Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4087327034B411F195A5B3D1CE1D38B0.roa
File: 4087327034B411F195A5B3D1CE1D38B0.roa (raw, json)
Hash identifier: YHLEu2xLh567TVgzPNYQ9uamO+D1e41T5BljSNC7pUw=
Subject key identifier: B5:5D:5E:01:9B:2E:9F:C2:84:1D:2E:54:33:A8:EE:98:0D:92:EB:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4087327034B411F195A5B3D1CE1D38B0.roa
Signing time: Fri 10 Apr 2026 08:07:01 +0000
ROA not before: Fri 10 Apr 2026 08:06:54 +0000
ROA not after: Sun 17 May 2026 08:06:54 +0000
asID: 54801
IP address blocks: 45.195.62.0/24 maxlen: 24
45.195.199.0/24 maxlen: 24
45.197.20.0/24 maxlen: 24
45.199.130.0/24 maxlen: 24
45.199.131.0/24 maxlen: 24
45.199.134.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109470 (0x1ab9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 08:06:54 2026 GMT
Not After : May 17 08:06:54 2026 GMT
Subject: CN=69d8afa5-fd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:f1:cc:05:df:fe:3c:32:65:ec:ad:6e:e0:
7c:eb:16:77:40:de:01:a1:63:e8:dc:cd:73:d3:58:
84:c6:59:43:e8:ca:e6:1a:22:d3:85:8d:8b:a5:1d:
19:ae:7c:88:59:8f:eb:fd:60:1e:3b:69:7e:f3:d3:
45:0d:b0:1e:df:e2:fb:b8:46:01:67:0c:4d:84:4e:
c7:88:37:2b:03:74:5e:d6:82:a0:ea:0f:53:26:f5:
aa:b8:26:9a:ec:76:44:f9:d4:44:cb:8a:0d:36:62:
8d:d4:ad:10:f7:8c:11:33:1c:a3:36:e7:5f:f6:a1:
6b:0b:75:bf:03:ee:6c:6c:a3:2a:77:ac:8a:80:d8:
70:1b:65:fa:4d:00:ab:3d:74:13:71:15:95:30:e6:
71:6a:86:94:9e:5f:46:c0:5e:62:34:14:81:13:99:
7f:9a:c7:6a:57:9f:58:e8:68:61:05:72:96:37:8a:
94:36:eb:17:00:d2:0c:9e:e3:57:fd:ff:1b:3b:45:
ed:b1:2b:05:91:da:64:fe:2c:6c:73:81:1d:55:a4:
09:43:7a:8d:99:6e:2d:9a:81:01:ab:f0:4c:df:f9:
ba:63:c6:6b:d1:ce:e2:79:46:35:65:93:df:d3:39:
01:be:73:f9:85:97:f9:11:45:4f:5f:9b:67:9f:44:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:5E:01:9B:2E:9F:C2:84:1D:2E:54:33:A8:EE:98:0D:92:EB:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4087327034B411F195A5B3D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.62.0/24
45.195.199.0/24
45.197.20.0/24
45.199.130.0/23
45.199.134.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8a:01:a6:9e:d3:ba:16:31:a4:d1:43:13:91:75:a9:51:3f:
ac:da:c1:59:21:ce:6c:5c:05:4a:da:83:e8:5a:a5:21:55:96:
b8:b3:ae:08:8e:e7:08:91:c1:e9:de:aa:61:06:b6:d7:7f:ff:
8d:98:8e:9e:b1:12:19:f0:85:73:58:f0:39:c6:44:cf:98:3b:
a1:c6:9a:79:f5:0d:db:6e:94:44:16:1a:9a:2f:99:de:18:63:
01:b0:25:2c:df:26:fe:48:92:7c:d4:8b:f5:9c:95:8c:90:7d:
f7:3b:4f:fc:0d:fb:8f:f9:e1:a4:85:ec:00:db:87:c1:9c:ae:
62:97:31:19:26:a2:2e:a1:33:fd:4e:81:af:63:78:21:73:ce:
67:66:2c:75:de:94:32:97:59:83:a2:97:71:5b:d3:ca:eb:32:
ef:4a:f9:5f:ca:b1:df:2e:c6:5a:f8:fe:0a:21:d5:06:76:1d:
b1:e3:ed:8e:85:46:da:5b:5b:f6:8d:b5:1c:6b:2b:01:76:0e:
59:cf:4d:6e:9b:9d:cd:92:81:d5:85:4b:44:c1:fc:3c:e0:51:
12:87:32:08:06:82:d8:92:05:e0:3c:05:fa:2d:d0:d7:6c:c9:
c5:c3:fe:dc:b6:35:2b:4e:aa:4e:7c:e1:65:53:c5:ed:a0:df:
58:9d:60:c0
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDAaueMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDEwMDgwNjU0WhcNMjYwNTE3MDgwNjU0WjAYMRYw
FAYDVQQDEw02OWQ4YWZhNS1mZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzW3xzAXf/jwyZeytbuB86xZ3QN4BoWPo3M1z01iExllD6MrmGiLThY2L
pR0ZrnyIWY/r/WAeO2l+89NFDbAe3+L7uEYBZwxNhE7HiDcrA3Re1oKg6g9TJvWq
uCaa7HZE+dREy4oNNmKN1K0Q94wRMxyjNudf9qFrC3W/A+5sbKMqd6yKgNhwG2X6
TQCrPXQTcRWVMOZxaoaUnl9GwF5iNBSBE5l/msdqV59Y6GhhBXKWN4qUNusXANIM
nuNX/f8bO0XtsSsFkdpk/ixsc4EdVaQJQ3qNmW4tmoEBq/BM3/m6Y8Zr0c7ieUY1
ZZPf0zkBvnP5hZf5EUVPX5tnn0R6wQIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFLVd
XgGbLp/ChB0uVDOo7pgNkusiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MDg3MzI3MDM0QjQxMUYxOTVBNUIzRDFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALcM+AwQALcPHAwQALcUUAwQB
LceCAwQALceGAwQALcwBAwQALcxAAwQALcxHAwQALc+jMA0GCSqGSIb3DQEBCwUA
A4IBAQBJigGmntO6FjGk0UMTkXWpUT+s2sFZIc5sXAVK2oPoWqUhVZa4s64IjucI
kcHp3qphBrbXf/+NmI6esRIZ8IVzWPA5xkTPmDuhxpp59Q3bbpREFhqaL5neGGMB
sCUs3yb+SJJ81Iv1nJWMkH33O0/8DfuP+eGkhewA24fBnK5ilzEZJqIuoTP9ToGv
Y3ghc85nZix13pQyl1mDopdxW9PK6zLvSvlfyrHfLsZa+P4KIdUGdh2x4+2OhUba
W1v2jbUcaysBdg5Zz01um53NkoHVhUtEwfw84FEShzIIBoLYkgXgPAX6LdDXbMnF
w/7ctjUrTqpOfOFlU8XtoN9YnWDA
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:55 2026 by rpki-client