Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E2A5544348C11F1965459D4CE1D38B0.roa
File: 7E2A5544348C11F1965459D4CE1D38B0.roa (raw, json)
Hash identifier: lwRDQSb4Jcbezl6Ew3PZCokNLZnfM7TXWl3UjemdGGM=
Subject key identifier: BC:B0:2D:7A:65:27:D4:E3:7D:A3:F3:EB:5E:71:B0:97:48:8D:59:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E2A5544348C11F1965459D4CE1D38B0.roa
Signing time: Fri 10 Apr 2026 03:22:24 +0000
ROA not before: Fri 10 Apr 2026 03:22:20 +0000
ROA not after: Sun 19 Apr 2026 03:22:20 +0000
asID: 9304
IP address blocks: 45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109434 (0x1ab7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 03:22:20 2026 GMT
Not After : Apr 19 03:22:20 2026 GMT
Subject: CN=69d86cf0-88cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:6d:59:a2:dc:d4:de:26:18:7a:ce:01:c5:
7d:19:df:3b:91:de:8e:cd:8c:b5:6f:a4:77:b0:e3:
e0:00:ab:e8:74:79:cb:88:98:96:cc:da:c1:9a:26:
b2:b9:12:e7:03:d2:9a:b7:f8:21:67:07:48:76:b5:
c5:48:b3:bb:0c:61:4c:22:b6:e1:6f:56:58:98:be:
4d:64:6e:cb:0c:fd:7a:04:ec:d5:4a:0c:92:e0:fd:
d1:7e:c9:b4:11:50:a0:ae:cf:2c:91:a4:e0:61:e4:
39:bc:60:28:57:4e:55:0c:f5:9d:34:b2:29:7a:63:
3b:dd:a6:6c:99:06:bb:d7:00:75:65:48:9e:89:25:
66:81:81:3d:4d:f9:fc:0a:ed:80:d9:d5:6b:9a:55:
b1:7c:00:40:83:06:15:cd:2e:68:b3:9e:3c:2d:fb:
cf:79:dd:15:ef:0b:9b:88:03:7c:80:32:a8:0f:60:
f0:49:8d:1a:0f:0f:44:da:15:ee:4b:2a:3c:3e:e8:
36:47:0c:0f:74:8d:aa:7e:d2:1e:d9:97:ac:ad:98:
e0:dc:3b:db:28:9c:bd:e9:98:ef:0b:0b:70:8f:af:
ea:4c:05:44:ab:f7:42:02:17:89:84:60:ce:4b:cf:
ff:a7:e7:c6:9d:96:66:2a:d8:37:1f:14:fb:4a:69:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:2D:7A:65:27:D4:E3:7D:A3:F3:EB:5E:71:B0:97:48:8D:59:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E2A5544348C11F1965459D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.48.0-45.204.53.255
Signature Algorithm: sha256WithRSAEncryption
50:40:72:80:e5:65:5f:8d:1b:34:9e:6b:f3:b9:bb:1e:5a:08:
16:eb:7b:f7:d1:02:3f:46:dd:15:69:f4:f9:ed:91:a7:b0:0f:
be:81:17:7a:5f:5a:fb:9e:fa:21:83:28:65:4d:75:d4:af:4a:
b0:b6:af:29:c6:60:11:54:4f:cb:3d:86:79:08:19:c6:34:61:
ff:9d:09:e0:6a:04:6a:90:38:ac:ad:f3:a9:67:fe:1d:ce:c8:
9b:c0:bb:eb:0f:d9:42:93:97:89:ea:d0:41:67:2c:e1:df:08:
be:88:d0:48:e5:86:a1:53:d3:64:5f:8c:01:4f:d1:bc:7a:87:
14:ce:8b:26:c7:27:94:f0:76:99:cb:bb:7f:e8:7a:52:df:41:
70:51:44:a3:90:5c:4c:ac:fb:b5:4e:e7:cc:0c:1c:56:f6:11:
b7:57:46:8b:6c:a2:86:24:86:fa:51:29:1b:15:ac:8a:7e:cc:
66:bc:81:e5:c5:85:3e:8c:f9:a6:6a:1b:ea:34:5e:9f:34:b2:
11:19:3e:9d:4b:9c:de:3e:e4:6f:67:e2:61:3c:50:ad:22:9d:
67:02:99:50:82:a6:78:45:40:c6:83:8d:8f:68:88:82:5a:87:
11:aa:21:48:04:0b:a8:82:ae:db:89:38:37:02:d9:13:16:90:
80:54:0f:07
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAat6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDEwMDMyMjIwWhcNMjYwNDE5MDMyMjIwWjAYMRYw
FAYDVQQDEw02OWQ4NmNmMC04OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtCBtWaLc1N4mGHrOAcV9Gd87kd6OzYy1b6R3sOPgAKvodHnLiJiWzNrB
miayuRLnA9Kat/ghZwdIdrXFSLO7DGFMIrbhb1ZYmL5NZG7LDP16BOzVSgyS4P3R
fsm0EVCgrs8skaTgYeQ5vGAoV05VDPWdNLIpemM73aZsmQa71wB1ZUieiSVmgYE9
Tfn8Cu2A2dVrmlWxfABAgwYVzS5os548LfvPed0V7wubiAN8gDKoD2DwSY0aDw9E
2hXuSyo8Pug2RwwPdI2qftIe2ZesrZjg3DvbKJy96ZjvCwtwj6/qTAVEq/dCAheJ
hGDOS8//p+fGnZZmKtg3HxT7SmnK+QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLyw
LXplJ9TjfaPz615xsJdIjVmPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RTJBNTU0NDM0OEMxMUYxOTY1NDU5RDRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtzDADBAEtzDQwDQYJKoZI
hvcNAQELBQADggEBAFBAcoDlZV+NGzSea/O5ux5aCBbre/fRAj9G3RVp9Pntkaew
D76BF3pfWvue+iGDKGVNddSvSrC2rynGYBFUT8s9hnkIGcY0Yf+dCeBqBGqQOKyt
86ln/h3OyJvAu+sP2UKTl4nq0EFnLOHfCL6I0EjlhqFT02RfjAFP0bx6hxTOiybH
J5TwdpnLu3/oelLfQXBRRKOQXEys+7VO58wMHFb2EbdXRotsooYkhvpRKRsVrIp+
zGa8geXFhT6M+aZqG+o0Xp80shEZPp1LnN4+5G9n4mE8UK0inWcCmVCCpnhFQMaD
jY9oiIJahxGqIUgEC6iCrtuJODcC2RMWkIBUDwc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:08 2026 by rpki-client