Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8311C54FC3F11F080F29585DAE4EC9C.roa
File: A8311C54FC3F11F080F29585DAE4EC9C.roa (raw, json)
Hash identifier: 0NobG3K4OfDS6CIDYQ0XSRkjDGzcYYJcuHRnLpyU15E=
Subject key identifier: D4:D2:8F:73:C6:CD:B9:34:07:EE:78:13:5D:27:16:A8:20:A8:D7:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8311C54FC3F11F080F29585DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 11:51:19 +0000
ROA not before: Wed 28 Jan 2026 11:51:14 +0000
ROA not after: Fri 19 Feb 2027 11:51:14 +0000
asID: 131618
IP address blocks: 45.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105069 (0x19a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 11:51:14 2026 GMT
Not After : Feb 19 11:51:14 2027 GMT
Subject: CN=6979f837-453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:99:4e:e3:f3:39:6d:15:e2:88:d5:03:86:
46:cb:93:7a:10:21:16:8b:3d:91:eb:ff:79:dd:60:
38:ac:3c:ff:96:d0:55:52:ec:d1:5b:8b:fe:ef:80:
d8:fa:09:68:da:f9:5a:8f:78:42:25:fc:f7:ff:61:
a2:67:48:09:ff:4e:54:c3:ed:52:69:46:b2:64:34:
50:58:56:01:4b:7f:31:00:d5:8d:1b:c0:dd:37:62:
f5:50:1c:dd:ab:1e:e6:73:b7:0a:01:e9:e7:43:12:
37:d7:b5:75:0b:5c:da:f9:cf:5b:0f:9c:5d:80:7b:
c2:eb:d5:bb:04:7a:47:b9:d0:75:d3:47:48:ea:0e:
55:7a:e5:00:99:61:4f:9c:78:83:c6:0a:d4:33:dc:
fb:25:2f:37:cc:c0:11:9b:d4:45:51:9e:ee:dd:f3:
63:ba:22:c6:e3:fa:3f:42:37:14:13:56:75:b6:83:
b2:6e:f2:fd:43:2e:48:de:06:45:0d:ed:3c:74:3e:
5e:db:38:b2:58:a7:1e:b9:05:c9:40:83:27:bf:4d:
b6:a2:fe:28:e6:69:fc:b9:38:88:9d:13:0c:15:94:
28:d8:99:0b:df:bc:07:f0:48:dc:f0:c2:49:76:78:
e0:d2:36:69:3a:c9:99:f5:83:50:90:58:43:19:8c:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:8F:73:C6:CD:B9:34:07:EE:78:13:5D:27:16:A8:20:A8:D7:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8311C54FC3F11F080F29585DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
50:86:f3:c8:d6:45:19:a1:6c:da:ec:78:02:d3:0f:8f:01:61:
6d:ab:35:af:fc:f6:39:a2:41:79:18:46:67:38:25:24:54:f1:
10:45:09:91:c5:13:92:a7:b2:2e:9e:04:db:aa:e2:0c:0e:f0:
6d:68:bb:71:8c:9f:45:67:14:10:8a:6f:ee:a8:b8:2d:14:0b:
94:83:c1:f9:52:f3:b7:6c:36:03:ca:05:16:e6:6c:5c:1f:fb:
b4:e5:8a:1e:23:84:b7:96:f5:88:0d:93:ea:02:26:2a:89:89:
c6:a2:fa:44:6c:68:d8:a4:f8:ae:71:30:b8:42:27:67:7a:91:
72:0b:d9:5b:9a:e2:a7:3c:49:3b:2e:7e:e6:8f:1f:ff:3c:65:
0b:15:d0:40:c0:c4:d0:b5:64:67:b2:d2:c2:b0:c6:a0:f8:b6:
db:1e:fe:43:95:fb:71:cf:66:54:1b:74:62:35:96:2c:1d:1d:
ab:6e:07:c4:ef:85:08:8b:7d:e0:07:1b:fb:d0:ed:9d:0d:4e:
82:fd:e7:33:1d:a6:42:7d:79:8a:b9:f2:3b:90:29:48:f0:cb:
e5:fb:32:4f:13:bb:ec:a4:23:57:2e:a4:ff:58:fa:57:d5:f5:
a0:61:bd:cf:8d:a7:75:52:d5:97:19:cb:ab:f5:0d:27:93:bc:
3b:b4:74:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZptMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI4MTE1MTE0WhcNMjcwMjE5MTE1MTE0WjAYMRYw
FAYDVQQDEw02OTc5ZjgzNy00NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtviZTuPzOW0V4ojVA4ZGy5N6ECEWiz2R6/953WA4rDz/ltBVUuzRW4v+
74DY+glo2vlaj3hCJfz3/2GiZ0gJ/05Uw+1SaUayZDRQWFYBS38xANWNG8DdN2L1
UBzdqx7mc7cKAennQxI317V1C1za+c9bD5xdgHvC69W7BHpHudB100dI6g5VeuUA
mWFPnHiDxgrUM9z7JS83zMARm9RFUZ7u3fNjuiLG4/o/QjcUE1Z1toOybvL9Qy5I
3gZFDe08dD5e2ziyWKceuQXJQIMnv022ov4o5mn8uTiInRMMFZQo2JkL37wH8Ejc
8MJJdnjg0jZpOsmZ9YNQkFhDGYy41wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNTS
j3PGzbk0B+54E10nFqggqNfUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODMxMUM1NEZDM0YxMUYwODBGMjk1ODVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALciEMA0GCSqGSIb3DQEBCwUA
A4IBAQBQhvPI1kUZoWza7HgC0w+PAWFtqzWv/PY5okF5GEZnOCUkVPEQRQmRxROS
p7IungTbquIMDvBtaLtxjJ9FZxQQim/uqLgtFAuUg8H5UvO3bDYDygUW5mxcH/u0
5YoeI4S3lvWIDZPqAiYqiYnGovpEbGjYpPiucTC4QidnepFyC9lbmuKnPEk7Ln7m
jx//PGULFdBAwMTQtWRnstLCsMag+LbbHv5Dlftxz2ZUG3RiNZYsHR2rbgfE74UI
i33gBxv70O2dDU6C/eczHaZCfXmKufI7kClI8Mvl+zJPE7vspCNXLqT/WPpX1fWg
Yb3Pjad1UtWXGcur9Q0nk7w7tHQO
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:53:04 2026 by rpki-client