Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17349722EA711F18E5B658FDAE4EC9C.roa
File: C17349722EA711F18E5B658FDAE4EC9C.roa (raw, json)
Hash identifier: S8erFBIV9f5Xe3KKcj1xXL1mxJSJxRUWEk1/FRZ11dw=
Subject key identifier: A9:43:A0:8F:3E:0C:C8:19:F0:DE:9D:77:46:AA:9E:E2:9F:14:3A:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A963
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17349722EA711F18E5B658FDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 15:22:27 +0000
ROA not before: Thu 02 Apr 2026 15:22:22 +0000
ROA not after: Sun 10 May 2026 15:22:22 +0000
asID: 63139
IP address blocks: 45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
45.197.123.0/24 maxlen: 24
45.197.124.0/24 maxlen: 24
45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108899 (0x1a963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 15:22:22 2026 GMT
Not After : May 10 15:22:22 2026 GMT
Subject: CN=69ce89b3-00ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:48:8c:f4:f2:78:a3:d3:11:ce:9c:1d:fe:
c2:e3:ba:11:a4:77:e7:a0:8c:29:37:4f:8e:04:65:
79:c1:63:20:a5:fa:4b:84:91:d7:d4:48:a3:78:a3:
42:20:00:7f:25:8a:83:f3:5b:80:be:3b:f8:d9:41:
6e:bc:29:a8:b0:06:94:d5:f2:d1:b4:bd:2b:af:51:
54:b3:a6:c4:5a:46:49:5a:a9:47:84:74:ca:03:2e:
cf:00:08:cd:86:fb:f2:cb:78:ef:7b:9a:67:a0:1e:
af:5e:57:b9:b1:67:e5:79:99:8e:9a:41:e6:5a:bf:
d1:d5:95:f1:52:36:b5:65:d0:b1:58:30:01:0b:34:
ac:a7:bc:5f:d1:33:05:08:da:3e:41:0c:8b:74:a4:
ae:4e:60:a8:95:0d:a5:3a:ea:3e:a3:bc:5d:3c:7f:
c5:b8:b7:86:53:46:c6:fa:09:0b:36:00:a9:08:88:
d6:32:e8:de:f1:29:a7:61:a5:3f:aa:9e:da:e4:ba:
93:5f:35:56:b9:63:f7:43:90:50:ec:c2:90:4b:61:
e3:08:83:d6:15:49:48:34:aa:2d:2f:e8:a5:dd:69:
5a:85:e8:75:64:9d:74:e0:7d:76:c0:94:85:6e:47:
6d:2e:b4:0c:ab:4c:23:97:b2:54:6f:12:d2:a3:4e:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:A0:8F:3E:0C:C8:19:F0:DE:9D:77:46:AA:9E:E2:9F:14:3A:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17349722EA711F18E5B658FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.118.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
68:7c:1c:72:58:4d:4a:98:72:55:3f:82:1f:61:08:6a:cf:9e:
63:28:12:f4:68:a4:5b:a2:aa:91:ae:5d:40:41:b5:56:c2:84:
43:59:52:cb:68:71:f6:37:ec:3f:59:1a:f6:fa:48:3b:89:45:
e7:f7:9e:63:e7:dd:05:96:27:a6:cf:bc:d5:46:90:82:5a:2d:
05:69:3a:f7:6a:eb:a7:3f:41:97:37:34:c9:e5:16:3f:30:f2:
80:0c:3c:4c:af:d8:1d:3b:74:f3:db:72:d2:b8:8b:79:a5:57:
8f:12:72:80:70:4d:21:9d:ce:b8:a9:68:c0:e2:f2:82:b2:40:
43:5f:ba:b6:5e:5b:62:c5:06:5e:06:79:db:d2:0e:5b:1a:ef:
59:e0:97:71:a0:eb:f9:ea:01:a9:79:d1:7e:e1:ec:c1:10:5c:
31:e3:c4:35:7e:60:dd:13:d2:62:f9:7b:cf:18:51:82:25:80:
9f:8a:93:13:fd:97:f0:cf:a8:4a:11:e8:e4:f7:00:59:5a:5a:
f8:8a:ee:ab:19:17:7b:b0:78:6f:31:5c:80:92:42:1a:52:82:
04:35:a7:7a:e6:72:da:d8:21:55:aa:de:ac:e2:09:57:ce:07:
de:ae:0e:bd:da:bf:70:b2:b5:e6:46:07:55:1b:cd:f7:eb:4f:
2b:1f:00:0e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaljMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDAyMTUyMjIyWhcNMjYwNTEwMTUyMjIyWjAYMRYw
FAYDVQQDEw02OWNlODliMy0wMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5nVIjPTyeKPTEc6cHf7C47oRpHfnoIwpN0+OBGV5wWMgpfpLhJHX1Eij
eKNCIAB/JYqD81uAvjv42UFuvCmosAaU1fLRtL0rr1FUs6bEWkZJWqlHhHTKAy7P
AAjNhvvyy3jve5pnoB6vXle5sWfleZmOmkHmWr/R1ZXxUja1ZdCxWDABCzSsp7xf
0TMFCNo+QQyLdKSuTmColQ2lOuo+o7xdPH/FuLeGU0bG+gkLNgCpCIjWMuje8Smn
YaU/qp7a5LqTXzVWuWP3Q5BQ7MKQS2HjCIPWFUlINKotL+il3Wlaheh1ZJ104H12
wJSFbkdtLrQMq0wjl7JUbxLSo06w9QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKlD
oI8+DMgZ8N6dd0aqnuKfFDppMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTczNDk3MjJFQTcxMUYxOEU1QjY1OEZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEtxXYDBActxQAwDQYJKoZI
hvcNAQELBQADggEBAGh8HHJYTUqYclU/gh9hCGrPnmMoEvRopFuiqpGuXUBBtVbC
hENZUstocfY37D9ZGvb6SDuJRef3nmPn3QWWJ6bPvNVGkIJaLQVpOvdq66c/QZc3
NMnlFj8w8oAMPEyv2B07dPPbctK4i3mlV48ScoBwTSGdzripaMDi8oKyQENfurZe
W2LFBl4GedvSDlsa71ngl3Gg6/nqAal50X7h7MEQXDHjxDV+YN0T0mL5e88YUYIl
gJ+KkxP9l/DPqEoR6OT3AFlaWviK7qsZF3uweG8xXICSQhpSggQ1p3rmctrYIVWq
3qziCVfOB96uDr3av3CyteZGB1UbzffrTysfAA4=
-----END CERTIFICATE-----
Generated at Mon Apr 6 02:19:18 2026 by rpki-client