Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE3BDFE071C11F190C6D9C9DAE4EC9C.roa
File: 8FE3BDFE071C11F190C6D9C9DAE4EC9C.roa (raw, json)
Hash identifier: klSCq8Z3/BNdMR6u5RkFjxG2vvxvHS/WNBn3xbQBQdI=
Subject key identifier: 87:3A:17:86:94:0C:3F:04:39:A4:E5:79:C7:D6:78:49:DB:E6:CB:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE3BDFE071C11F190C6D9C9DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 07:37:49 +0000
ROA not before: Wed 11 Feb 2026 07:37:38 +0000
ROA not after: Tue 17 Mar 2026 07:37:38 +0000
asID: 399195
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105693 (0x19cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 07:37:38 2026 GMT
Not After : Mar 17 07:37:38 2026 GMT
Subject: CN=698c31cd-13dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:15:e6:2b:34:bd:80:a8:1f:f5:94:ef:c3:
2a:a8:66:bb:40:dc:8e:63:52:d1:d9:f7:0f:c9:b3:
ad:6c:ae:1a:d0:43:74:5e:88:34:5b:64:4d:ad:ad:
75:3d:2e:95:c8:38:86:88:4b:a8:77:09:17:58:ec:
cb:9b:39:ba:be:27:29:0b:d3:0f:87:13:cd:b7:a0:
fa:77:1b:7b:38:b0:32:d6:c6:c9:8a:04:48:77:89:
aa:ca:bd:8d:5f:10:53:0a:ad:5b:79:84:0d:84:87:
03:0c:d8:03:36:2d:72:ac:73:2b:42:e9:d1:35:88:
c9:c8:6c:8d:88:b9:c6:a0:25:b9:cc:e2:42:1a:ae:
10:bf:c7:5e:3a:71:48:b9:e8:db:76:da:23:d7:a7:
78:06:6e:0c:f6:47:00:a5:d9:bb:42:ea:52:8b:b1:
60:76:91:07:25:fc:f0:87:0f:41:be:72:eb:9a:35:
f5:63:58:1b:be:ef:84:28:7c:70:75:08:41:d0:0e:
72:a9:7c:86:20:af:ce:4d:61:7a:34:32:e5:af:3b:
aa:c5:bb:a7:6d:7c:91:74:9a:18:73:17:02:b3:a9:
2d:58:37:e5:25:cc:8f:2e:62:25:ad:1d:c5:74:65:
81:cb:40:57:12:41:61:1f:07:d9:4c:8f:c9:47:ef:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:17:86:94:0C:3F:04:39:A4:E5:79:C7:D6:78:49:DB:E6:CB:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FE3BDFE071C11F190C6D9C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
66:f4:f0:8e:0f:57:5e:52:c6:aa:b1:78:fc:fa:8c:6e:75:46:
fb:75:b9:74:2a:07:54:9e:59:41:4c:d6:7b:1b:1f:ee:fa:a6:
aa:6e:b1:d0:27:5b:34:db:6b:79:ce:c3:5f:97:a1:2d:d3:43:
27:c8:20:bd:0a:1c:0e:92:af:af:8d:9a:4b:24:33:70:58:0b:
97:d0:47:5c:92:39:9b:e6:ef:d3:b6:6e:58:2d:d7:19:7b:3f:
8e:25:7b:55:66:c2:b6:ec:0e:2a:07:38:4a:8f:d6:7a:de:02:
83:d0:0d:f3:97:04:10:8e:ca:84:f2:b9:11:31:40:bc:17:74:
01:b3:f4:6c:f2:41:e8:c1:94:41:ca:0e:09:41:78:7e:dd:a7:
26:43:f4:76:f6:52:d4:b4:25:8d:db:4c:d8:7e:4d:dd:e3:c6:
a3:94:69:76:3f:4d:5b:5b:d6:60:1f:68:d8:f9:45:3b:13:33:
21:33:4d:c3:46:35:fa:04:2f:c7:b1:af:9b:08:5f:c9:7d:01:
37:f7:26:e4:ca:61:3b:cd:e6:59:6e:37:aa:26:92:b2:3f:1c:
71:30:b2:4e:a0:a6:25:99:ef:b5:be:ae:60:68:41:bd:59:12:
98:e3:8f:ad:7f:cf:16:be:dd:c9:f1:e1:65:3e:57:86:f0:9d:
e7:8e:d4:45
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZzdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjExMDczNzM4WhcNMjYwMzE3MDczNzM4WjAYMRYw
FAYDVQQDEw02OThjMzFjZC0xM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyZMV5is0vYCoH/WU78MqqGa7QNyOY1LR2fcPybOtbK4a0EN0Xog0W2RN
ra11PS6VyDiGiEuodwkXWOzLmzm6vicpC9MPhxPNt6D6dxt7OLAy1sbJigRId4mq
yr2NXxBTCq1beYQNhIcDDNgDNi1yrHMrQunRNYjJyGyNiLnGoCW5zOJCGq4Qv8de
OnFIuejbdtoj16d4Bm4M9kcApdm7QupSi7FgdpEHJfzwhw9BvnLrmjX1Y1gbvu+E
KHxwdQhB0A5yqXyGIK/OTWF6NDLlrzuqxbunbXyRdJoYcxcCs6ktWDflJcyPLmIl
rR3FdGWBy0BXEkFhHwfZTI/JR+9SkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIc6
F4aUDD8EOaTlecfWeEnb5stUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RkUzQkRGRTA3MUMxMUYxOTBDNkQ5QzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcjAMA0GCSqGSIb3DQEBCwUA
A4IBAQBm9PCOD1deUsaqsXj8+oxudUb7dbl0KgdUnllBTNZ7Gx/u+qaqbrHQJ1s0
22t5zsNfl6Et00MnyCC9ChwOkq+vjZpLJDNwWAuX0Edckjmb5u/Ttm5YLdcZez+O
JXtVZsK27A4qBzhKj9Z63gKD0A3zlwQQjsqE8rkRMUC8F3QBs/Rs8kHowZRByg4J
QXh+3acmQ/R29lLUtCWN20zYfk3d48ajlGl2P01bW9ZgH2jY+UU7EzMhM03DRjX6
BC/Hsa+bCF/JfQE39ybkymE7zeZZbjeqJpKyPxxxMLJOoKYlme+1vq5gaEG9WRKY
44+tf88Wvt3J8eFlPleG8J3njtRF
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:47 2026 by rpki-client