Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F637E8F0132411F194089EB1DAE4EC9C.roa
File: F637E8F0132411F194089EB1DAE4EC9C.roa (raw, json)
Hash identifier: 7Bgz/AHpm3UoqT2NsMvrBoQOdyrag+6obvj1FE8tF2E=
Subject key identifier: B8:45:A3:E2:23:FD:8C:53:1D:AB:01:BA:5C:C8:E0:D1:0D:11:8A:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F637E8F0132411F194089EB1DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 15:08:10 +0000
ROA not before: Thu 26 Feb 2026 15:08:05 +0000
ROA not after: Fri 27 Mar 2026 15:08:05 +0000
asID: 6079
IP address blocks: 45.205.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106719 (0x1a0df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 15:08:05 2026 GMT
Not After : Mar 27 15:08:05 2026 GMT
Subject: CN=69a061d9-28b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:ef:cf:84:e0:03:b5:04:48:ac:b6:8c:d7:
db:7d:f1:44:43:8c:83:45:57:7f:54:82:59:97:9b:
9a:51:27:2b:67:e2:35:9d:4f:60:84:07:a5:91:f5:
6d:4c:47:2d:07:d4:19:43:ed:8f:1f:66:34:13:38:
15:88:97:0f:58:db:ef:d2:db:c6:2d:a7:c7:ff:5e:
f7:f0:cd:c9:c0:b5:2c:0e:3b:42:ba:31:99:83:62:
53:b9:f9:ef:95:13:5b:71:6f:69:27:07:09:20:d0:
01:20:58:2c:10:84:93:7f:22:d8:e1:d3:1d:e9:58:
53:41:66:b8:53:3b:e4:2b:9e:b1:c2:52:08:94:dd:
89:54:c8:dd:58:ee:7c:90:ee:8d:03:ae:2d:dd:a3:
0c:d3:ee:3b:e9:1b:3e:49:44:eb:40:ed:a9:42:f0:
3a:bd:fa:71:5e:c7:b9:81:84:55:83:69:67:8f:13:
fd:7f:d6:8c:02:2d:81:9c:d5:f8:c2:03:d6:2d:0d:
e5:7c:a0:81:22:ba:30:1a:6d:4a:21:48:e6:01:2e:
f0:2b:b2:be:0b:99:86:7f:46:f0:07:64:6b:c2:77:
68:34:22:42:34:b6:7f:40:03:ae:45:d6:1f:c7:a6:
26:45:81:cd:54:cb:bf:ae:75:3d:ac:e1:06:32:ad:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:A3:E2:23:FD:8C:53:1D:AB:01:BA:5C:C8:E0:D1:0D:11:8A:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F637E8F0132411F194089EB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:00:5a:65:5d:29:74:22:92:e4:da:8c:c9:06:53:a4:5d:9d:
83:5c:30:ce:13:34:f8:cc:21:79:2e:f3:f3:8a:50:b2:1b:df:
74:4f:d8:41:42:80:30:01:55:c7:27:1c:48:ac:f1:08:3d:4d:
4d:0d:10:6d:a1:ad:9c:bc:ad:fd:72:d1:d2:9b:57:e2:a0:47:
00:56:37:25:f8:74:9d:d7:1b:a4:50:fb:e8:f4:fc:0a:6e:6a:
11:b4:89:5f:e1:39:48:95:fb:3b:24:7c:6f:fc:3a:75:77:f9:
a1:8e:aa:07:13:d9:ad:f7:43:97:bb:18:2d:fb:8b:5e:88:9a:
c2:5b:3a:ad:86:13:88:99:de:18:50:81:4e:47:7b:e0:69:6a:
aa:38:14:5d:f5:80:0b:d1:c6:be:11:3e:ee:96:4a:f5:29:4a:
bc:cf:7c:3e:fe:8f:02:e3:ff:f4:a3:79:58:e7:c1:32:0b:d8:
64:a3:ec:19:a1:10:82:dc:1e:c6:e3:8d:32:5a:6d:5e:cd:ee:
4a:34:76:32:06:b0:34:e4:8a:bf:f9:5c:bd:e6:c9:78:15:83:
f0:cf:2e:75:d5:61:80:aa:e9:42:f1:d4:e2:a3:ee:6d:89:52:
2f:73:bc:80:4d:da:61:82:6e:61:87:ab:40:5a:e4:98:57:71:
f5:ff:6b:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaDfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI2MTUwODA1WhcNMjYwMzI3MTUwODA1WjAYMRYw
FAYDVQQDEw02OWEwNjFkOS0yOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuOLvz4TgA7UESKy2jNfbffFEQ4yDRVd/VIJZl5uaUScrZ+I1nU9ghAel
kfVtTEctB9QZQ+2PH2Y0EzgViJcPWNvv0tvGLafH/1738M3JwLUsDjtCujGZg2JT
ufnvlRNbcW9pJwcJINABIFgsEISTfyLY4dMd6VhTQWa4UzvkK56xwlIIlN2JVMjd
WO58kO6NA64t3aMM0+476Rs+SUTrQO2pQvA6vfpxXse5gYRVg2lnjxP9f9aMAi2B
nNX4wgPWLQ3lfKCBIrowGm1KIUjmAS7wK7K+C5mGf0bwB2RrwndoNCJCNLZ/QAOu
RdYfx6YmRYHNVMu/rnU9rOEGMq2/JwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLhF
o+Ij/YxTHasBulzI4NENEYpCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNjM3RThGMDEzMjQxMUYxOTQwODlFQjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc2XMA0GCSqGSIb3DQEBCwUA
A4IBAQBbAFplXSl0IpLk2ozJBlOkXZ2DXDDOEzT4zCF5LvPzilCyG990T9hBQoAw
AVXHJxxIrPEIPU1NDRBtoa2cvK39ctHSm1fioEcAVjcl+HSd1xukUPvo9PwKbmoR
tIlf4TlIlfs7JHxv/Dp1d/mhjqoHE9mt90OXuxgt+4teiJrCWzqthhOImd4YUIFO
R3vgaWqqOBRd9YAL0ca+ET7ulkr1KUq8z3w+/o8C4//0o3lY58EyC9hko+wZoRCC
3B7G440yWm1eze5KNHYyBrA05Iq/+Vy95sl4FYPwzy511WGAqulC8dTio+5tiVIv
c7yATdphgm5hh6tAWuSYV3H1/2tz
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:45 2026 by rpki-client