Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BB126433FD11F1A8EFFF12CF1D38B0.roa
File: 54BB126433FD11F1A8EFFF12CF1D38B0.roa (raw, json)
Hash identifier: eMUFllAk44wV+5uKSD+5S5DhaO+qfGk5KYbK+NK06bs=
Subject key identifier: 96:07:B2:25:08:92:66:B1:7D:FC:E3:FE:C4:5B:48:DC:2E:C6:D6:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BB126433FD11F1A8EFFF12CF1D38B0.roa
Signing time: Thu 09 Apr 2026 10:17:37 +0000
ROA not before: Thu 09 Apr 2026 10:17:32 +0000
ROA not after: Sun 19 Apr 2026 10:17:32 +0000
asID: 214143
IP address blocks: 45.195.3.0/24 maxlen: 24
45.197.135.0/24 maxlen: 24
45.198.69.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.81.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.198.89.0/24 maxlen: 24
45.198.90.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.104.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.112.0/24 maxlen: 24
45.198.138.0/24 maxlen: 24
45.198.163.0/24 maxlen: 24
45.198.168.0/24 maxlen: 24
45.198.176.0/24 maxlen: 24
45.198.181.0/24 maxlen: 24
45.206.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 10:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109374 (0x1ab3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 10:17:32 2026 GMT
Not After : Apr 19 10:17:32 2026 GMT
Subject: CN=69d77cc1-f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:35:5d:bc:57:d8:19:e5:6e:f6:eb:34:54:
e5:d1:2f:25:bc:a4:a5:45:8d:c1:0a:9e:9e:52:6b:
8a:e1:c6:f4:6f:e0:95:ff:9a:fd:13:13:79:07:d6:
f6:8f:f2:62:e1:aa:80:5c:81:d7:9c:3c:17:8c:3b:
c0:a4:83:f2:1c:28:fb:07:d4:b1:3b:af:a9:b0:2a:
c0:cf:03:d0:d6:36:a5:8c:81:a6:d9:48:55:f5:83:
6a:7d:af:76:24:ba:67:0e:54:aa:fb:6a:65:5a:63:
d5:8c:07:bc:c6:4a:5e:99:be:f2:32:97:c4:80:36:
e3:84:3e:fd:db:a6:e0:b1:84:b3:d7:30:75:fa:9f:
c4:e5:b2:8b:5b:06:a8:14:21:03:a8:84:60:68:23:
19:37:98:42:b3:7d:02:77:b4:cb:ed:92:f1:9c:a8:
a5:f8:65:8e:6b:10:3f:b9:f8:80:69:c7:65:e7:b3:
fc:5e:47:75:35:bb:4f:96:26:cc:de:7c:b0:9e:cc:
c3:b1:42:6b:16:0b:3c:77:8a:1a:88:15:af:f7:c8:
e6:31:8e:a3:08:e4:a4:a6:12:0d:81:33:a5:73:9e:
b8:38:13:0a:8b:3d:1e:16:ec:35:67:0e:5e:07:b6:
11:12:bc:83:8f:3e:42:97:a0:7f:ae:d3:80:f4:eb:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:B2:25:08:92:66:B1:7D:FC:E3:FE:C4:5B:48:DC:2E:C6:D6:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BB126433FD11F1A8EFFF12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
45.197.135.0/24
45.198.69.0/24
45.198.75.0/24
45.198.81.0/24
45.198.84.0/24
