Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FD4B6E3E5E11F1A4447DF7CE1D38B0.roa
File: 36FD4B6E3E5E11F1A4447DF7CE1D38B0.roa (raw, json)
Hash identifier: YXy4la7P9brz2VeJXIBktDGrpdUKcc95QrbyIUp8sMk=
Subject key identifier: A6:BB:BE:06:06:FE:15:F6:B1:41:EF:19:63:4D:40:A8:05:6D:14:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FD4B6E3E5E11F1A4447DF7CE1D38B0.roa
Signing time: Wed 22 Apr 2026 15:16:20 +0000
ROA not before: Wed 22 Apr 2026 15:16:15 +0000
ROA not after: Tue 09 Jun 2026 15:16:15 +0000
asID: 32043
IP address blocks: 45.192.120.0/21 maxlen: 24
45.194.114.0/23 maxlen: 24
45.194.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110127 (0x1ae2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 15:16:15 2026 GMT
Not After : Jun 9 15:16:15 2026 GMT
Subject: CN=69e8e644-5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:18:a7:8a:bc:5d:57:7b:5f:29:bd:93:47:
cd:80:82:c4:1b:bd:41:96:dd:39:6a:7b:50:e5:98:
ec:94:7c:85:9f:49:d6:86:6f:0f:1a:98:10:e0:32:
fb:1b:46:6a:1f:fb:70:a3:6e:32:f6:87:6d:36:48:
db:8b:2b:b4:b3:7e:f4:a2:5d:16:1c:89:92:20:75:
7f:63:7e:de:9a:ea:a6:45:56:c7:df:b4:de:61:35:
cb:c4:e9:e3:eb:82:de:c2:92:73:d3:50:d0:d0:cf:
ca:22:eb:4b:b8:9d:fa:09:8c:76:4b:bc:ed:7d:9e:
18:a8:c5:bc:d2:3d:c1:68:60:8e:ac:7f:b1:71:6f:
e0:ca:c8:f7:3e:eb:be:b5:0a:db:82:a8:42:9f:ad:
9a:ab:7a:cc:14:2a:10:0a:d5:86:5e:95:ff:8d:eb:
a4:55:6b:a2:1d:05:07:f0:36:88:70:d9:26:56:a8:
ab:87:00:72:d5:89:56:8c:34:20:ce:45:d5:19:84:
16:80:ab:d3:36:6b:ea:af:86:17:00:77:fb:22:26:
be:08:61:11:03:8f:1d:84:56:ed:05:8a:ad:3b:b3:
59:2f:e7:df:99:02:53:0e:0a:0f:08:e5:9d:48:7e:
4f:fb:f0:b9:4f:da:a9:15:22:35:7b:f8:7f:b5:52:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BB:BE:06:06:FE:15:F6:B1:41:EF:19:63:4D:40:A8:05:6D:14:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FD4B6E3E5E11F1A4447DF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.120.0/21
45.194.114.0/23
45.194.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:3f:dd:3a:b1:52:ec:c2:32:b4:05:36:8f:80:26:0a:0f:f0:
11:1c:f2:ad:e9:8e:d2:0b:77:f9:76:8b:63:cb:c1:16:7b:35:
c5:6d:f2:85:2e:05:35:44:30:25:36:ef:6c:f1:61:ea:a0:e6:
21:8e:a1:e9:b5:b3:b7:03:96:79:28:ca:00:d3:cc:29:7f:df:
bd:fb:03:6d:04:65:ac:dd:4c:d2:2c:5d:07:b2:55:5a:80:87:
07:31:be:b1:90:b6:0b:fa:2a:ff:db:55:7c:50:42:9c:f4:eb:
8a:eb:82:b3:7e:6c:b0:58:83:d1:48:e0:48:ea:b4:94:37:ee:
43:a0:28:40:65:2a:a8:b4:2e:5a:ad:c0:b5:ef:e5:82:67:8d:
da:7c:63:ff:a3:d4:b2:c2:41:ba:b8:23:4f:f9:d4:23:b2:a4:
de:db:f6:3d:57:5c:a1:18:bf:d3:7b:5a:e8:ac:b8:ca:61:45:
a0:6d:ff:8d:92:47:41:28:83:69:63:0f:81:2d:8f:2c:41:63:
90:5b:eb:b7:db:da:55:93:30:ad:cf:28:ab:be:cf:2c:ab:e8:
c7:e4:85:ae:1a:bd:69:db:24:23:c2:37:e6:5c:de:6d:28:8c:
df:8c:1a:bc:c1:8d:80:ae:a0:ed:79:41:e0:78:5c:9a:fc:db:
85:be:9d:48
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAa4vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMTUxNjE1WhcNMjYwNjA5MTUxNjE1WjAYMRYw
FAYDVQQDEw02OWU4ZTY0NC01OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4+sYp4q8XVd7Xym9k0fNgILEG71Blt05antQ5ZjslHyFn0nWhm8PGpgQ
4DL7G0ZqH/two24y9odtNkjbiyu0s370ol0WHImSIHV/Y37emuqmRVbH37TeYTXL
xOnj64LewpJz01DQ0M/KIutLuJ36CYx2S7ztfZ4YqMW80j3BaGCOrH+xcW/gysj3
Puu+tQrbgqhCn62aq3rMFCoQCtWGXpX/jeukVWuiHQUH8DaIcNkmVqirhwBy1YlW
jDQgzkXVGYQWgKvTNmvqr4YXAHf7Iia+CGERA48dhFbtBYqtO7NZL+ffmQJTDgoP
COWdSH5P+/C5T9qpFSI1e/h/tVKeUwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFKa7
vgYG/hX2sUHvGWNNQKgFbRT8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNkZENEI2RTNFNUUxMUYxQTQ0NDdERjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLcB4AwQBLcJyAwQALcJ2MA0G
CSqGSIb3DQEBCwUAA4IBAQCkP906sVLswjK0BTaPgCYKD/ARHPKt6Y7SC3f5dotj
y8EWezXFbfKFLgU1RDAlNu9s8WHqoOYhjqHptbO3A5Z5KMoA08wpf9+9+wNtBGWs
3UzSLF0HslVagIcHMb6xkLYL+ir/21V8UEKc9OuK64KzfmywWIPRSOBI6rSUN+5D
oChAZSqotC5arcC17+WCZ43afGP/o9SywkG6uCNP+dQjsqTe2/Y9V1yhGL/Te1ro
rLjKYUWgbf+NkkdBKINpYw+BLY8sQWOQW+u329pVkzCtzyirvs8sq+jH5IWuGr1p
2yQjwjfmXN5tKIzfjBq8wY2ArqDteUHgeFya/NuFvp1I
-----END CERTIFICATE-----
Generated at Fri Apr 24 18:34:45 2026 by rpki-client