Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF169E182E8D11F19225ED78DAE4EC9C.roa
File: CF169E182E8D11F19225ED78DAE4EC9C.roa (raw, json)
Hash identifier: z9uGkt0+4Vsj408uxPa/Ce7glkizjTz8bWbt7klBWHc=
Subject key identifier: 7E:70:CE:44:CE:EE:CF:12:0F:40:3B:55:A7:AF:74:CE:91:29:B1:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A93F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF169E182E8D11F19225ED78DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 12:16:43 +0000
ROA not before: Thu 02 Apr 2026 12:16:38 +0000
ROA not after: Sat 09 May 2026 12:16:38 +0000
asID: 48031
IP address blocks: 45.204.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108863 (0x1a93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 12:16:38 2026 GMT
Not After : May 9 12:16:38 2026 GMT
Subject: CN=69ce5e2b-70af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:6e:0d:a8:10:f0:b1:f5:f4:76:0b:3d:e7:
fd:bc:3e:00:a9:b6:8d:12:38:c4:e6:f9:a5:ed:f6:
ca:2d:0f:5f:0b:3a:cb:43:3a:46:62:05:61:0b:b1:
28:4f:b2:5f:88:b3:75:6b:6e:37:53:44:2d:7f:4e:
be:df:f1:ad:90:35:7e:48:12:bf:52:f6:f9:3c:db:
60:e4:f1:d5:60:90:d5:8d:a9:15:f6:f1:bc:2b:51:
88:bb:fe:90:1b:62:92:88:64:a6:18:a3:37:d4:c5:
7d:22:da:3c:34:23:c9:80:4e:96:ed:7a:bc:69:53:
a9:8d:a0:f2:39:bb:8a:ec:1e:87:13:97:34:4b:4c:
43:e2:ad:e5:e7:2d:09:51:1c:8f:e7:1e:d7:28:ca:
4b:03:61:65:a7:d8:42:5f:d1:41:ed:86:13:9e:07:
62:11:d7:46:6c:8e:be:0f:f7:38:4f:ee:01:b7:63:
a5:19:7d:a6:dd:53:9a:07:32:36:38:ae:8f:84:a8:
8e:48:ea:70:f0:e8:23:5f:44:61:90:7f:e3:6b:f6:
75:5c:46:9e:6d:9c:31:91:25:12:cd:ae:50:b3:47:
10:fa:63:aa:fe:39:21:18:7d:82:14:e6:5f:50:07:
21:ad:0b:60:be:ed:c5:17:b4:c5:da:37:29:7a:10:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:CE:44:CE:EE:CF:12:0F:40:3B:55:A7:AF:74:CE:91:29:B1:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF169E182E8D11F19225ED78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:db:39:78:bc:3a:ce:bb:be:b5:5c:96:ac:8b:1f:ad:2a:7a:
93:47:e7:8f:6d:60:4c:7e:bd:e5:66:16:83:dd:7a:35:ac:87:
a3:81:1e:a5:a0:f1:e6:71:80:2e:c1:3f:70:3c:82:59:50:49:
3a:67:0e:bc:f7:42:f4:ad:23:7d:d7:38:70:d5:ae:0b:c9:52:
2e:25:55:d7:16:5c:84:d3:9b:bd:54:c8:b5:c3:18:92:e0:83:
38:b3:46:5e:1d:45:f1:23:3f:3c:6d:6a:bf:75:0e:45:c1:85:
c2:4a:52:17:ce:c7:93:35:78:05:34:ef:cb:f3:ef:42:a0:fb:
88:5d:63:c8:ea:53:76:bd:6a:4e:9c:33:2c:09:85:3d:87:3e:
87:6f:bb:b7:4b:1b:2e:11:bc:2f:bd:63:91:a6:64:24:ee:b1:
90:5a:8a:5f:c9:94:e6:98:3e:42:3a:77:bb:65:82:50:b9:68:
2a:72:f2:e4:07:d2:96:33:29:17:5d:52:a9:38:9b:71:82:79:
b3:a9:a1:f4:06:c1:3a:58:3f:b8:2d:f0:91:d4:44:21:1d:52:
72:8b:41:b7:0d:d5:25:41:a3:1a:ed:a3:ff:36:7a:5f:67:ab:
60:3d:4a:69:07:55:02:60:b1:22:f6:b0:7a:ff:9b:fc:d6:1e:
95:61:74:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAak/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDAyMTIxNjM4WhcNMjYwNTA5MTIxNjM4WjAYMRYw
FAYDVQQDEw02OWNlNWUyYi03MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqs1uDagQ8LH19HYLPef9vD4AqbaNEjjE5vml7fbKLQ9fCzrLQzpGYgVh
C7EoT7JfiLN1a243U0Qtf06+3/GtkDV+SBK/Uvb5PNtg5PHVYJDVjakV9vG8K1GI
u/6QG2KSiGSmGKM31MV9Ito8NCPJgE6W7Xq8aVOpjaDyObuK7B6HE5c0S0xD4q3l
5y0JURyP5x7XKMpLA2Flp9hCX9FB7YYTngdiEddGbI6+D/c4T+4Bt2OlGX2m3VOa
BzI2OK6PhKiOSOpw8OgjX0RhkH/ja/Z1XEaebZwxkSUSza5Qs0cQ+mOq/jkhGH2C
FOZfUAchrQtgvu3FF7TF2jcpehCYMwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH5w
zkTO7s8SD0A7VaevdM6RKbG2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRjE2OUUxODJFOEQxMUYxOTIyNUVENzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxFMA0GCSqGSIb3DQEBCwUA
A4IBAQBs2zl4vDrOu761XJasix+tKnqTR+ePbWBMfr3lZhaD3Xo1rIejgR6loPHm
cYAuwT9wPIJZUEk6Zw6890L0rSN91zhw1a4LyVIuJVXXFlyE05u9VMi1wxiS4IM4
s0ZeHUXxIz88bWq/dQ5FwYXCSlIXzseTNXgFNO/L8+9CoPuIXWPI6lN2vWpOnDMs
CYU9hz6Hb7u3SxsuEbwvvWORpmQk7rGQWopfyZTmmD5COne7ZYJQuWgqcvLkB9KW
MykXXVKpOJtxgnmzqaH0BsE6WD+4LfCR1EQhHVJyi0G3DdUlQaMa7aP/NnpfZ6tg
PUppB1UCYLEi9rB6/5v81h6VYXSe
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:34 2026 by rpki-client