzBh4dNDJwMAgs9BuZbVfrYy50onQdyJ
h/gc8epgheOI4XEzYb4B9FPJmhtGrXAbVLSuKzAdobPK2XwwZb4BukTyvGnjykLk
fjtvtAHVxTKdNukOkONWC9Zj8oddGpCIkbu4CKh46wRR/v7M+IVBgBxcaUZMAPgQ
k5N16Fo7D4u7d+GexAR+9oAbJS3JE5Ljnb/6sMKVSB+IJdl63qDNNbJzZMs3KzwL
Yhz1JAnuNhBbgea3gUdHQvY+G+fPPDhzdwq3cPNQ8U3IE1bQh/am6xARA+G4iX80
RIczvDSmaFMfX1rJ6xD/59ivrrqJ
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:25 2026 by rpki-client