Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA09E61A331211F1A1700500CF1D38B0.roa
File: EA09E61A331211F1A1700500CF1D38B0.roa (raw, json)
Hash identifier: VHl8ZfTume3ocoD9qEjkUAfai9VUs5rET1gYAMDPoh8=
Subject key identifier: 66:7F:41:BD:BB:94:05:08:10:42:90:11:D2:69:D2:2F:31:D6:CC:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AAD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA09E61A331211F1A1700500CF1D38B0.roa
Signing time: Wed 08 Apr 2026 06:19:39 +0000
ROA not before: Wed 08 Apr 2026 06:19:27 +0000
ROA not after: Fri 08 May 2026 06:19:27 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109269 (0x1aad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 8 06:19:27 2026 GMT
Not After : May 8 06:19:27 2026 GMT
Subject: CN=69d5f37b-9ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:00:b3:8a:58:83:61:b6:16:1d:cc:05:6f:
7d:7e:b9:8b:14:a8:ab:38:02:eb:61:f3:49:9b:96:
f5:eb:5a:72:40:6c:b3:76:89:00:e0:04:a8:57:69:
89:8c:4a:c7:b3:1e:d9:1c:79:e3:3c:d5:4a:f5:87:
39:97:59:6d:40:d4:1f:54:c3:4b:33:49:18:8a:81:
ea:10:1b:9c:0e:df:21:26:7c:35:98:a6:2a:ee:50:
96:d1:04:72:82:22:5b:d3:e0:b8:4f:50:c6:c3:85:
5d:fa:a3:ab:cd:1d:4d:5a:ac:74:64:44:ab:cd:db:
fa:f4:3d:54:0a:4b:c5:c1:2c:23:08:03:2e:df:04:
51:0c:df:4a:ab:32:c0:7a:1a:2e:5d:e1:10:ec:04:
5d:c9:23:1e:c4:c6:d2:b7:77:fe:37:32:70:f4:09:
fb:ff:ca:03:aa:d8:53:75:29:60:f4:31:cc:3d:9b:
5a:fc:f2:23:45:dc:05:69:42:57:75:59:9f:6d:51:
ae:22:d9:ae:59:62:cf:b4:0a:00:32:e7:5a:cc:8c:
38:bb:2e:04:84:fd:60:86:d4:e8:37:44:e6:32:c8:
5c:4e:55:c7:33:e1:57:ce:1b:db:6b:61:a6:e3:a8:
f8:0d:7f:39:36:f4:ba:e1:a5:11:b7:ee:35:fd:54:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:41:BD:BB:94:05:08:10:42:90:11:D2:69:D2:2F:31:D6:CC:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA09E61A331211F1A1700500CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c9:b9:8d:3f:66:91:9c:fc:a0:d4:8d:cf:22:06:d4:03:e0:
82:ac:c7:10:84:46:10:03:65:3e:e4:ae:c3:a7:bb:ac:f7:5c:
f0:77:c7:e0:12:72:36:3d:a6:7b:20:3e:09:40:85:99:16:a4:
d5:d5:a7:3a:b1:54:8c:b3:fd:3c:47:9d:ee:b4:1a:3c:c6:18:
bc:0b:cf:46:cd:fe:c3:e4:0c:5a:8c:b6:e9:13:6c:0a:9d:b8:
cf:f9:a5:ad:e5:54:36:41:c5:73:9c:38:d2:66:ef:1c:ed:81:
f9:56:58:61:85:8c:bf:34:f7:5f:e6:fa:d4:18:77:e6:9f:eb:
6e:49:cd:95:b8:71:2a:16:4e:68:97:7a:37:58:1f:8c:45:43:
bc:70:a1:2d:39:e3:fb:9c:05:f8:f1:ae:9e:31:4c:dd:6b:07:
fb:ea:9d:d4:53:cb:ae:9c:08:e4:df:6a:68:b8:65:b4:cf:cd:
4d:c8:21:79:69:30:b6:6d:a9:c3:2e:fd:33:43:2b:62:32:67:
3d:14:3f:a6:de:b4:e9:93:2f:2a:90:de:9a:f1:54:a8:8f:76:
7a:ac:ab:f9:12:ad:0a:2c:93:1a:05:b5:3b:c2:fe:8f:49:50:
25:e0:16:1c:c3:c0:1b:a5:72:f6:36:01:44:f8:7b:68:b1:81:
27:00:a4:a5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAarVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA4MDYxOTI3WhcNMjYwNTA4MDYxOTI3WjAYMRYw
FAYDVQQDEw02OWQ1ZjM3Yi05ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Q4As4pYg2G2Fh3MBW99frmLFKirOALrYfNJm5b161pyQGyzdokA4ASo
V2mJjErHsx7ZHHnjPNVK9Yc5l1ltQNQfVMNLM0kYioHqEBucDt8hJnw1mKYq7lCW
0QRygiJb0+C4T1DGw4Vd+qOrzR1NWqx0ZESrzdv69D1UCkvFwSwjCAMu3wRRDN9K
qzLAehouXeEQ7ARdySMexMbSt3f+NzJw9An7/8oDqthTdSlg9DHMPZta/PIjRdwF
aUJXdVmfbVGuItmuWWLPtAoAMudazIw4uy4EhP1ghtToN0TmMshcTlXHM+FXzhvb
a2Gm46j4DX85NvS64aURt+41/VQc0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGZ/
Qb27lAUIEEKQEdJp0i8x1sz5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQTA5RTYxQTMzMTIxMUYxQTE3MDA1MDBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce7MA0GCSqGSIb3DQEBCwUA
A4IBAQB9ybmNP2aRnPyg1I3PIgbUA+CCrMcQhEYQA2U+5K7Dp7us91zwd8fgEnI2
PaZ7ID4JQIWZFqTV1ac6sVSMs/08R53utBo8xhi8C89Gzf7D5AxajLbpE2wKnbjP
+aWt5VQ2QcVznDjSZu8c7YH5VlhhhYy/NPdf5vrUGHfmn+tuSc2VuHEqFk5ol3o3
WB+MRUO8cKEtOeP7nAX48a6eMUzdawf76p3UU8uunAjk32pouGW0z81NyCF5aTC2
banDLv0zQytiMmc9FD+m3rTpky8qkN6a8VSoj3Z6rKv5Eq0KLJMaBbU7wv6PSVAl
4BYcw8AbpXL2NgFE+HtosYEnAKSl
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:04 2026 by rpki-client