Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2EE7562AD911F1A65DA198DAE4EC9C.roa
File: 4C2EE7562AD911F1A65DA198DAE4EC9C.roa (raw, json)
Hash identifier: Z51Dmuj9cDTETULxVSzO02bc9Mb+AkZMNls1gBu0MKk=
Subject key identifier: B1:76:29:DA:45:F7:28:CE:C2:98:C4:FE:8C:D1:1D:4E:4A:C6:B3:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A846
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2EE7562AD911F1A65DA198DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:07:00 +0000
ROA not before: Sat 28 Mar 2026 19:06:55 +0000
ROA not after: Tue 12 May 2026 19:06:55 +0000
asID: 53808
IP address blocks: 45.207.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108614 (0x1a846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 19:06:55 2026 GMT
Not After : May 12 19:06:55 2026 GMT
Subject: CN=69c826d4-c5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:5b:a2:3a:73:34:20:28:d9:cd:31:80:98:
97:1a:6b:a5:34:3e:af:bc:c5:3b:16:2a:ca:71:ee:
db:f9:e2:2d:fe:2e:cc:13:e9:27:e7:24:bd:4c:3e:
11:92:4e:ad:e8:b9:c3:50:74:a3:83:44:03:6b:f5:
62:92:a7:a2:ad:38:2d:39:58:5d:31:7b:b1:c6:c9:
5b:0f:ce:53:11:88:08:99:43:75:67:14:2c:54:06:
ba:e0:8c:2f:7a:46:27:a4:19:59:e8:5b:a8:f6:8b:
01:b4:ae:e4:ad:c7:6c:90:7c:a9:0b:d1:b0:73:39:
19:b8:f4:59:99:77:70:a1:d5:28:73:e0:9e:15:46:
fc:b4:e6:67:78:70:b2:57:5b:e6:b9:29:47:e1:03:
68:f5:23:e6:88:cc:aa:67:91:8e:e5:59:67:0c:79:
f4:1d:c4:1a:0c:3d:1d:31:e4:b2:9a:40:93:7a:ea:
7c:8c:9e:07:0f:6a:3c:18:f8:ee:43:35:dd:d4:1c:
b0:1a:d8:33:d6:f6:50:34:31:4e:ac:91:bf:0d:d5:
89:6e:f6:95:38:75:14:b8:89:57:c3:fb:13:e9:49:
76:c0:75:00:11:be:b0:25:d4:7c:08:6f:db:fa:b3:
a0:8f:31:a0:bf:d2:a1:ea:dd:b8:fe:6e:dc:c2:68:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:29:DA:45:F7:28:CE:C2:98:C4:FE:8C:D1:1D:4E:4A:C6:B3:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2EE7562AD911F1A65DA198DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/21
Signature Algorithm: sha256WithRSAEncryption
47:ee:13:28:9c:6e:3e:27:ae:2b:79:9b:2f:ad:1b:85:a0:a7:
b1:f6:4c:e3:91:cd:1f:41:a4:2d:6f:b2:ec:59:f3:2f:1f:7d:
03:1d:c4:3a:b5:ef:2f:dd:fa:29:50:72:69:d3:52:28:00:02:
d2:c4:c4:a4:b5:ce:ca:43:39:f8:71:ed:49:86:2b:0f:9b:0f:
77:8f:d8:d9:9a:32:5e:e6:09:b2:bd:e5:5a:3c:5b:1e:85:2b:
65:12:9d:61:07:66:59:57:99:e4:1a:67:19:02:13:e0:49:9c:
df:7f:a7:91:31:8c:f0:bb:91:4d:29:0d:d7:6e:7b:62:fd:49:
d0:15:19:6b:1a:c4:3a:fa:81:b8:ef:dc:7e:1d:66:07:f2:8b:
fa:f5:6f:5a:10:2a:f1:29:4e:2d:cc:14:2a:1c:ba:f0:b4:92:
68:7b:9f:f3:60:59:ce:7f:ca:98:a9:a7:4e:1d:dc:a7:59:f0:
2e:ec:ba:13:b2:90:cb:af:f9:4f:f2:62:60:7a:ac:10:56:eb:
c1:fb:e2:dc:4f:ea:55:8b:f3:c7:fd:98:98:a9:9a:d9:fd:05:
1b:21:76:ff:81:05:85:29:c7:e9:2d:88:d4:b1:0e:9a:06:5f:
09:16:0e:89:60:a7:cb:59:db:43:8a:e8:89:23:2e:72:cb:77:
1e:f2:df:12
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAahGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI4MTkwNjU1WhcNMjYwNTEyMTkwNjU1WjAYMRYw
FAYDVQQDEw02OWM4MjZkNC1jNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvp1bojpzNCAo2c0xgJiXGmulND6vvMU7FirKce7b+eIt/i7ME+kn5yS9
TD4Rkk6t6LnDUHSjg0QDa/VikqeirTgtOVhdMXuxxslbD85TEYgImUN1ZxQsVAa6
4IwvekYnpBlZ6Fuo9osBtK7krcdskHypC9GwczkZuPRZmXdwodUoc+CeFUb8tOZn
eHCyV1vmuSlH4QNo9SPmiMyqZ5GO5VlnDHn0HcQaDD0dMeSymkCTeup8jJ4HD2o8
GPjuQzXd1BywGtgz1vZQNDFOrJG/DdWJbvaVOHUUuIlXw/sT6Ul2wHUAEb6wJdR8
CG/b+rOgjzGgv9Kh6t24/m7cwmgazwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLF2
KdpF9yjOwpjE/ozRHU5KxrNRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QzJFRTc1NjJBRDkxMUYxQTY1REExOThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLc/YMA0GCSqGSIb3DQEBCwUA
A4IBAQBH7hMonG4+J64reZsvrRuFoKex9kzjkc0fQaQtb7LsWfMvH30DHcQ6te8v
3fopUHJp01IoAALSxMSktc7KQzn4ce1JhisPmw93j9jZmjJe5gmyveVaPFsehStl
Ep1hB2ZZV5nkGmcZAhPgSZzff6eRMYzwu5FNKQ3Xbnti/UnQFRlrGsQ6+oG479x+
HWYH8ov69W9aECrxKU4tzBQqHLrwtJJoe5/zYFnOf8qYqadOHdynWfAu7LoTspDL
r/lP8mJgeqwQVuvB++LcT+pVi/PH/ZiYqZrZ/QUbIXb/gQWFKcfpLYjUsQ6aBl8J
Fg6JYKfLWdtDiuiJIy5yy3ce8t8S
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:22 2026 by rpki-client