Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A940534E0D8D11F1BBC106E2DAE4EC9C.roa
File: A940534E0D8D11F1BBC106E2DAE4EC9C.roa (raw, json)
Hash identifier: EgSNnRpTvrr3rxT3A9A8Y0K16L0LZiYzMOSxnIatmuU=
Subject key identifier: 1F:04:98:32:E4:35:CB:C2:CC:44:71:90:EC:77:6C:D9:BD:98:D2:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019ECD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A940534E0D8D11F1BBC106E2DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 12:22:31 +0000
ROA not before: Thu 19 Feb 2026 12:22:26 +0000
ROA not after: Thu 25 Feb 2027 12:22:26 +0000
asID: 140224
IP address blocks: 45.192.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106189 (0x19ecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 19 12:22:26 2026 GMT
Not After : Feb 25 12:22:26 2027 GMT
Subject: CN=69970087-65de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:40:19:9a:bd:c6:83:66:63:c8:97:93:0b:
e3:81:7c:36:f3:9c:94:a8:08:63:1f:de:ee:b4:eb:
f0:bd:95:dc:4c:62:c2:16:f9:c0:7c:e4:31:58:f8:
65:4f:30:94:ce:fb:89:dc:13:74:8c:66:c9:02:af:
2c:82:8f:2b:f2:4f:56:0a:85:6c:b9:9e:0e:1a:86:
b4:11:b0:16:e6:d0:9c:3d:13:ab:b7:b2:ef:6a:49:
20:d1:cb:da:18:bc:12:1a:5f:3f:67:01:ee:5c:3d:
9e:a3:fe:e4:ce:39:0d:69:69:50:8e:67:6d:c9:69:
a3:42:ce:01:c4:e8:2c:f4:2f:01:ad:c9:e3:c9:fc:
ef:fb:01:07:5c:df:e4:5a:c2:a2:2b:65:7c:e7:31:
59:22:73:2c:70:14:f7:21:80:8d:6d:c3:6e:d3:13:
9a:69:5a:55:c4:b4:b0:49:75:e5:8d:82:d3:0d:28:
b8:98:c3:ad:e3:25:94:6e:4a:80:1d:b8:22:a7:a6:
38:2d:20:f7:fe:21:a2:a7:2c:21:5a:e9:14:4e:76:
08:4e:a4:89:78:12:02:e1:1a:53:23:38:8a:8e:ab:
49:ad:f1:cb:4d:22:de:e0:b2:07:87:24:98:4f:b7:
cb:f5:65:c9:d3:d0:8c:bf:41:05:07:5c:10:f5:ce:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:04:98:32:E4:35:CB:C2:CC:44:71:90:EC:77:6C:D9:BD:98:D2:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A940534E0D8D11F1BBC106E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4b:62:8d:5e:6a:c1:3f:90:08:f6:7a:90:f4:8b:36:9f:45:
90:7a:d6:be:0e:e1:f7:91:6b:f7:e1:73:01:82:c8:38:74:a5:
f0:48:ac:7e:ce:78:59:00:43:2c:c9:cf:74:69:5b:58:06:c1:
8a:10:35:f5:6e:fa:59:43:60:ec:48:d8:ad:e2:9a:ad:0a:b3:
b9:3f:e8:85:51:fa:8e:2c:fd:35:e8:86:ab:5e:99:15:0b:a4:
ce:de:6f:4e:6b:2c:e2:ee:b8:a8:3c:38:94:a2:1a:3f:9f:5f:
a2:82:d5:5e:26:91:ab:2c:d4:9a:cd:3b:1c:26:e1:da:e4:70:
41:e3:91:ca:c8:b7:86:63:98:39:08:d0:05:28:fd:42:c0:6c:
d6:ca:d7:48:57:9a:d7:1f:8d:49:c5:d9:c2:6e:83:96:d4:0a:
fc:a2:a9:f1:3a:b7:b3:3f:d3:86:08:99:ab:18:25:62:31:f5:
4f:56:ad:e5:87:1f:72:dd:c3:c8:f0:52:7e:a4:48:6c:95:90:
e7:06:ab:1d:0c:71:0a:97:92:9d:99:ba:8b:48:bd:0e:bc:78:
68:84:ed:07:a5:a0:cc:cd:98:12:6f:59:ae:db:a5:f3:e2:d6:
15:cd:91:1d:18:d2:8b:5a:9b:58:4b:58:d7:b3:1a:d2:cc:42:
fd:46:28:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ7NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE5MTIyMjI2WhcNMjcwMjI1MTIyMjI2WjAYMRYw
FAYDVQQDEw02OTk3MDA4Ny02NWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzg9AGZq9xoNmY8iXkwvjgXw285yUqAhjH97utOvwvZXcTGLCFvnAfOQx
WPhlTzCUzvuJ3BN0jGbJAq8sgo8r8k9WCoVsuZ4OGoa0EbAW5tCcPROrt7Lvakkg
0cvaGLwSGl8/ZwHuXD2eo/7kzjkNaWlQjmdtyWmjQs4BxOgs9C8Brcnjyfzv+wEH
XN/kWsKiK2V85zFZInMscBT3IYCNbcNu0xOaaVpVxLSwSXXljYLTDSi4mMOt4yWU
bkqAHbgip6Y4LSD3/iGipywhWukUTnYITqSJeBIC4RpTIziKjqtJrfHLTSLe4LIH
hySYT7fL9WXJ09CMv0EFB1wQ9c7EvwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB8E
mDLkNcvCzERxkOx3bNm9mNJXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOTQwNTM0RTBEOEQxMUYxQkJDMTA2RTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcARMA0GCSqGSIb3DQEBCwUA
A4IBAQA6S2KNXmrBP5AI9nqQ9Is2n0WQeta+DuH3kWv34XMBgsg4dKXwSKx+znhZ
AEMsyc90aVtYBsGKEDX1bvpZQ2DsSNit4pqtCrO5P+iFUfqOLP016IarXpkVC6TO
3m9Oayzi7rioPDiUoho/n1+igtVeJpGrLNSazTscJuHa5HBB45HKyLeGY5g5CNAF
KP1CwGzWytdIV5rXH41JxdnCboOW1Ar8oqnxOrezP9OGCJmrGCViMfVPVq3lhx9y
3cPI8FJ+pEhslZDnBqsdDHEKl5KdmbqLSL0OvHhohO0HpaDMzZgSb1mu26Xz4tYV
zZEdGNKLWptYS1jXsxrSzEL9RijB
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:41 2026 by rpki-client