Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD675C6C13C111F1BD37027DDAE4EC9C.roa
File: AD675C6C13C111F1BD37027DDAE4EC9C.roa (raw, json)
Hash identifier: V3sRCj2VAb9ihBr5MKFKdn08Bi9puDdOKEshjnacrVg=
Subject key identifier: 15:9B:5A:F5:B6:CE:62:B1:1A:3F:55:D4:83:F9:1F:EF:B6:18:2D:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A120
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD675C6C13C111F1BD37027DDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 09:49:59 +0000
ROA not before: Fri 27 Feb 2026 09:49:53 +0000
ROA not after: Thu 02 Apr 2026 09:49:53 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106784 (0x1a120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 09:49:53 2026 GMT
Not After : Apr 2 09:49:53 2026 GMT
Subject: CN=69a168c6-8212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:03:72:b5:27:9b:5a:17:95:8a:93:e1:89:5e:
48:cd:eb:83:e6:37:08:fc:73:44:b0:21:64:24:15:
2b:16:b5:27:ca:36:a6:a7:19:8a:41:24:52:9d:46:
4e:c6:87:1f:01:5d:4c:32:94:50:58:e4:d0:fd:61:
38:16:70:04:c9:99:0c:6f:72:74:ba:4e:69:da:ae:
44:fa:3a:9f:0b:04:11:30:e5:14:e4:5f:2d:c3:bb:
6e:e8:40:4e:8d:06:61:d2:30:10:8c:03:69:0f:90:
e8:7a:ae:bb:10:0a:f4:97:f7:3d:ce:17:5e:99:3f:
ee:c9:6a:0a:ed:d7:39:0c:ca:b6:87:84:c6:38:02:
21:49:7a:50:e7:c7:e7:df:eb:d4:f4:65:27:30:63:
ea:7b:8c:3f:dd:c8:b4:86:f7:ab:96:e2:1c:b1:8d:
a5:cf:c9:03:c4:ae:30:68:fd:b7:35:90:2c:bc:ba:
68:ca:c1:24:10:94:1e:75:51:c4:f0:6c:38:64:5a:
39:ef:aa:52:85:e0:26:4e:73:92:bb:3d:45:91:ed:
2d:a4:62:ef:98:0a:96:b3:ff:7b:74:be:f6:be:80:
78:ae:93:93:b0:6f:e7:64:f0:eb:29:db:2b:42:c6:
e9:62:9f:48:6c:d7:f3:ae:f4:57:f0:b6:51:2a:34:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9B:5A:F5:B6:CE:62:B1:1A:3F:55:D4:83:F9:1F:EF:B6:18:2D:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD675C6C13C111F1BD37027DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5a:f0:95:26:bb:b6:fd:11:ed:49:e2:ef:6e:95:9b:45:0c:
54:1a:36:bc:9a:38:86:33:83:c1:b3:d0:a8:bf:1f:e3:2b:3b:
18:72:a6:ef:0e:7b:59:00:05:33:9c:12:13:b2:d4:d0:73:34:
32:05:e5:97:21:0c:c6:f3:da:e9:eb:9e:bf:89:3c:af:fc:36:
5f:a7:f5:d2:23:00:63:4b:56:e3:29:f8:a2:92:ff:d6:40:1c:
9a:b9:48:65:cb:15:b0:e6:76:36:6f:62:ac:a8:9b:1b:02:8a:
f3:cf:92:ed:fc:f8:fb:ca:37:e4:78:0f:93:d0:4d:2a:03:cc:
93:00:d4:0e:1e:3c:06:f6:13:4d:c6:5e:b6:e5:2c:82:54:47:
1a:5b:2c:02:f6:63:86:b8:46:e5:b2:1b:6c:03:f2:10:f8:6f:
56:6d:45:0c:d8:17:3c:46:72:9f:48:6b:6b:11:cc:fd:82:0a:
de:61:1b:5d:d3:46:43:68:4c:3f:e2:8d:0c:95:63:bf:f2:54:
08:d5:9a:a0:b8:95:c0:10:ed:76:0a:fc:10:cd:19:a2:8a:11:
fc:c5:2a:41:21:6a:ee:ba:af:56:31:9a:39:82:29:3c:c7:a4:
5a:ff:73:f0:bd:eb:1f:93:ae:01:85:b6:03:2a:1d:2a:50:44:
7f:4a:1e:a9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaEgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI3MDk0OTUzWhcNMjYwNDAyMDk0OTUzWjAYMRYw
FAYDVQQDEw02OWExNjhjNi04MjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6ANytSebWheVipPhiV5IzeuD5jcI/HNEsCFkJBUrFrUnyjampxmKQSRS
nUZOxocfAV1MMpRQWOTQ/WE4FnAEyZkMb3J0uk5p2q5E+jqfCwQRMOUU5F8tw7tu
6EBOjQZh0jAQjANpD5Doeq67EAr0l/c9zhdemT/uyWoK7dc5DMq2h4TGOAIhSXpQ
58fn3+vU9GUnMGPqe4w/3ci0hverluIcsY2lz8kDxK4waP23NZAsvLpoysEkEJQe
dVHE8Gw4ZFo576pSheAmTnOSuz1Fke0tpGLvmAqWs/97dL72voB4rpOTsG/nZPDr
KdsrQsbpYp9IbNfzrvRX8LZRKjQDkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBWb
WvW2zmKxGj9V1IP5H++2GC2HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDY3NUM2QzEzQzExMUYxQkQzNzAyN0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpLMA0GCSqGSIb3DQEBCwUA
A4IBAQBSWvCVJru2/RHtSeLvbpWbRQxUGja8mjiGM4PBs9Covx/jKzsYcqbvDntZ
AAUznBITstTQczQyBeWXIQzG89rp656/iTyv/DZfp/XSIwBjS1bjKfiikv/WQBya
uUhlyxWw5nY2b2KsqJsbAorzz5Lt/Pj7yjfkeA+T0E0qA8yTANQOHjwG9hNNxl62
5SyCVEcaWywC9mOGuEblshtsA/IQ+G9WbUUM2Bc8RnKfSGtrEcz9ggreYRtd00ZD
aEw/4o0MlWO/8lQI1ZqguJXAEO12CvwQzRmiihH8xSpBIWruuq9WMZo5gik8x6Ra
/3Pwvesfk64BhbYDKh0qUER/Sh6p
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:57 2026 by rpki-client