Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BD9F0A639A611F1BD6A3004CF1D38B0.roa
File: 1BD9F0A639A611F1BD6A3004CF1D38B0.roa (raw, json)
Hash identifier: qCUv2CVoVQXaafH9jLKcytlJWbqGStf2UlBYOI6+WvU=
Subject key identifier: 2A:94:E4:3D:A0:C8:21:E0:66:AD:24:98:D7:E9:9B:E5:A9:0E:71:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BD9F0A639A611F1BD6A3004CF1D38B0.roa
Signing time: Thu 16 Apr 2026 15:08:22 +0000
ROA not before: Thu 16 Apr 2026 15:08:18 +0000
ROA not after: Wed 29 Apr 2026 15:08:18 +0000
asID: 214143
IP address blocks: 45.195.3.0/24 maxlen: 24
45.197.135.0/24 maxlen: 24
45.198.69.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.81.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.198.89.0/24 maxlen: 24
45.198.90.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.104.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.112.0/24 maxlen: 24
45.198.138.0/24 maxlen: 24
45.198.163.0/24 maxlen: 24
45.198.168.0/24 maxlen: 24
45.198.176.0/24 maxlen: 24
45.198.181.0/24 maxlen: 24
45.206.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109893 (0x1ad45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 15:08:18 2026 GMT
Not After : Apr 29 15:08:18 2026 GMT
Subject: CN=69e0fb66-60df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:2b:b4:f7:a1:27:a8:ca:46:38:f5:aa:30:
2e:0d:15:e5:a6:1d:29:d3:66:b4:21:05:59:c8:4a:
65:c2:4e:67:42:98:c2:8e:e3:01:23:0b:a6:43:56:
5f:83:8e:59:be:54:21:21:70:38:3f:9c:a2:4f:84:
4f:75:bf:d7:4d:dc:96:44:7a:6f:02:57:24:12:07:
be:dd:57:73:57:f4:69:ae:67:f6:7b:cc:85:97:3e:
98:fa:17:d4:23:ce:be:0f:0a:f8:49:f5:a4:ef:6b:
f8:15:98:2d:b1:43:6d:05:a5:e4:6f:26:10:6c:0b:
fd:0e:5a:07:ec:dc:ad:72:ad:b9:e8:95:6a:35:8e:
94:8c:48:0b:45:26:0e:45:b7:b6:2a:d3:28:c1:e4:
26:aa:99:46:1f:13:4f:83:2b:c0:43:8b:8f:b8:d5:
2a:f9:a6:0e:89:c2:f0:f0:52:34:7a:69:24:fd:7e:
3a:10:e7:04:93:14:0e:d7:e3:62:ca:0d:41:c5:bc:
33:ed:8e:29:04:23:c6:44:ee:10:24:19:d8:f9:52:
5b:21:42:03:c2:73:24:bf:5f:09:55:8a:08:b3:4f:
a4:9d:5a:3e:dc:62:b3:47:c3:3c:c3:3f:c0:02:6c:
1f:5a:9b:33:e6:50:af:f6:84:65:94:23:f7:69:dd:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:E4:3D:A0:C8:21:E0:66:AD:24:98:D7:E9:9B:E5:A9:0E:71:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BD9F0A639A611F1BD6A3004CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
45.197.135.0/24
45.198.69.0/24
45.198.75.0/24
45.198.81.0/24
45.198.84.0/24
45.198.86.0/24
