Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/925B9EE20E3511F185A2C1EFDAE4EC9C.roa
File: 925B9EE20E3511F185A2C1EFDAE4EC9C.roa (raw, json)
Hash identifier: sACupoWqllzmmOYJKlBHnChDbiISNGoT5myHaGFXDl4=
Subject key identifier: 1A:F3:7D:8F:F5:05:AD:8E:1E:7E:50:88:C5:9A:3B:F9:0F:4E:AC:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019ED4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/925B9EE20E3511F185A2C1EFDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 08:24:28 +0000
ROA not before: Fri 20 Feb 2026 08:24:22 +0000
ROA not after: Thu 19 Mar 2026 08:24:22 +0000
asID: 11404
IP address blocks: 45.195.0.0/24 maxlen: 24
45.195.84.0/22 maxlen: 24
45.196.92.0/22 maxlen: 24
45.197.200.0/21 maxlen: 24
45.197.224.0/21 maxlen: 24
45.200.144.0/20 maxlen: 24
45.202.16.0/20 maxlen: 24
45.204.32.0/20 maxlen: 24
45.205.176.0/20 maxlen: 24
45.205.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106196 (0x19ed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 08:24:22 2026 GMT
Not After : Mar 19 08:24:22 2026 GMT
Subject: CN=69981a3c-3c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:66:a6:0f:71:9b:d7:fc:43:40:47:4c:0d:
02:d4:0f:1d:82:05:8b:42:24:2f:db:b4:d3:35:be:
03:52:9c:3a:20:ad:15:64:2d:f6:d5:d6:00:56:c8:
f9:40:d9:6c:d5:5c:cb:f7:56:b0:ab:e8:07:c7:3e:
7d:b3:6a:80:24:17:27:b7:f4:f3:ce:f8:e4:89:6a:
54:b9:43:4b:34:59:3d:44:82:50:4c:d8:b1:03:82:
38:74:c0:c6:fc:d2:3b:24:de:3e:c7:17:9a:77:1c:
7c:27:e2:cb:a4:4d:71:47:aa:9a:dd:38:2e:c6:3c:
54:5a:9f:d6:cb:d6:54:6f:30:1d:de:cc:2c:be:eb:
ed:d7:47:b7:97:b4:4d:1e:d9:ed:cd:8b:7b:65:c2:
d8:34:74:e5:e8:07:ce:de:61:c9:2f:09:7f:a6:c5:
a5:2e:d7:92:2f:94:4c:7c:6e:57:7d:ae:3e:ff:19:
f6:b7:97:f9:0b:67:4b:b9:f3:b7:b2:d4:c9:91:0d:
80:92:87:43:3b:5b:fd:aa:f4:95:ba:25:1d:ee:35:
d0:5b:3d:89:2c:08:11:3c:c1:38:86:13:10:40:92:
b1:db:ec:f9:0b:c9:67:3b:99:a2:ce:61:69:e1:c9:
64:83:10:e7:1b:82:60:1a:07:ce:3a:dc:b1:34:0d:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:7D:8F:F5:05:AD:8E:1E:7E:50:88:C5:9A:3B:F9:0F:4E:AC:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/925B9EE20E3511F185A2C1EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.0.0/24
45.195.84.0/22
45.196.92.0/22
45.197.200.0/21
45.197.224.0/21
45.200.144.0/20
45.202.16.0/20
45.204.32.0/20
45.205.176.0/20
45.205.240.0/20
Signature Algorithm: sha256WithRSAEncryption
76:bc:5b:ca:38:7b:84:22:ae:4e:a5:58:7a:e2:47:37:f1:f5:
dc:27:e5:0e:73:a3:0f:19:9d:21:a1:83:ee:64:f4:b3:fa:3b:
63:d2:3b:15:63:19:5e:20:3e:4e:74:f2:f7:ea:ab:22:a6:c1:
89:93:d7:df:fd:d4:63:4c:5d:43:7e:05:e9:c8:72:90:b8:1d:
a7:83:c4:23:fa:85:7e:50:21:cd:5c:7a:4e:c6:0f:cd:d7:70:
08:ff:4b:3c:c7:30:d6:3b:a1:61:76:30:4a:3d:e6:94:6a:5a:
d9:d7:0a:3e:d7:f6:f6:16:33:45:52:bb:17:2f:bf:8b:bd:41:
73:2b:3a:a2:3b:d4:94:9c:6b:29:a6:c7:84:64:38:a0:c0:6d:
07:96:7d:ea:02:8e:ad:14:1d:05:72:b9:d1:cf:4a:48:11:9e:
0b:cf:87:28:d3:c7:74:f2:a0:02:a0:54:21:bb:76:d8:c5:2b:
ac:8a:da:67:82:c8:23:32:e1:e0:14:d5:9a:13:fc:bd:70:25:
28:9d:08:12:41:df:64:de:41:f6:0c:f5:4d:15:79:01:a5:7f:
84:32:93:f8:1c:eb:f7:09:2e:25:ee:e7:df:fb:d4:9d:f7:98:
3c:6a:1c:14:97:1d:e8:03:43:4e:e8:10:b2:74:6e:8f:1e:05:
11:a0:36:9d
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAZ7UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIwMDgyNDIyWhcNMjYwMzE5MDgyNDIyWjAYMRYw
FAYDVQQDEw02OTk4MWEzYy0zYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzeRmpg9xm9f8Q0BHTA0C1A8dggWLQiQv27TTNb4DUpw6IK0VZC321dYA
Vsj5QNls1VzL91awq+gHxz59s2qAJBcnt/TzzvjkiWpUuUNLNFk9RIJQTNixA4I4
dMDG/NI7JN4+xxeadxx8J+LLpE1xR6qa3TguxjxUWp/Wy9ZUbzAd3swsvuvt10e3
l7RNHtntzYt7ZcLYNHTl6AfO3mHJLwl/psWlLteSL5RMfG5Xfa4+/xn2t5f5C2dL
ufO3stTJkQ2AkodDO1v9qvSVuiUd7jXQWz2JLAgRPME4hhMQQJKx2+z5C8lnO5mi
zmFp4clkgxDnG4JgGgfOOtyxNA19BwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFBrz
fY/1Ba2OHn5QiMWaO/kPTqyhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjVCOUVFMjBFMzUxMUYxODVBMkMxRUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALcMAAwQCLcNUAwQCLcRcAwQD
LcXIAwQDLcXgAwQELciQAwQELcoQAwQELcwgAwQELc2wAwQELc3wMA0GCSqGSIb3
DQEBCwUAA4IBAQB2vFvKOHuEIq5OpVh64kc38fXcJ+UOc6MPGZ0hoYPuZPSz+jtj
0jsVYxleID5OdPL36qsipsGJk9ff/dRjTF1DfgXpyHKQuB2ng8Qj+oV+UCHNXHpO
xg/N13AI/0s8xzDWO6FhdjBKPeaUalrZ1wo+1/b2FjNFUrsXL7+LvUFzKzqiO9SU
nGsppseEZDigwG0Hln3qAo6tFB0FcrnRz0pIEZ4Lz4co08d08qACoFQhu3bYxSus
itpngsgjMuHgFNWaE/y9cCUonQgSQd9k3kH2DPVNFXkBpX+EMpP4HOv3CS4l7uff
+9Sd95g8ahwUlx3oA0NO6BCydG6PHgURoDad
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:43 2026 by rpki-client