Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130AF2783E9B11F181B9CDE3CE1D38B0.roa
File: 130AF2783E9B11F181B9CDE3CE1D38B0.roa (raw, json)
Hash identifier: 4/0qMvwXsGxa7VC23zGuIULL+GVn+96Bdtt/qXYLWFg=
Subject key identifier: B0:BC:8B:35:BB:66:2A:82:57:CE:67:09:58:B4:19:BB:6D:D4:08:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130AF2783E9B11F181B9CDE3CE1D38B0.roa
Signing time: Wed 22 Apr 2026 22:31:59 +0000
ROA not before: Wed 22 Apr 2026 22:31:52 +0000
ROA not after: Sat 23 May 2026 22:31:52 +0000
asID: 17497
IP address blocks: 45.192.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 28 Apr 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110194 (0x1ae72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 22:31:52 2026 GMT
Not After : May 23 22:31:52 2026 GMT
Subject: CN=69e94c5f-6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:02:50:7d:bc:98:77:5b:bf:dd:e3:f5:a4:
d3:f5:0d:09:f6:c4:00:ed:9b:db:cc:9b:33:82:1d:
9d:92:f7:a2:36:2a:66:77:a8:ef:11:3b:2c:d6:06:
e1:a3:05:7d:b6:6a:98:9f:3b:5e:07:09:77:46:2d:
c0:1b:34:5c:91:07:10:31:bb:c7:87:23:0b:f7:c7:
ca:c1:2c:de:2a:4b:a5:8c:51:1b:e6:77:ae:f6:3f:
31:45:70:4f:57:c5:ae:af:1a:25:ad:74:07:39:94:
ec:ac:4c:be:e5:d3:95:09:5b:e2:7d:8a:de:51:25:
7e:6a:2d:50:ff:b3:e2:d3:85:18:14:05:62:86:ef:
c5:fe:e1:8d:8c:41:95:d6:01:3d:6e:87:d8:ad:f5:
05:3b:5f:d1:fb:f6:43:d1:6e:62:66:f6:de:24:36:
66:5e:1d:d0:55:11:6f:f4:61:64:05:41:92:a2:6f:
ba:81:3a:40:39:df:dc:e9:c1:fa:16:33:b5:b5:7d:
be:1c:31:e4:8c:35:fd:91:62:c9:57:fa:67:b2:56:
b1:ca:30:db:9c:6c:7e:b9:4d:6b:ad:95:47:6a:bc:
3e:67:03:e7:bf:ff:6d:94:11:5f:8a:34:69:5e:1e:
a0:e1:41:fb:3a:dc:d4:e8:d7:f0:73:76:57:df:5a:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:8B:35:BB:66:2A:82:57:CE:67:09:58:B4:19:BB:6D:D4:08:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130AF2783E9B11F181B9CDE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.132.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8f:be:0a:7b:da:2f:e1:3e:c2:6a:4a:11:a5:ce:ad:98:32:
ce:b9:13:82:b8:c1:76:ac:d0:d7:65:1f:d9:ea:da:7c:e8:85:
ab:c4:ad:c1:28:b5:06:36:43:2f:9d:a1:61:59:5f:f8:9e:c5:
77:e8:38:d7:e1:4a:fa:24:06:f1:01:02:23:2f:30:c0:e9:4b:
06:54:96:d9:85:22:09:9e:77:8c:d6:db:3e:08:7a:10:18:9a:
74:df:26:69:08:cf:bf:13:68:58:e2:a3:37:2e:cb:be:1f:be:
e2:89:d2:6c:39:25:33:2c:fb:53:55:98:50:d6:e3:88:68:63:
b3:7a:dd:4f:31:5c:b0:37:c6:12:55:17:57:d2:2e:49:3c:b2:
cd:4f:bf:0e:17:9f:97:00:31:29:f2:38:be:71:83:48:98:66:
5e:80:ab:b1:e7:26:ec:0c:e8:65:01:fb:a1:b8:eb:c7:cc:54:
41:f4:e9:0d:2b:dd:b8:15:84:2b:9d:d4:69:51:7f:10:9c:1c:
20:f0:a7:7d:d8:21:58:46:e3:38:d6:2c:50:94:b5:ea:bd:81:
0a:a2:e1:b6:7b:df:a6:5a:f1:57:8b:14:76:b1:b9:a0:66:6e:
45:1d:1c:cf:06:d7:dd:30:06:b5:8b:a1:e2:b3:41:48:d6:f4:
d2:b1:97:a4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAa5yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMjIzMTUyWhcNMjYwNTIzMjIzMTUyWjAYMRYw
FAYDVQQDEw02OWU5NGM1Zi02YThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo1YCUH28mHdbv93j9aTT9Q0J9sQA7ZvbzJszgh2dkveiNipmd6jvETss
1gbhowV9tmqYnzteBwl3Ri3AGzRckQcQMbvHhyML98fKwSzeKkuljFEb5neu9j8x
RXBPV8WurxolrXQHOZTsrEy+5dOVCVvifYreUSV+ai1Q/7Pi04UYFAVihu/F/uGN
jEGV1gE9bofYrfUFO1/R+/ZD0W5iZvbeJDZmXh3QVRFv9GFkBUGSom+6gTpAOd/c
6cH6FjO1tX2+HDHkjDX9kWLJV/pnslaxyjDbnGx+uU1rrZVHarw+ZwPnv/9tlBFf
ijRpXh6g4UH7OtzU6Nfwc3ZX31p4cwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLC8
izW7ZiqCV85nCVi0Gbtt1AhoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzBBRjI3ODNFOUIxMUYxODFCOUNERTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCEMA0GCSqGSIb3DQEBCwUA
A4IBAQAAj74Ke9ov4T7CakoRpc6tmDLOuROCuMF2rNDXZR/Z6tp86IWrxK3BKLUG
NkMvnaFhWV/4nsV36DjX4Ur6JAbxAQIjLzDA6UsGVJbZhSIJnneM1ts+CHoQGJp0
3yZpCM+/E2hY4qM3Lsu+H77iidJsOSUzLPtTVZhQ1uOIaGOzet1PMVywN8YSVRdX
0i5JPLLNT78OF5+XADEp8ji+cYNImGZegKux5ybsDOhlAfuhuOvHzFRB9OkNK924
FYQrndRpUX8QnBwg8Kd92CFYRuM41ixQlLXqvYEKouG2e9+mWvFXixR2sbmgZm5F
HRzPBtfdMAa1i6His0FI1vTSsZek
-----END CERTIFICATE-----
Generated at Sun Apr 26 21:18:16 2026 by rpki-client