Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6CCF9C073811F1A78A00F1DAE4EC9C.roa
File: 3B6CCF9C073811F1A78A00F1DAE4EC9C.roa (raw, json)
Hash identifier: lbyIM+XuWXuJd+NMCUtM9zG1SdjSE4DYMSDjdT4noL8=
Subject key identifier: 68:9F:8D:97:8F:51:31:42:68:89:F1:4F:1C:76:F0:E5:5D:A0:22:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6CCF9C073811F1A78A00F1DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 10:55:52 +0000
ROA not before: Wed 11 Feb 2026 10:55:48 +0000
ROA not after: Tue 17 Mar 2026 10:55:48 +0000
asID: 273908
IP address blocks: 45.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105739 (0x19d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 10:55:48 2026 GMT
Not After : Mar 17 10:55:48 2026 GMT
Subject: CN=698c6038-43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:f5:f3:49:f5:70:26:08:3c:8c:06:3c:c6:
88:46:2c:c4:cc:f1:39:2c:80:50:d0:61:d5:8b:f0:
dc:04:1f:84:65:c8:7d:07:92:ea:54:f3:49:43:2b:
e3:81:d0:e1:6e:f4:d7:2a:bd:29:51:d9:92:54:c8:
07:48:78:37:d2:83:bc:e9:34:b9:ee:3d:eb:9b:53:
79:26:e6:7b:fc:ef:79:ec:bb:1f:0e:63:ea:6d:b5:
35:7a:44:71:87:f5:ad:38:b6:86:8b:ec:c7:ef:75:
18:20:69:f9:22:58:71:d0:ed:91:03:b7:5a:82:23:
3b:70:9d:9d:13:d0:88:8d:4d:90:59:99:f0:18:e5:
98:9e:54:c3:12:33:9d:52:14:1c:78:27:ac:52:45:
1b:b9:df:3d:e9:32:3f:f4:a3:9a:0a:5a:e1:e9:a5:
3a:18:e4:b8:2b:c5:9d:c9:b8:65:8d:7b:07:88:c4:
2e:f4:ce:39:65:81:36:ce:d1:d0:69:f4:15:00:9b:
df:17:6a:e1:d5:b5:80:42:34:9f:bc:a3:e8:a4:5f:
85:83:a2:12:cd:6d:01:30:56:88:d5:13:d3:34:16:
d5:a9:ca:5c:a9:6b:18:e7:de:7c:f0:a3:5b:07:a5:
26:8e:7a:5b:f4:48:e3:dd:51:5d:09:17:e8:35:37:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9F:8D:97:8F:51:31:42:68:89:F1:4F:1C:76:F0:E5:5D:A0:22:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6CCF9C073811F1A78A00F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bd:63:90:c5:ae:64:38:f7:57:b7:0d:9f:b2:44:4c:a1:13:
58:20:21:b4:25:12:62:c4:b6:59:df:8e:a2:29:9a:b8:f4:6a:
99:ce:20:b4:fa:40:07:a9:77:8d:71:2a:53:0a:2b:3c:a8:b3:
ec:1c:86:93:e6:5b:03:6e:93:95:1b:57:39:0a:8e:36:6f:1b:
6c:8a:f0:7b:91:fb:79:10:45:88:d3:7d:91:b7:a7:9b:cd:cd:
3a:09:60:8c:09:51:77:3f:f3:f9:83:af:07:75:2c:39:70:0b:
59:a3:b0:3a:c1:a3:10:1f:32:c5:de:dc:5c:0a:db:bd:db:88:
58:f9:85:06:d8:26:0a:04:4b:fd:68:7c:9d:f1:50:6d:a4:0c:
f5:c1:98:b1:71:5b:fa:bb:18:41:ed:8a:37:47:df:0e:4e:ba:
97:54:45:47:96:fd:00:c6:11:d2:94:55:e4:36:50:ab:89:e8:
09:92:be:46:f5:46:89:9b:d1:f8:01:4d:c7:26:8e:3e:53:c3:
4c:11:5e:a9:50:32:32:68:81:7e:f2:1b:93:cd:db:a7:f3:7e:
6e:77:3c:5d:81:f0:ca:b7:8d:a5:a9:08:04:12:b8:2d:0c:30:
c4:9c:a2:a6:84:87:37:eb:a9:61:50:bf:10:0a:a8:ca:8d:59:
4d:2e:2a:fd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ0LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjExMTA1NTQ4WhcNMjYwMzE3MTA1NTQ4WjAYMRYw
FAYDVQQDEw02OThjNjAzOC00M2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwx7180n1cCYIPIwGPMaIRizEzPE5LIBQ0GHVi/DcBB+EZch9B5LqVPNJ
QyvjgdDhbvTXKr0pUdmSVMgHSHg30oO86TS57j3rm1N5JuZ7/O957LsfDmPqbbU1
ekRxh/WtOLaGi+zH73UYIGn5Ilhx0O2RA7dagiM7cJ2dE9CIjU2QWZnwGOWYnlTD
EjOdUhQceCesUkUbud896TI/9KOaClrh6aU6GOS4K8WdybhljXsHiMQu9M45ZYE2
ztHQafQVAJvfF2rh1bWAQjSfvKPopF+Fg6ISzW0BMFaI1RPTNBbVqcpcqWsY5958
8KNbB6Umjnpb9Ejj3VFdCRfoNTdPNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGif
jZePUTFCaInxTxx28OVdoCLeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjZDQ0Y5QzA3MzgxMUYxQTc4QTAwRjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJFMA0GCSqGSIb3DQEBCwUA
A4IBAQBJvWOQxa5kOPdXtw2fskRMoRNYICG0JRJixLZZ346iKZq49GqZziC0+kAH
qXeNcSpTCis8qLPsHIaT5lsDbpOVG1c5Co42bxtsivB7kft5EEWI032Rt6ebzc06
CWCMCVF3P/P5g68HdSw5cAtZo7A6waMQHzLF3txcCtu924hY+YUG2CYKBEv9aHyd
8VBtpAz1wZixcVv6uxhB7Yo3R98OTrqXVEVHlv0AxhHSlFXkNlCriegJkr5G9UaJ
m9H4AU3HJo4+U8NMEV6pUDIyaIF+8huTzdun835udzxdgfDKt42lqQgEErgtDDDE
nKKmhIc366lhUL8QCqjKjVlNLir9
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:45 2026 by rpki-client