45.198.89.0-45.198.90.255
45.198.97.0/24
45.198.104.0/24
45.198.109.0/24
45.198.112.0/24
45.198.138.0/24
45.198.163.0/24
45.198.168.0/24
45.198.176.0/24
45.198.181.0/24
45.206.44.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:57:96:bb:a8:b5:83:77:0a:54:e4:73:33:d6:5f:b5:93:7d:
92:d1:d6:a1:5f:6d:98:e1:2d:dd:7b:f1:29:cd:5f:d0:51:23:
aa:a1:77:62:75:61:e9:b5:49:80:b2:d4:66:bc:aa:89:0d:6e:
b0:16:77:bb:a2:14:9c:d0:a2:bf:b4:5f:a5:48:d5:86:c5:0b:
ad:95:a9:37:85:42:de:92:08:b2:be:41:cf:13:02:30:9b:d4:
1e:9d:46:cb:4d:ac:8e:83:b0:b5:0b:dc:25:b4:b4:b7:15:8a:
a0:48:89:32:5a:96:06:34:97:f1:ed:97:58:99:1e:21:d7:d0:
2f:12:db:83:1b:5b:dd:05:5e:65:86:14:27:70:f1:26:74:10:
0c:1e:7f:b8:18:74:42:f7:f5:7c:1f:7b:c8:47:da:de:cd:d1:
07:cb:c7:2b:bb:7f:37:58:e0:7d:18:aa:2a:b9:87:ad:b5:ad:
4a:e6:b6:ed:12:05:9f:f9:61:7f:52:00:31:a2:4d:84:8b:4a:
f3:97:16:87:1f:c2:1f:11:ec:3c:f5:e0:2e:e4:21:f1:68:69:
50:b3:dc:83:1f:f4:0b:b8:59:f3:49:03:96:0e:2c:58:56:f3:
6e:bc:20:30:4a:f0:56:d7:03:87:72:e7:74:36:35:68:fb:6e:
64:2e:40:dc
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgIDAa1FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE2MTUwODE4WhcNMjYwNDI5MTUwODE4WjAYMRYw
FAYDVQQDEw02OWUwZmI2Ni02MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxPcrtPehJ6jKRjj1qjAuDRXlph0p02a0IQVZyEplwk5nQpjCjuMBIwum
Q1Zfg45ZvlQhIXA4P5yiT4RPdb/XTdyWRHpvAlckEge+3VdzV/Rprmf2e8yFlz6Y
+hfUI86+Dwr4SfWk72v4FZgtsUNtBaXkbyYQbAv9DloH7Nytcq256JVqNY6UjEgL
RSYORbe2KtMoweQmqplGHxNPgyvAQ4uPuNUq+aYOicLw8FI0emkk/X46EOcEkxQO
1+Niyg1Bxbwz7Y4pBCPGRO4QJBnY+VJbIUIDwnMkv18JVYoIs0+knVo+3GKzR8M8
wz/AAmwfWpsz5lCv9oRllCP3ad3mDQIDAQABo4IDETCCAw0wHQYDVR0OBBYEFCqU
5D2gyCHgZq0kmNfpm+WpDnF/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQkQ5RjBBNjM5QTYxMUYxQkQ2QTMwMDRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAC3DAwMEAC3FhwMEAC3GRQME
AC3GSwMEAC3GUQMEAC3GVAMEAC3GVjAMAwQALcZZAwQALcZaAwQALcZhAwQALcZo
AwQALcZtAwQALcZwAwQALcaKAwQALcajAwQALcaoAwQALcawAwQALca1AwQBLc4s
MA0GCSqGSIb3DQEBCwUAA4IBAQCpV5a7qLWDdwpU5HMz1l+1k32S0dahX22Y4S3d
e/EpzV/QUSOqoXdidWHptUmAstRmvKqJDW6wFne7ohSc0KK/tF+lSNWGxQutlak3
hULekgiyvkHPEwIwm9QenUbLTayOg7C1C9wltLS3FYqgSIkyWpYGNJfx7ZdYmR4h
19AvEtuDG1vdBV5lhhQncPEmdBAMHn+4GHRC9/V8H3vIR9rezdEHy8cru383WOB9
GKoquYetta1K5rbtEgWf+WF/UgAxok2Ei0rzlxaHH8IfEew89eAu5CHxaGlQs9yD
H/QLuFnzSQOWDixYVvNuvCAwSvBW1wOHcud0NjVo+25kLkDc
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:53 2026 by rpki-client