Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/820B1132019F11F19E978193DAE4EC9C.roa
File: 820B1132019F11F19E978193DAE4EC9C.roa (raw, json)
Hash identifier: 9MVRo0U3bsBNWG/BsQ3aZRfOJQLDXhc9JtDdZXIt2Ys=
Subject key identifier: 66:BA:F7:0E:A1:C8:52:C5:F2:E6:37:03:FB:C8:D4:50:19:D4:5E:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/820B1132019F11F19E978193DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 08:00:02 +0000
ROA not before: Wed 04 Feb 2026 07:59:57 +0000
ROA not after: Thu 12 Mar 2026 07:59:57 +0000
asID: 138915
IP address blocks: 45.197.64.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105409 (0x19bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 4 07:59:57 2026 GMT
Not After : Mar 12 07:59:57 2026 GMT
Subject: CN=6982fc82-d242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:ec:07:b3:29:71:4e:ad:68:ff:fb:55:c6:
0c:19:28:d2:ce:94:62:bf:b0:de:68:97:61:ac:24:
ad:b7:d3:83:37:58:ec:c3:db:74:f8:8e:03:dd:52:
b1:b6:75:88:b0:ec:fb:a3:46:bb:ed:3d:3f:99:a3:
38:cf:e4:c5:0a:cc:3d:61:3f:4b:fb:39:bb:7e:3a:
4d:58:1e:90:41:35:2d:d5:5d:27:42:0e:fd:df:18:
5e:bb:21:1b:9c:cd:39:06:b0:b4:57:f8:f8:71:d8:
31:0d:19:35:b9:45:fa:25:3f:1c:97:03:a0:f1:eb:
9a:dc:3b:fa:e8:cd:29:24:6c:db:50:2c:36:5b:f9:
55:4d:c6:c4:47:13:ac:ed:55:4f:0f:96:0f:e3:68:
d6:d2:f9:d4:f7:09:d8:4c:57:af:10:75:47:b8:97:
4c:aa:c9:98:e7:34:78:a2:30:fa:1c:8b:35:6f:0a:
fc:56:1e:5a:a6:15:cd:cd:5e:fb:1d:f9:69:9c:b0:
40:69:f8:a2:fb:75:ae:18:b6:73:ff:0b:c3:18:b3:
4a:d2:43:b2:de:76:aa:ba:0b:92:61:bc:94:0c:17:
e1:1c:e9:59:69:70:20:81:16:89:c4:46:c3:17:d6:
4d:91:07:b1:ac:5b:95:11:89:01:9b:80:e4:d0:7e:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:F7:0E:A1:C8:52:C5:F2:E6:37:03:FB:C8:D4:50:19:D4:5E:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/820B1132019F11F19E978193DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0/24
45.197.74.0/23
45.197.96.0/23
45.197.106.0/23
Signature Algorithm: sha256WithRSAEncryption
13:37:69:e1:96:c0:61:b4:b2:34:68:70:f2:6a:b5:79:71:ed:
f2:d0:ca:46:ea:a6:39:e7:b7:41:01:26:52:7d:27:db:c6:41:
a7:37:00:e0:27:cf:85:cb:9e:fa:18:42:ce:51:2e:e2:92:33:
d3:b8:b4:d8:ca:3d:80:de:ac:f9:a5:54:06:9c:ff:37:b1:10:
18:70:7f:cb:55:57:af:d6:69:13:ca:f6:d0:99:b4:68:12:8a:
3d:e6:69:c9:16:8d:ab:c0:18:5e:04:e8:39:af:05:4b:93:c7:
78:a5:c3:aa:0a:ce:33:a8:04:15:b3:e7:86:05:4a:d1:70:0f:
46:a4:a8:f7:f7:ad:d5:69:8d:7f:24:6c:75:85:cc:18:38:74:
5d:48:f1:c8:d5:2b:5d:52:27:0b:ef:94:82:25:a3:4b:a2:e7:
02:c3:4c:95:17:a6:01:63:78:44:53:8d:23:e1:09:39:21:94:
8d:1d:b2:5f:8a:fd:92:4c:ca:65:43:d4:c0:0b:4f:20:71:5e:
a8:d5:c7:38:75:4f:4e:d3:d3:43:bc:a9:f0:19:ed:f9:63:cb:
71:61:5f:9e:27:cb:f6:27:33:1a:e2:4a:e5:da:aa:96:18:97:
53:cf:0c:f2:bb:97:f6:57:a6:55:ac:f7:51:99:ee:85:a3:4b:
58:e1:12:40
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAZvBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA0MDc1OTU3WhcNMjYwMzEyMDc1OTU3WjAYMRYw
FAYDVQQDEw02OTgyZmM4Mi1kMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAopTsB7MpcU6taP/7VcYMGSjSzpRiv7DeaJdhrCStt9ODN1jsw9t0+I4D
3VKxtnWIsOz7o0a77T0/maM4z+TFCsw9YT9L+zm7fjpNWB6QQTUt1V0nQg793xhe
uyEbnM05BrC0V/j4cdgxDRk1uUX6JT8clwOg8eua3Dv66M0pJGzbUCw2W/lVTcbE
RxOs7VVPD5YP42jW0vnU9wnYTFevEHVHuJdMqsmY5zR4ojD6HIs1bwr8Vh5aphXN
zV77HflpnLBAafii+3WuGLZz/wvDGLNK0kOy3naquguSYbyUDBfhHOlZaXAggRaJ
xEbDF9ZNkQexrFuVEYkBm4Dk0H5+wQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGa6
9w6hyFLF8uY3A/vI1FAZ1F65MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MjBCMTEzMjAxOUYxMUYxOUU5NzgxOTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALcVAAwQBLcVKAwQBLcVgAwQB
LcVqMA0GCSqGSIb3DQEBCwUAA4IBAQATN2nhlsBhtLI0aHDyarV5ce3y0MpG6qY5
57dBASZSfSfbxkGnNwDgJ8+Fy576GELOUS7ikjPTuLTYyj2A3qz5pVQGnP83sRAY
cH/LVVev1mkTyvbQmbRoEoo95mnJFo2rwBheBOg5rwVLk8d4pcOqCs4zqAQVs+eG
BUrRcA9GpKj3963VaY1/JGx1hcwYOHRdSPHI1StdUicL75SCJaNLoucCw0yVF6YB
Y3hEU40j4Qk5IZSNHbJfiv2STMplQ9TAC08gcV6o1cc4dU9O09NDvKnwGe35Y8tx
YV+eJ8v2JzMa4krl2qqWGJdTzwzyu5f2V6ZVrPdRme6Fo0tY4RJA
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:28 2026 by rpki-client