Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9282860F0411F1A0EF76E3DAE4EC9C.roa
File: 3B9282860F0411F1A0EF76E3DAE4EC9C.roa (raw, json)
Hash identifier: 1gPPaRheStXUu/g+jYr/Vxuy8eP/y/9LHkaR/7u93JM=
Subject key identifier: 93:9A:59:1B:9C:B3:15:D7:FD:24:0B:02:AA:79:EA:FB:3A:EE:C8:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9282860F0411F1A0EF76E3DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:03:48 +0000
ROA not before: Sat 21 Feb 2026 09:03:43 +0000
ROA not after: Sat 28 Mar 2026 09:03:43 +0000
asID: 202656
IP address blocks: 45.199.255.0/24 maxlen: 24
45.200.160.0/24 maxlen: 24
45.200.161.0/24 maxlen: 24
45.200.162.0/24 maxlen: 24
45.200.163.0/24 maxlen: 24
45.200.164.0/24 maxlen: 24
45.200.165.0/24 maxlen: 24
45.200.166.0/24 maxlen: 24
45.200.167.0/24 maxlen: 24
45.200.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106304 (0x19f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:03:43 2026 GMT
Not After : Mar 28 09:03:43 2026 GMT
Subject: CN=699974f4-d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:d7:f8:0f:26:65:d8:82:08:81:84:eb:ab:
93:29:ea:5b:88:5d:4f:a6:84:e3:bf:0a:ec:3e:7a:
d0:1c:7b:4b:91:c9:ce:1d:4d:06:9a:59:ca:ea:f7:
0b:eb:17:cc:bd:44:39:6a:6b:d0:35:be:b3:a2:3f:
9b:1d:6a:c4:55:5a:25:f9:de:9b:49:f3:b1:d5:75:
bd:85:5f:14:02:38:71:83:9a:63:90:3a:34:00:ce:
a2:e4:f2:4b:eb:b4:20:a5:ee:a8:4b:59:f6:bc:df:
40:28:e1:1d:df:95:fc:4b:1f:32:12:a3:5b:ee:96:
c5:a5:fe:a8:34:68:a4:35:da:aa:de:ec:ff:f7:cc:
53:80:cc:00:77:f1:c0:60:ac:03:bd:70:f4:ae:5e:
b0:4d:8e:84:1b:a8:d3:7b:60:40:e3:1f:8e:3a:d6:
e3:88:fb:dd:4c:48:af:f6:4e:09:27:67:01:d5:00:
aa:17:42:32:90:a8:06:15:4a:11:4c:f1:5b:14:83:
01:54:98:8a:13:35:3a:4e:ae:41:47:ef:35:ec:cd:
ec:92:4f:92:2f:6f:8c:55:20:90:06:5f:3a:d2:00:
0a:c7:9a:0b:73:24:68:9b:30:61:4f:c2:61:9c:40:
6a:2c:b5:82:f5:ce:8f:61:00:53:c8:d5:5d:93:ef:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:59:1B:9C:B3:15:D7:FD:24:0B:02:AA:79:EA:FB:3A:EE:C8:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9282860F0411F1A0EF76E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.255.0/24
45.200.160.0-45.200.168.255
Signature Algorithm: sha256WithRSAEncryption
b3:25:df:8b:68:d0:87:27:c5:44:a2:b5:d6:00:0b:0d:31:d4:
ae:7d:59:a3:48:f4:eb:e4:ed:db:f0:8d:09:eb:d5:98:7a:af:
dc:a9:00:93:2d:c0:7f:cb:8e:54:58:b8:21:a3:6f:18:62:70:
b8:9e:73:29:e1:8e:d9:cf:06:af:f1:53:0e:fd:53:09:55:2c:
1a:78:b9:9e:31:3b:47:16:72:53:5e:83:48:c0:09:24:42:83:
40:2b:02:d5:e0:7c:dd:01:dc:04:c4:1f:f2:4a:70:52:33:ca:
a5:54:31:66:60:05:8c:67:d9:25:5b:46:de:44:cf:49:b0:3a:
ad:68:82:05:08:24:c4:ff:88:c5:53:9c:c8:14:94:ac:58:8e:
2f:ff:1d:44:77:af:22:ae:99:0f:ed:f2:30:98:ec:66:c8:68:
2a:81:48:ea:67:33:1c:8e:eb:6c:63:0e:db:4d:5b:38:e1:c0:
a6:af:81:59:c2:44:bb:38:92:ac:de:5b:89:47:db:57:ef:e7:
e7:31:dd:19:b1:0f:96:7f:5c:86:54:e6:d1:da:3e:1a:4a:87:
9c:64:79:6a:0e:d0:8d:6f:7a:24:c1:b9:0f:b6:8d:31:a6:13:
35:95:bf:4a:24:cf:34:31:3f:f9:87:e3:b1:b6:c0:f5:9d:e7:
22:36:87:97
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAZ9AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMDkwMzQzWhcNMjYwMzI4MDkwMzQzWjAYMRYw
FAYDVQQDEw02OTk5NzRmNC1kOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr7XX+A8mZdiCCIGE66uTKepbiF1PpoTjvwrsPnrQHHtLkcnOHU0GmlnK
6vcL6xfMvUQ5amvQNb6zoj+bHWrEVVol+d6bSfOx1XW9hV8UAjhxg5pjkDo0AM6i
5PJL67Qgpe6oS1n2vN9AKOEd35X8Sx8yEqNb7pbFpf6oNGikNdqq3uz/98xTgMwA
d/HAYKwDvXD0rl6wTY6EG6jTe2BA4x+OOtbjiPvdTEiv9k4JJ2cB1QCqF0IykKgG
FUoRTPFbFIMBVJiKEzU6Tq5BR+817M3skk+SL2+MVSCQBl860gAKx5oLcyRomzBh
T8JhnEBqLLWC9c6PYQBTyNVdk+9T8QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJOa
WRucsxXX/SQLAqp56vs67siZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjkyODI4NjBGMDQxMUYxQTBFRjc2RTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALcf/MAwDBAUtyKADBAAtyKgw
DQYJKoZIhvcNAQELBQADggEBALMl34to0IcnxUSitdYACw0x1K59WaNI9Ovk7dvw
jQnr1Zh6r9ypAJMtwH/LjlRYuCGjbxhicLiecynhjtnPBq/xUw79UwlVLBp4uZ4x
O0cWclNeg0jACSRCg0ArAtXgfN0B3ATEH/JKcFIzyqVUMWZgBYxn2SVbRt5Ez0mw
Oq1oggUIJMT/iMVTnMgUlKxYji//HUR3ryKumQ/t8jCY7GbIaCqBSOpnMxyO62xj
DttNWzjhwKavgVnCRLs4kqzeW4lH21fv5+cx3RmxD5Z/XIZU5tHaPhpKh5xkeWoO
0I1veiTBuQ+2jTGmEzWVv0okzzQxP/mH47G2wPWd5yI2h5c=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:45 2026 by rpki-client