Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581A15DC04AE11F185A499DBDAE4EC9C.roa
File: 581A15DC04AE11F185A499DBDAE4EC9C.roa (raw, json)
Hash identifier: XwoqT/sc+nHuMJaWa7RgW3coghmyPiUbL2E/hci4iNk=
Subject key identifier: 03:E9:5D:7A:E5:0E:B2:5F:51:CA:9C:F9:61:3A:96:A9:70:94:8C:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581A15DC04AE11F185A499DBDAE4EC9C.roa
Signing time: Sun 08 Feb 2026 05:23:48 +0000
ROA not before: Sun 08 Feb 2026 05:23:42 +0000
ROA not after: Sun 15 Mar 2026 05:23:42 +0000
asID: 152711
IP address blocks: 45.202.64.0/24 maxlen: 24
45.202.65.0/24 maxlen: 24
45.202.66.0/24 maxlen: 24
45.202.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 22 Feb 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105540 (0x19c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 8 05:23:42 2026 GMT
Not After : Mar 15 05:23:42 2026 GMT
Subject: CN=69881de4-5b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:32:f4:5c:3b:58:6b:b7:46:21:c2:4e:21:
92:ea:17:bb:1c:2d:5d:d5:7d:3b:a2:b0:a0:8e:66:
c1:a9:7a:ff:2c:b8:12:e5:5b:8a:28:ca:b3:bc:df:
49:77:b3:d8:22:f4:4d:3f:3e:4d:68:a3:18:3d:b4:
7b:47:98:1e:bb:3c:b6:d1:d9:2e:01:3f:02:70:46:
a6:b0:d7:4a:71:96:6d:3d:44:33:bc:41:3b:15:00:
53:0a:58:76:4f:4a:23:62:f5:da:b7:c6:87:25:53:
c5:8c:f8:66:e3:97:a0:4a:5a:77:d0:c6:96:dd:5c:
fd:40:4a:bc:d3:8d:09:2f:cb:60:27:7d:86:2b:76:
e3:a2:67:db:9e:d9:2e:a6:6a:f1:00:a9:d0:a6:78:
3e:40:d0:c7:88:9f:48:43:75:c4:1c:b0:98:ba:f1:
9f:f5:51:f7:a6:0f:c6:45:48:7e:38:0e:51:a8:90:
25:f0:aa:c7:79:13:ce:90:7e:28:ea:18:d3:3a:e7:
d3:20:d1:fb:5d:4e:13:0b:ec:c3:d8:b5:fe:08:ad:
6b:61:fe:d9:e7:dc:11:db:4e:f9:81:0b:45:13:67:
af:26:1a:36:35:f9:c5:3f:89:8c:88:4a:0c:00:f8:
a3:52:9f:95:45:c9:a6:49:6d:a9:4a:c5:f9:4f:cb:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:5D:7A:E5:0E:B2:5F:51:CA:9C:F9:61:3A:96:A9:70:94:8C:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581A15DC04AE11F185A499DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.64.0/22
Signature Algorithm: sha256WithRSAEncryption
66:bf:d8:91:ea:83:db:87:98:b5:f2:9d:8f:9a:a5:ab:5b:2f:
aa:c7:8b:d9:13:51:06:01:40:42:8f:15:35:79:d2:ce:5f:af:
6a:6e:d1:e9:cf:5e:0f:c1:cd:b0:31:08:d5:d0:c7:cf:ad:4d:
3b:37:5d:c4:e5:8a:00:35:b1:63:69:56:99:62:57:86:c2:ce:
4f:46:ef:c9:b0:7c:89:ca:6b:60:fe:14:f9:5c:d5:9a:be:4e:
3b:bd:7f:ae:c7:c8:8b:3c:64:30:b2:6b:d4:87:70:0b:bf:38:
fe:17:b9:27:28:bb:31:83:10:33:9f:bf:48:b7:00:21:93:60:
2f:22:a6:f8:b1:87:82:0d:18:c6:24:1b:30:23:19:cd:a3:1d:
ab:37:e2:5e:85:85:2a:ad:bd:58:d5:f4:63:ec:b4:94:bb:74:
b6:f9:07:ee:13:46:ca:d0:9f:1e:0a:ae:14:f0:1d:e9:b4:dc:
b4:5f:1a:be:31:95:84:ad:48:54:b2:c1:61:08:e3:1d:9d:1b:
ff:55:ef:45:85:91:73:d5:11:99:d0:f5:07:43:6f:ac:2e:3c:
43:bd:c9:78:3a:70:16:7f:b4:59:ce:28:85:bd:a2:88:43:db:
0e:f4:0a:0b:84:da:b7:43:57:ae:47:c5:f2:30:ae:6c:7f:f4:
cc:e4:b1:97
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZxEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA4MDUyMzQyWhcNMjYwMzE1MDUyMzQyWjAYMRYw
FAYDVQQDEw02OTg4MWRlNC01Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqzcy9Fw7WGu3RiHCTiGS6he7HC1d1X07orCgjmbBqXr/LLgS5VuKKMqz
vN9Jd7PYIvRNPz5NaKMYPbR7R5geuzy20dkuAT8CcEamsNdKcZZtPUQzvEE7FQBT
Clh2T0ojYvXat8aHJVPFjPhm45egSlp30MaW3Vz9QEq8040JL8tgJ32GK3bjomfb
ntkupmrxAKnQpng+QNDHiJ9IQ3XEHLCYuvGf9VH3pg/GRUh+OA5RqJAl8KrHeRPO
kH4o6hjTOufTINH7XU4TC+zD2LX+CK1rYf7Z59wR2075gQtFE2evJho2NfnFP4mM
iEoMAPijUp+VRcmmSW2pSsX5T8sO5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAPp
XXrlDrJfUcqc+WE6lqlwlIxBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODFBMTVEQzA0QUUxMUYxODVBNDk5REJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcpAMA0GCSqGSIb3DQEBCwUA
A4IBAQBmv9iR6oPbh5i18p2PmqWrWy+qx4vZE1EGAUBCjxU1edLOX69qbtHpz14P
wc2wMQjV0MfPrU07N13E5YoANbFjaVaZYleGws5PRu/JsHyJymtg/hT5XNWavk47
vX+ux8iLPGQwsmvUh3ALvzj+F7knKLsxgxAzn79ItwAhk2AvIqb4sYeCDRjGJBsw
IxnNox2rN+JehYUqrb1Y1fRj7LSUu3S2+QfuE0bK0J8eCq4U8B3ptNy0Xxq+MZWE
rUhUssFhCOMdnRv/Ve9FhZFz1RGZ0PUHQ2+sLjxDvcl4OnAWf7RZziiFvaKIQ9sO
9AoLhNq3Q1euR8XyMK5sf/TM5LGX
-----END CERTIFICATE-----
Generated at Fri Feb 20 04:39:55 2026 by rpki-client