Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7651DD6C2F3A11F19A3B1BF0DAE4EC9C.roa
File: 7651DD6C2F3A11F19A3B1BF0DAE4EC9C.roa (raw, json)
Hash identifier: rNmgi7Yhv31ny7nsPl3DSNSKqa88HliCz5LHGuDnKWw=
Subject key identifier: D6:DD:79:1C:24:E5:24:23:C6:65:3C:67:37:A2:56:36:2D:4D:29:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7651DD6C2F3A11F19A3B1BF0DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 08:52:37 +0000
ROA not before: Fri 03 Apr 2026 08:52:32 +0000
ROA not after: Sun 17 May 2026 08:52:32 +0000
asID: 272854
IP address blocks: 45.194.52.0/24 maxlen: 24
45.195.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108970 (0x1a9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 08:52:32 2026 GMT
Not After : May 17 08:52:32 2026 GMT
Subject: CN=69cf7fd5-b4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:c2:9a:98:29:57:ec:8d:cd:58:53:63:21:
a1:d1:98:48:b8:84:00:8b:4b:dc:a7:89:7b:31:a0:
d5:07:b9:55:b3:4b:96:8e:20:22:37:e3:0d:f3:39:
25:ab:29:1b:10:8d:d3:3f:02:23:66:f8:dd:bd:64:
aa:a4:55:2e:4f:6d:30:c4:00:93:4f:62:b7:30:bf:
c3:b2:1a:c5:1b:9e:9e:78:01:ba:1c:de:2e:e2:d9:
e1:21:65:a7:4e:d8:f8:a2:af:f3:38:f2:3d:cf:fc:
a4:b7:f5:24:68:17:8d:f6:06:35:1c:e5:ac:0e:03:
56:97:4e:48:2f:9b:85:13:9e:4b:8e:ea:e7:c5:b6:
af:af:31:6f:1f:0e:0f:00:98:a1:7f:6c:c1:b0:ef:
9b:50:e3:85:be:7b:fc:ed:e8:5d:d0:2e:41:22:a0:
6e:17:29:58:e2:50:a7:c5:15:56:54:06:2c:d1:6d:
89:54:fd:d9:e9:a4:65:da:33:6b:b2:a9:06:ce:fa:
c2:8b:8e:f8:db:77:52:94:ed:c7:93:fb:39:71:0e:
ca:27:16:f0:1e:ab:5a:fa:94:93:84:9a:ef:78:37:
eb:fe:e3:68:bf:5b:d6:52:67:0c:21:13:82:7e:ce:
4f:02:fb:25:8b:75:0b:93:d9:2e:ab:21:46:de:d4:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:79:1C:24:E5:24:23:C6:65:3C:67:37:A2:56:36:2D:4D:29:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7651DD6C2F3A11F19A3B1BF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.52.0/24
45.195.12.0/23
Signature Algorithm: sha256WithRSAEncryption
78:da:94:b3:56:fc:da:c1:ba:94:23:ae:d9:7d:57:65:d5:4d:
64:0a:34:5e:c2:63:d9:80:b9:24:07:06:0e:2c:1f:69:cc:ec:
4c:30:97:76:28:01:28:c3:e5:2a:6b:ef:e4:9d:ed:b3:73:df:
99:f9:86:82:02:6c:e5:76:7e:77:74:3e:0f:95:b9:a3:af:ae:
2a:c0:ab:f8:de:60:9b:0d:74:e2:4c:02:34:68:42:b2:3c:f4:
af:f0:18:82:b9:a2:cd:62:d7:d5:f1:1a:81:66:a9:ad:63:94:
7a:9f:40:22:b5:f9:5c:d8:22:57:f6:c4:53:20:e4:99:c5:97:
b3:f4:5b:c4:2e:2c:cf:4e:9a:93:24:df:aa:7c:2f:ea:37:ae:
27:1a:f3:f8:08:c0:00:82:24:bc:18:b3:20:48:08:b3:f2:b1:
0d:0f:ba:43:80:a1:5e:2f:cf:ee:da:f0:c1:f4:9f:02:e1:f5:
dc:df:4d:20:2d:c7:37:28:6a:c6:43:2c:56:02:bf:f2:34:af:
42:a3:7f:69:27:2b:96:5c:19:b4:37:24:3b:16:70:8d:fb:0b:
5f:c7:fe:1c:2e:3a:0a:78:ac:12:be:b4:9b:1c:ee:74:00:60:
31:1f:54:29:26:70:8d:de:d9:9d:30:64:ca:78:f7:6c:60:54:
dd:c5:0d:24
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAamqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDAzMDg1MjMyWhcNMjYwNTE3MDg1MjMyWjAYMRYw
FAYDVQQDEw02OWNmN2ZkNS1iNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArf7CmpgpV+yNzVhTYyGh0ZhIuIQAi0vcp4l7MaDVB7lVs0uWjiAiN+MN
8zklqykbEI3TPwIjZvjdvWSqpFUuT20wxACTT2K3ML/DshrFG56eeAG6HN4u4tnh
IWWnTtj4oq/zOPI9z/ykt/UkaBeN9gY1HOWsDgNWl05IL5uFE55LjurnxbavrzFv
Hw4PAJihf2zBsO+bUOOFvnv87ehd0C5BIqBuFylY4lCnxRVWVAYs0W2JVP3Z6aRl
2jNrsqkGzvrCi47423dSlO3Hk/s5cQ7KJxbwHqta+pSThJrveDfr/uNov1vWUmcM
IROCfs5PAvsli3ULk9kuqyFG3tSk4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbd
eRwk5SQjxmU8ZzeiVjYtTSkvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NjUxREQ2QzJGM0ExMUYxOUEzQjFCRjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcI0AwQBLcMMMA0GCSqGSIb3
DQEBCwUAA4IBAQB42pSzVvzawbqUI67ZfVdl1U1kCjRewmPZgLkkBwYOLB9pzOxM
MJd2KAEow+Uqa+/kne2zc9+Z+YaCAmzldn53dD4Plbmjr64qwKv43mCbDXTiTAI0
aEKyPPSv8BiCuaLNYtfV8RqBZqmtY5R6n0Aitflc2CJX9sRTIOSZxZez9FvELizP
TpqTJN+qfC/qN64nGvP4CMAAgiS8GLMgSAiz8rEND7pDgKFeL8/u2vDB9J8C4fXc
300gLcc3KGrGQyxWAr/yNK9Co39pJyuWXBm0NyQ7FnCN+wtfx/4cLjoKeKwSvrSb
HO50AGAxH1QpJnCN3tmdMGTKePdsYFTdxQ0k
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:47 2026 by rpki-client