Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD173F8834C911F1A7CAF1D0CE1D38B0.roa
File: AD173F8834C911F1A7CAF1D0CE1D38B0.roa (raw, json)
Hash identifier: Z2ICVFWhYH5crlK/SigFzJ/skQaR2dp/IhT3Nj/xwnY=
Subject key identifier: F8:BF:85:D4:F4:90:39:31:14:22:02:52:85:45:2C:DA:9C:D4:B1:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD173F8834C911F1A7CAF1D0CE1D38B0.roa
Signing time: Fri 10 Apr 2026 10:40:22 +0000
ROA not before: Fri 10 Apr 2026 10:40:18 +0000
ROA not after: Sun 10 May 2026 10:40:18 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109478 (0x1aba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 10:40:18 2026 GMT
Not After : May 10 10:40:18 2026 GMT
Subject: CN=69d8d396-5140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:db:a9:1d:68:02:4a:2d:c0:ae:2e:a0:5d:
1a:0e:4b:9c:6f:67:71:38:ae:63:0e:5e:83:44:41:
60:f2:bc:35:24:3c:25:b2:7f:b2:55:7e:94:a2:6f:
40:88:6c:05:94:8f:76:87:94:74:63:91:f7:a1:fc:
1e:1d:44:e4:57:96:37:a8:ee:e7:d1:09:0d:c6:9f:
40:eb:57:ed:1a:00:75:bd:fc:56:9a:6b:60:03:3d:
2f:d9:06:e3:2a:e4:3b:ed:ea:0e:e1:63:a9:15:47:
d5:13:49:e5:66:f8:e7:6c:15:6c:ef:1c:a9:9c:fb:
c2:83:0b:53:b5:e7:b8:06:17:49:64:a3:91:1e:b5:
e4:f3:a0:b8:8b:57:bb:a0:db:a6:97:52:d4:60:3b:
dd:b9:b7:88:d5:a4:0a:ce:21:09:1e:66:a5:94:20:
bd:8c:65:e5:89:70:62:a3:6c:93:7f:bf:9b:34:b3:
97:5c:cd:d8:93:d2:cb:14:2a:8e:50:c9:95:d6:6c:
3d:11:73:d3:92:b8:97:6f:1e:c3:f5:82:eb:cb:3c:
5d:ed:60:74:d2:e1:22:ea:22:94:11:47:bf:4e:b3:
b3:5a:8d:27:08:53:b2:ac:20:50:c6:32:11:5e:bd:
63:6e:74:ee:56:59:48:fe:31:67:98:54:cf:3d:5f:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:85:D4:F4:90:39:31:14:22:02:52:85:45:2C:DA:9C:D4:B1:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD173F8834C911F1A7CAF1D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:08:73:ae:fb:68:83:27:a4:10:79:6a:31:a8:2e:8a:31:1f:
5f:d3:35:09:93:89:a7:49:8c:07:0b:88:de:78:05:d8:a3:e2:
a0:3a:f8:ee:90:79:a8:76:57:f2:5a:f6:7d:c3:91:d7:44:f7:
08:2f:3d:2c:21:d8:fd:16:46:21:95:6e:04:91:32:85:9c:0e:
86:ef:1b:61:8b:16:c0:ad:4a:6e:47:47:a2:48:f3:23:83:1a:
18:9f:33:09:86:40:28:f6:ce:b9:7a:2a:eb:61:44:4e:ce:d5:
27:61:8f:87:67:79:d2:f4:74:0b:a6:61:92:e4:cf:5f:98:da:
54:58:eb:54:2f:82:52:63:4a:a5:52:2a:54:ee:ee:e6:63:2a:
9f:e3:42:dd:5e:74:ad:39:10:28:a2:43:04:f8:bb:c3:78:b3:
47:61:63:09:97:74:41:4e:c6:81:35:79:f7:9f:52:5c:08:bf:
9e:45:31:18:f4:5b:6b:ca:96:3f:72:fe:30:29:23:e4:67:06:
ee:7f:14:78:c4:81:74:68:de:66:37:86:59:a0:6e:64:48:61:
9a:26:44:a3:41:35:9e:f6:51:f4:64:05:d0:71:de:c1:c1:57:
6c:22:af:45:92:16:ff:3d:0f:3f:db:66:ec:f4:b3:99:af:50:
b9:16:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:38 2026 by rpki-client