Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/636739EA30D411F198E024B8DAE4EC9C.roa
File: 636739EA30D411F198E024B8DAE4EC9C.roa (raw, json)
Hash identifier: nxuD9+U+pkJuDfxos7adCQNfs/C74HkGSeB0K9H9mEA=
Subject key identifier: E5:A5:42:9F:3D:D5:1A:5E:76:39:83:49:0D:F2:47:5A:3D:C7:B5:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/636739EA30D411F198E024B8DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 09:46:59 +0000
ROA not before: Sun 05 Apr 2026 09:46:54 +0000
ROA not after: Sat 02 May 2026 09:46:54 +0000
asID: 61112
IP address blocks: 45.207.156.0/23 maxlen: 24
45.207.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109072 (0x1aa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 09:46:54 2026 GMT
Not After : May 2 09:46:54 2026 GMT
Subject: CN=69d22f93-e16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:ea:06:f2:94:2f:8a:db:e7:96:4d:6b:40:
54:0f:22:ce:a8:db:95:51:d6:17:77:a4:cb:6f:e0:
45:2a:61:87:de:71:a0:94:60:ca:4a:51:21:fd:c6:
24:b1:2a:04:2e:47:f2:ce:13:e2:fd:f9:1f:6e:03:
3f:82:84:d9:14:e8:96:ec:f5:40:bd:1d:6a:fd:ba:
a8:d2:f3:09:f3:19:06:64:86:76:f2:bb:50:a4:5c:
90:f0:5f:25:62:dd:3b:cd:61:2d:ba:92:ac:a8:dd:
bd:5f:14:e5:26:ef:c7:ef:da:fa:6e:d1:ba:73:3c:
a2:41:8e:35:60:4c:8f:88:39:e9:88:64:e0:0f:4b:
c8:1d:92:b6:4d:18:45:71:1e:01:8c:bf:77:fa:c7:
8a:e7:1f:5e:8d:d9:7f:bc:a9:2c:54:cd:0a:89:66:
9c:12:4b:85:b7:31:cf:5d:77:4f:58:9b:fb:c3:54:
19:83:9c:da:60:5f:a9:50:e4:e6:a7:51:79:87:35:
ca:e6:2f:ac:5c:43:e1:1f:47:6c:13:50:00:8a:0e:
32:87:fe:1c:89:e4:a9:b3:a7:35:19:c0:46:7a:40:
06:5e:2c:83:bd:09:b3:5e:7b:2e:79:ca:a3:3e:a6:
90:6f:ef:ae:f5:95:9e:00:0e:7f:bb:ca:2b:4d:c6:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A5:42:9F:3D:D5:1A:5E:76:39:83:49:0D:F2:47:5A:3D:C7:B5:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/636739EA30D411F198E024B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.156.0/22
Signature Algorithm: sha256WithRSAEncryption
af:7d:72:ac:fc:4a:81:7a:b6:fe:50:e9:15:03:17:6f:d6:13:
a5:51:48:8b:f4:f0:0d:d6:5e:28:f7:75:d8:51:bd:0b:45:8f:
3e:3e:77:51:49:2b:0e:ad:47:86:09:c5:05:0f:35:43:fe:cd:
2a:18:e9:1a:80:84:fc:94:9a:69:bf:fe:32:c2:44:70:ae:c4:
2c:39:3f:35:89:ce:9e:5e:f1:5c:64:2b:97:5b:45:0e:1b:5c:
7f:a0:c6:36:b5:64:2b:ca:bb:c0:97:bc:23:64:ab:86:a4:48:
c5:c9:2f:25:b5:23:c0:54:e3:a0:f5:67:98:80:0e:b8:b7:06:
f1:b4:34:45:e8:73:ca:2a:a6:3d:4e:28:f1:05:dc:fa:e5:fa:
54:c7:c4:e0:67:d5:ad:c8:e6:a6:d4:4e:eb:cf:39:b3:56:76:
f2:7d:da:d7:a9:42:b6:d5:02:1d:f1:05:92:17:d0:7b:21:55:
9e:00:41:37:d4:3a:b0:7f:8c:0a:58:99:57:ad:70:c0:2b:b3:
20:aa:32:2b:b8:11:7d:3a:49:03:d3:f1:69:d9:0d:61:7c:8b:
9d:10:18:33:b9:5c:0c:ea:cd:17:e7:b3:e7:4e:31:8b:da:f8:
40:bb:9c:9d:c6:c7:c6:22:79:3a:8b:ff:96:aa:47:0e:c8:35:
58:de:e5:19
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaoQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA1MDk0NjU0WhcNMjYwNTAyMDk0NjU0WjAYMRYw
FAYDVQQDEw02OWQyMmY5My1lMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2OvqBvKUL4rb55ZNa0BUDyLOqNuVUdYXd6TLb+BFKmGH3nGglGDKSlEh
/cYksSoELkfyzhPi/fkfbgM/goTZFOiW7PVAvR1q/bqo0vMJ8xkGZIZ28rtQpFyQ
8F8lYt07zWEtupKsqN29XxTlJu/H79r6btG6czyiQY41YEyPiDnpiGTgD0vIHZK2
TRhFcR4BjL93+seK5x9ejdl/vKksVM0KiWacEkuFtzHPXXdPWJv7w1QZg5zaYF+p
UOTmp1F5hzXK5i+sXEPhH0dsE1AAig4yh/4cieSps6c1GcBGekAGXiyDvQmzXnsu
ecqjPqaQb++u9ZWeAA5/u8orTcZOWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOWl
Qp891RpedjmDSQ3yR1o9x7XEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MzY3MzlFQTMwRDQxMUYxOThFMDI0QjhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLc+cMA0GCSqGSIb3DQEBCwUA
A4IBAQCvfXKs/EqBerb+UOkVAxdv1hOlUUiL9PAN1l4o93XYUb0LRY8+PndRSSsO
rUeGCcUFDzVD/s0qGOkagIT8lJppv/4ywkRwrsQsOT81ic6eXvFcZCuXW0UOG1x/
oMY2tWQryrvAl7wjZKuGpEjFyS8ltSPAVOOg9WeYgA64twbxtDRF6HPKKqY9Tijx
Bdz65fpUx8TgZ9WtyOam1E7rzzmzVnbyfdrXqUK21QId8QWSF9B7IVWeAEE31Dqw
f4wKWJlXrXDAK7MgqjIruBF9OkkD0/Fp2Q1hfIudEBgzuVwM6s0X57PnTjGL2vhA
u5ydxsfGInk6i/+WqkcOyDVY3uUZ
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:52 2026 by rpki-client