Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F549C2F829AC11F1A49F53CFDAE4EC9C.roa
File: F549C2F829AC11F1A49F53CFDAE4EC9C.roa (raw, json)
Hash identifier: VKA50tRTBK6piRDLd3XrGsqYoG1F37SAmYOXj5EcFMQ=
Subject key identifier: 9A:40:2F:51:3F:D8:5D:44:36:24:3A:6B:19:99:59:95:1F:D3:80:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F549C2F829AC11F1A49F53CFDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 07:17:06 +0000
ROA not before: Fri 27 Mar 2026 07:17:00 +0000
ROA not after: Fri 01 May 2026 07:17:00 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108455 (0x1a7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 27 07:17:00 2026 GMT
Not After : May 1 07:17:00 2026 GMT
Subject: CN=69c62ef1-f9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:0d:3e:50:0b:da:67:28:e2:ad:c7:37:a4:
dc:8c:66:b8:66:fb:69:36:ba:4d:30:d3:50:f0:6c:
7c:b8:8d:7d:db:75:e5:bc:1e:a6:17:c3:b4:b3:90:
51:40:85:99:2f:a6:4e:e3:32:31:18:80:e3:4b:ae:
13:fc:0d:f4:11:e4:83:ec:14:9a:39:fe:29:54:e2:
fa:d7:51:2f:dc:29:48:7a:0c:46:17:14:a0:f0:bf:
00:8f:44:e5:b1:00:a1:ba:ce:49:75:a5:6f:f1:51:
33:47:0c:2b:14:12:ec:3b:56:12:85:90:85:c9:5e:
ab:52:fc:25:97:14:cf:03:3c:09:2c:31:ed:0d:85:
d2:b2:92:0e:d6:d8:2d:58:a9:99:18:5e:84:b8:ac:
74:67:76:86:1a:57:88:70:a8:ed:c8:ba:40:20:42:
47:cc:f6:ec:3e:0e:96:60:60:21:54:1b:3a:e0:3b:
c8:03:ee:37:db:93:c1:9f:0f:f6:87:3a:f3:c7:ea:
44:17:99:a4:00:c4:68:76:5d:18:95:d2:18:84:91:
cf:12:a3:87:d5:4c:6b:12:91:99:f2:38:d6:c0:4e:
db:d8:db:a4:13:06:f8:bd:c9:16:c0:b1:c3:2a:65:
2f:9c:a7:4f:7a:35:f4:34:6c:a8:f7:c1:8c:d0:6f:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:2F:51:3F:D8:5D:44:36:24:3A:6B:19:99:59:95:1F:D3:80:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F549C2F829AC11F1A49F53CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:95:be:5c:22:11:a6:a8:92:d2:ed:84:da:f1:7c:1c:dd:bb:
94:a2:ee:a6:61:2c:98:1b:21:1d:ae:8d:cf:40:40:90:07:46:
25:e2:64:41:2a:30:02:d5:8e:6f:e7:ac:8c:2c:ab:ba:42:c4:
c4:4c:26:2e:cb:a9:a2:0d:2f:4c:72:a9:3c:6c:85:18:c0:03:
cf:c6:87:94:ab:f7:34:7d:d0:c4:da:50:7c:2c:a2:e1:e0:f7:
28:af:8d:05:95:33:2c:a8:47:db:dd:f4:42:63:20:9e:e6:90:
3c:d7:2e:51:88:b9:46:a4:96:aa:8f:cf:6e:4c:90:20:97:3b:
5e:e8:33:14:cc:df:75:bd:f9:36:65:70:51:0a:ef:b7:fb:54:
69:9d:57:32:54:ce:4d:68:3b:cb:c9:19:6f:a0:7c:f1:01:11:
d6:19:4a:c2:8d:16:7c:5f:1c:14:4d:56:13:07:f0:43:39:79:
e8:d9:bc:ba:d4:3b:07:cd:53:90:6d:6f:39:79:8f:d1:4f:ab:
9a:25:18:a1:d1:ec:8a:5d:b5:10:2a:98:66:93:ad:8d:56:c2:
30:3b:5f:06:d0:61:c2:76:2b:44:52:47:e0:08:ad:90:42:7f:
cb:87:2c:76:09:d1:af:5b:0c:9c:67:0a:52:fc:46:9b:04:d9:
f4:e1:f4:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaenMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI3MDcxNzAwWhcNMjYwNTAxMDcxNzAwWjAYMRYw
FAYDVQQDEw02OWM2MmVmMS1mOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwvANPlAL2mco4q3HN6TcjGa4ZvtpNrpNMNNQ8Gx8uI1923XlvB6mF8O0
s5BRQIWZL6ZO4zIxGIDjS64T/A30EeSD7BSaOf4pVOL611Ev3ClIegxGFxSg8L8A
j0TlsQChus5JdaVv8VEzRwwrFBLsO1YShZCFyV6rUvwllxTPAzwJLDHtDYXSspIO
1tgtWKmZGF6EuKx0Z3aGGleIcKjtyLpAIEJHzPbsPg6WYGAhVBs64DvIA+4325PB
nw/2hzrzx+pEF5mkAMRodl0YldIYhJHPEqOH1UxrEpGZ8jjWwE7b2NukEwb4vckW
wLHDKmUvnKdPejX0NGyo98GM0G+6OQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJpA
L1E/2F1ENiQ6axmZWZUf04C9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNTQ5QzJGODI5QUMxMUYxQTQ5RjUzQ0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc+AMA0GCSqGSIb3DQEBCwUA
A4IBAQCllb5cIhGmqJLS7YTa8Xwc3buUou6mYSyYGyEdro3PQECQB0Yl4mRBKjAC
1Y5v56yMLKu6QsTETCYuy6miDS9Mcqk8bIUYwAPPxoeUq/c0fdDE2lB8LKLh4Pco
r40FlTMsqEfb3fRCYyCe5pA81y5RiLlGpJaqj89uTJAglzte6DMUzN91vfk2ZXBR
Cu+3+1RpnVcyVM5NaDvLyRlvoHzxARHWGUrCjRZ8XxwUTVYTB/BDOXno2by61DsH
zVOQbW85eY/RT6uaJRih0eyKXbUQKphmk62NVsIwO18G0GHCditEUkfgCK2QQn/L
hyx2CdGvWwycZwpS/EabBNn04fTp
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:43 2026 by rpki-client