Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B21B8EAA0F0B11F19B346E92DAE4EC9C.roa
File: B21B8EAA0F0B11F19B346E92DAE4EC9C.roa (raw, json)
Hash identifier: PHM9Zv8wjIoPVL/bVNDzECzWuImLOfNDROE5OfSskmo=
Subject key identifier: A7:BF:33:70:38:87:C7:BA:C1:1A:32:7F:06:88:0A:61:A3:18:1D:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B21B8EAA0F0B11F19B346E92DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:57:13 +0000
ROA not before: Sat 21 Feb 2026 09:57:09 +0000
ROA not after: Sat 28 Mar 2026 09:57:09 +0000
asID: 44559
IP address blocks: 45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106331 (0x19f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:57:09 2026 GMT
Not After : Mar 28 09:57:09 2026 GMT
Subject: CN=69998179-191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:e5:17:16:62:cf:f5:0d:c9:1f:a8:43:91:
b6:b2:81:8d:7d:0a:f2:20:96:ae:0c:b9:48:92:fb:
6b:7b:36:3d:c2:73:99:11:d1:bf:bb:fd:4a:7b:34:
b8:b7:3d:af:44:e9:93:47:be:f2:cb:fa:2e:b5:e7:
1a:3a:69:10:c9:b9:62:de:2c:41:d2:9d:16:1a:60:
d4:28:e9:5e:06:6e:7a:f0:79:d0:fa:aa:fb:c0:3f:
d9:4e:e3:49:35:3b:d3:a7:7f:3b:09:56:97:e2:30:
b6:0e:24:7c:f9:25:1a:ca:a3:37:71:cd:b9:e0:da:
70:03:84:11:28:66:03:b0:fb:9b:49:23:3a:f2:b1:
0b:97:83:56:fd:81:84:b5:ec:ce:79:79:b2:5e:a4:
61:1c:ca:5f:af:db:99:87:e7:0b:5b:28:53:6f:83:
54:ed:5b:7f:2f:70:cf:68:59:4c:64:fa:cf:6d:4e:
a6:b9:96:03:f7:26:1c:8f:4d:45:63:d1:4a:ca:77:
01:d4:79:51:28:bd:c4:b6:c0:bd:5f:71:de:81:ee:
75:cd:dd:47:fd:25:6b:68:b4:ea:95:e2:76:af:4a:
38:bc:3e:5d:ee:0e:7c:bb:62:5a:ec:07:bf:6d:39:
6d:f5:9b:c5:5e:f9:28:54:b6:82:c5:2d:07:c1:23:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:33:70:38:87:C7:BA:C1:1A:32:7F:06:88:0A:61:A3:18:1D:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B21B8EAA0F0B11F19B346E92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.207.0-45.199.208.255
45.199.231.0-45.199.240.255
45.199.246.0-45.199.248.255
45.199.251.0/24
45.199.253.0-45.199.254.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
41:93:9f:12:d3:6c:4a:5f:c7:43:9e:a3:1f:c1:7c:32:3e:ab:
b0:5f:02:9b:1d:7e:53:18:b2:de:c8:5f:42:7e:3a:d6:d4:61:
b0:26:42:ef:2c:4b:fd:dc:80:fe:9d:70:93:58:4e:dd:3a:a9:
55:fe:f1:23:10:09:ea:6c:c0:9e:87:8a:ec:96:d1:bb:fc:9c:
89:3e:80:53:c7:40:bc:a3:41:76:fa:71:70:79:a6:99:de:84:
ba:2c:6e:de:29:d8:74:57:77:1b:25:be:9a:8e:43:db:82:f0:
8f:b4:56:d7:77:56:06:78:fe:22:55:27:46:ad:fe:44:78:77:
08:8a:47:c7:c9:ef:b1:5d:6a:31:80:7d:df:9c:a7:c3:cc:dd:
67:65:ca:2b:de:f4:d1:b9:25:37:3e:ee:54:5d:4a:ba:87:bc:
34:0a:d9:61:6d:9d:32:47:04:4c:f1:66:2e:e7:30:bc:79:08:
a3:96:32:79:c3:03:5a:46:17:3d:c8:8c:cf:89:bd:55:1d:ee:
1b:2f:84:2f:ca:25:81:13:ff:fc:3a:d5:ba:21:89:5c:d2:42:
d9:27:aa:d2:28:8c:d3:de:32:27:07:f4:86:c6:2b:b3:ca:a9:
12:6f:49:45:33:2a:e1:39:dc:ed:2f:a3:07:57:e6:91:82:81:
66:d0:0d:9c
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIDAZ9bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMDk1NzA5WhcNMjYwMzI4MDk1NzA5WjAYMRYw
FAYDVQQDEw02OTk5ODE3OS0xOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4FvlFxZiz/UNyR+oQ5G2soGNfQryIJauDLlIkvtrezY9wnOZEdG/u/1K
ezS4tz2vROmTR77yy/outecaOmkQybli3ixB0p0WGmDUKOleBm568HnQ+qr7wD/Z
TuNJNTvTp387CVaX4jC2DiR8+SUayqM3cc254NpwA4QRKGYDsPubSSM68rELl4NW
/YGEtezOeXmyXqRhHMpfr9uZh+cLWyhTb4NU7Vt/L3DPaFlMZPrPbU6muZYD9yYc
j01FY9FKyncB1HlRKL3EtsC9X3Hege51zd1H/SVraLTqleJ2r0o4vD5d7g58u2Ja
7Ae/bTlt9ZvFXvkoVLaCxS0HwSNTSwIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFKe/
M3A4h8e6wRoyfwaICmGjGB1wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjFCOEVBQTBGMEIxMUYxOUIzNDZFOTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBAAtx88DBAAtx9AwDAMEAC3H
5wMEAC3H8DAMAwQBLcf2AwQALcf4AwQALcf7MAwDBAAtx/0DBAAtx/4wDAMEAC3I
swMEAC3ItDANBgkqhkiG9w0BAQsFAAOCAQEAQZOfEtNsSl/HQ56jH8F8Mj6rsF8C
mx1+Uxiy3shfQn461tRhsCZC7yxL/dyA/p1wk1hO3TqpVf7xIxAJ6mzAnoeK7JbR
u/yciT6AU8dAvKNBdvpxcHmmmd6Euixu3inYdFd3GyW+mo5D24Lwj7RW13dWBnj+
IlUnRq3+RHh3CIpHx8nvsV1qMYB935ynw8zdZ2XKK9700bklNz7uVF1Kuoe8NArZ
YW2dMkcETPFmLucwvHkIo5YyecMDWkYXPciMz4m9VR3uGy+EL8olgRP//DrVuiGJ
XNJC2Seq0iiM094yJwf0hsYrs8qpEm9JRTMq4Tnc7S+jB1fmkYKBZtANnA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:20 2026 by rpki-client