45.198.86.0/24
45.198.89.0-45.198.90.255
45.198.97.0/24
45.198.104.0/24
45.198.109.0/24
45.198.112.0/24
45.198.138.0/24
45.198.163.0/24
45.198.168.0/24
45.198.176.0/24
45.198.181.0/24
45.206.44.0/23
Signature Algorithm: sha256WithRSAEncryption
78:51:16:69:95:04:ee:d2:e8:7c:bd:77:6d:41:dc:0a:cd:b4:
9e:47:7d:f8:f9:26:17:98:fd:b9:8d:72:51:63:05:a0:04:9a:
d1:a2:65:d1:67:86:f0:5a:35:e1:22:94:26:69:a1:04:58:da:
90:f2:30:f2:a6:ce:51:98:95:cd:b1:1e:d7:28:ea:45:3b:e7:
6d:b6:de:7c:f0:bf:a2:c5:6b:27:d1:12:ed:ae:e7:aa:41:88:
82:7b:c8:89:18:40:28:df:93:c6:9a:1a:a4:f9:95:f2:dd:c2:
27:92:c1:cb:9c:d7:50:d6:a9:10:d1:a8:41:72:c6:a8:0c:ef:
58:99:fe:53:5e:23:d4:c4:d3:70:0f:2a:8d:e1:9e:6c:e7:a2:
7b:3b:9b:24:85:b1:89:48:76:9e:bb:82:6b:0a:22:82:82:00:
d6:67:e8:51:9b:8a:48:a7:54:88:86:63:9a:f7:f6:0d:89:bf:
75:2d:6a:00:b4:e9:f2:3e:0c:31:cc:b4:c4:0f:68:76:8a:27:
84:a3:06:c8:76:2b:90:6a:4c:aa:97:ad:9a:e4:e8:87:00:91:
b1:25:42:ca:c9:93:51:b8:ca:b8:de:b8:6f:fb:be:e1:ca:b3:
1c:40:97:2b:a6:bf:fa:de:ca:11:84:26:17:cf:9f:ba:d1:c6:
b0:95:c7:31
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgIDAas+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA5MTAxNzMyWhcNMjYwNDE5MTAxNzMyWjAYMRYw
FAYDVQQDEw02OWQ3N2NjMS1mNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApjA1XbxX2BnlbvbrNFTl0S8lvKSlRY3BCp6eUmuK4cb0b+CV/5r9ExN5
B9b2j/Ji4aqAXIHXnDwXjDvApIPyHCj7B9SxO6+psCrAzwPQ1jaljIGm2UhV9YNq
fa92JLpnDlSq+2plWmPVjAe8xkpemb7yMpfEgDbjhD7926bgsYSz1zB1+p/E5bKL
WwaoFCEDqIRgaCMZN5hCs30Cd7TL7ZLxnKil+GWOaxA/ufiAacdl57P8Xkd1NbtP
libM3nywnszDsUJrFgs8d4oaiBWv98jmMY6jCOSkphINgTOlc564OBMKiz0eFuw1
Zw5eB7YREryDjz5Cl6B/rtOA9OthfwIDAQABo4IDETCCAw0wHQYDVR0OBBYEFJYH
siUIkmaxffzj/sRbSNwuxtYaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NEJCMTI2NDMzRkQxMUYxQThFRkZGMTJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAC3DAwMEAC3FhwMEAC3GRQME
AC3GSwMEAC3GUQMEAC3GVAMEAC3GVjAMAwQALcZZAwQALcZaAwQALcZhAwQALcZo
AwQALcZtAwQALcZwAwQALcaKAwQALcajAwQALcaoAwQALcawAwQALca1AwQBLc4s
MA0GCSqGSIb3DQEBCwUAA4IBAQB4URZplQTu0uh8vXdtQdwKzbSeR334+SYXmP25
jXJRYwWgBJrRomXRZ4bwWjXhIpQmaaEEWNqQ8jDyps5RmJXNsR7XKOpFO+dttt58
8L+ixWsn0RLtrueqQYiCe8iJGEAo35PGmhqk+ZXy3cInksHLnNdQ1qkQ0ahBcsao
DO9Ymf5TXiPUxNNwDyqN4Z5s56J7O5skhbGJSHaeu4JrCiKCggDWZ+hRm4pIp1SI
hmOa9/YNib91LWoAtOnyPgwxzLTED2h2iieEowbIdiuQakyql62a5OiHAJGxJULK
yZNRuMq43rhv+77hyrMcQJcrpr/63soRhCYXz5+60cawlccx
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:39 2026 by rpki-client