Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0814FA6132111F18A08CD9FDAE4EC9C.roa
File: C0814FA6132111F18A08CD9FDAE4EC9C.roa (raw, json)
Hash identifier: SllGREPWK27/2DPFufdBA9EuQ1X6a/fFqXlN4pdpSbo=
Subject key identifier: B3:65:8B:FB:93:67:D6:55:32:79:BA:A4:2E:B9:85:48:63:23:73:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0814FA6132111F18A08CD9FDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 14:45:11 +0000
ROA not before: Thu 26 Feb 2026 14:45:06 +0000
ROA not after: Thu 09 Apr 2026 14:45:06 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106713 (0x1a0d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 14:45:06 2026 GMT
Not After : Apr 9 14:45:06 2026 GMT
Subject: CN=69a05c77-da00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:32:2f:eb:80:d9:fc:4c:07:c3:bd:79:97:
4c:33:64:98:ad:fa:c0:fa:fc:25:e9:e3:c0:ed:7a:
c3:38:99:48:50:23:2a:e2:40:ae:9c:c6:b9:3c:ee:
b3:6c:cf:54:43:85:1c:9c:63:70:2d:9e:a7:26:17:
a5:bf:92:a1:43:d8:e0:d9:66:bc:60:ee:40:67:66:
8e:ff:e4:a5:08:f9:28:22:21:5b:74:d0:6c:d1:16:
a4:60:8c:e9:1c:67:f0:9b:d0:3b:cb:c0:5d:9c:71:
d2:db:ec:0e:ca:fc:1b:a8:04:9b:f7:70:f4:6a:29:
70:37:01:58:14:b1:41:66:c2:8d:fe:b8:bf:4d:46:
10:80:10:59:89:e3:31:33:5f:86:91:3e:d5:7a:7a:
fd:c3:d2:e1:74:08:f6:13:41:de:4b:e2:3a:5a:d5:
70:32:09:80:84:cc:46:ff:12:14:ea:0d:1c:f9:49:
55:4c:42:12:f3:1c:b4:ea:b0:8c:4d:4c:de:f1:a9:
49:6f:c3:51:8d:ca:ee:8a:fe:1e:da:16:c5:43:99:
02:a9:ab:d1:ae:a7:1b:d0:51:7e:fb:71:d8:ed:c3:
04:4c:c7:6f:e3:f1:ad:35:8c:06:cd:76:6e:21:f2:
f3:e7:2e:fd:9d:64:ab:d2:83:af:f5:8e:73:6b:94:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:65:8B:FB:93:67:D6:55:32:79:BA:A4:2E:B9:85:48:63:23:73:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0814FA6132111F18A08CD9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:db:06:fd:92:c4:ce:7d:9c:e8:05:a4:48:72:9c:7d:2d:8e:
a4:07:2e:db:b3:7e:c0:11:98:a4:79:8f:0e:f7:91:6d:45:81:
73:93:45:2c:e8:e1:a8:cb:0a:6e:91:21:34:b4:14:44:52:c5:
8c:3a:0f:0d:06:ab:c7:4e:de:4f:70:b4:a7:4f:e8:2d:4e:16:
7f:9c:b1:fd:2c:89:09:1e:e2:2b:67:fd:e4:2b:ac:cb:0a:e2:
99:49:30:64:b6:fc:52:b0:d9:f7:b5:9d:f6:1b:2b:e9:68:45:
13:51:67:3c:20:2e:c7:92:f3:fb:c9:18:00:b9:a8:d2:52:08:
7c:81:7e:8f:bf:10:0a:8a:6b:4b:da:65:95:b1:bf:91:56:5c:
bd:ff:83:bc:36:69:9b:41:4e:ac:7e:3f:c8:67:f7:bc:85:40:
34:5e:ed:9a:5c:2a:eb:ea:36:3f:a1:56:8c:5c:6c:38:cb:66:
30:00:88:f4:92:dd:a1:db:2e:0b:dd:18:08:41:5e:97:52:36:
67:ac:7a:5a:5a:8f:02:a3:b6:fd:3b:03:0f:b9:f1:26:5e:ae:
19:c5:0a:21:5b:fe:7d:d6:a2:a2:3e:b8:a4:aa:ef:83:8e:3e:
f9:5b:7a:6d:d8:66:de:85:f5:25:74:1a:f3:df:cd:70:d6:72:
46:d4:67:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaDZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI2MTQ0NTA2WhcNMjYwNDA5MTQ0NTA2WjAYMRYw
FAYDVQQDEw02OWEwNWM3Ny1kYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp3oyL+uA2fxMB8O9eZdMM2SYrfrA+vwl6ePA7XrDOJlIUCMq4kCunMa5
PO6zbM9UQ4UcnGNwLZ6nJhelv5KhQ9jg2Wa8YO5AZ2aO/+SlCPkoIiFbdNBs0Rak
YIzpHGfwm9A7y8BdnHHS2+wOyvwbqASb93D0ailwNwFYFLFBZsKN/ri/TUYQgBBZ
ieMxM1+GkT7Venr9w9LhdAj2E0HeS+I6WtVwMgmAhMxG/xIU6g0c+UlVTEIS8xy0
6rCMTUze8alJb8NRjcruiv4e2hbFQ5kCqavRrqcb0FF++3HY7cMETMdv4/GtNYwG
zXZuIfLz5y79nWSr0oOv9Y5za5S7ZwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLNl
i/uTZ9ZVMnm6pC65hUhjI3P5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMDgxNEZBNjEzMjExMUYxOEEwOENEOUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLckMMA0GCSqGSIb3DQEBCwUA
A4IBAQBr2wb9ksTOfZzoBaRIcpx9LY6kBy7bs37AEZikeY8O95FtRYFzk0Us6OGo
ywpukSE0tBREUsWMOg8NBqvHTt5PcLSnT+gtThZ/nLH9LIkJHuIrZ/3kK6zLCuKZ
STBktvxSsNn3tZ32GyvpaEUTUWc8IC7HkvP7yRgAuajSUgh8gX6PvxAKimtL2mWV
sb+RVly9/4O8NmmbQU6sfj/IZ/e8hUA0Xu2aXCrr6jY/oVaMXGw4y2YwAIj0kt2h
2y4L3RgIQV6XUjZnrHpaWo8Co7b9OwMPufEmXq4ZxQohW/591qKiPrikqu+Djj75
W3pt2GbehfUldBrz381w1nJG1Gd+
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:06 2026 by rpki-client