Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65A530C839BB11F1918BCE03CF1D38B0.roa
File: 65A530C839BB11F1918BCE03CF1D38B0.roa (raw, json)
Hash identifier: GaOa/B5Es+oi2qlGbm53/3q9J2IdNvGg029m8mi0KB8=
Subject key identifier: D3:85:31:5F:0C:25:72:7D:76:81:07:83:23:44:0A:EA:1F:AB:CF:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65A530C839BB11F1918BCE03CF1D38B0.roa
Signing time: Thu 16 Apr 2026 17:40:45 +0000
ROA not before: Thu 16 Apr 2026 17:40:41 +0000
ROA not after: Thu 30 Apr 2026 17:40:41 +0000
asID: 32043
IP address blocks: 45.197.168.0/22 maxlen: 24
45.203.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109907 (0x1ad53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 17:40:41 2026 GMT
Not After : Apr 30 17:40:41 2026 GMT
Subject: CN=69e11f1d-5102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:13:2b:ed:f6:2d:7c:90:78:5d:1e:df:68:
cd:da:a9:92:4c:c2:37:29:e3:29:da:53:b4:bc:c0:
45:fd:e0:30:c3:8c:be:44:88:74:2f:ee:cf:30:6a:
aa:2b:cf:61:92:3e:ae:44:db:0f:d0:56:09:05:a0:
e8:7f:7a:e9:0f:bb:cc:f6:c3:87:75:10:6a:57:9e:
a9:03:f7:24:85:93:8e:64:7b:f1:09:6b:c8:72:72:
56:af:62:07:c8:a3:41:96:9e:18:7c:2e:6d:7a:4a:
e2:72:50:a4:14:d8:63:34:f9:41:bc:06:49:55:ad:
8f:1b:de:1e:60:ce:71:f5:d3:f3:aa:64:b7:39:e1:
3d:bf:c5:3e:f2:40:1a:f4:72:e9:b4:dc:67:07:b3:
af:0f:54:a4:ad:99:8d:90:ad:71:df:f0:09:7c:9e:
dc:bb:6d:e7:ec:e2:b8:6c:41:4b:86:77:38:5e:96:
f4:9a:bf:48:d2:f1:99:43:13:08:71:2e:13:35:b1:
9f:c6:57:82:dd:60:89:60:d2:f8:ad:1b:49:0a:64:
c5:db:d2:34:e3:d7:b5:1a:5f:71:af:8f:4c:cf:7c:
2c:2b:ef:1f:88:16:71:b3:f1:56:13:16:dd:1b:03:
1c:24:49:d0:e7:4c:18:e9:2a:03:8e:f4:a4:d6:aa:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:31:5F:0C:25:72:7D:76:81:07:83:23:44:0A:EA:1F:AB:CF:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65A530C839BB11F1918BCE03CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.168.0/22
45.203.48.0/22
Signature Algorithm: sha256WithRSAEncryption
24:92:8d:78:de:a1:28:b8:0c:89:b6:64:f0:14:41:57:e6:e9:
c3:27:1d:a9:be:1c:7e:07:4f:2a:2e:f2:a8:e5:ab:0a:0b:cb:
0b:bd:f2:6c:05:3a:b7:0f:49:a1:e3:ce:3b:da:1c:2e:34:ef:
f5:91:b6:28:98:c6:33:f2:ce:83:dd:75:81:87:28:e8:81:f0:
bf:ce:39:03:ad:c7:c5:22:fb:12:f9:12:c9:19:55:97:ad:5f:
27:a8:74:b0:37:b4:38:d2:fd:ea:20:46:d8:6a:33:6e:71:72:
ea:5f:0d:3e:41:e1:4a:7c:db:41:6d:5c:2c:3b:4e:e6:7b:90:
07:6f:27:5e:b1:22:3c:90:11:3c:5a:ca:83:6f:e9:5a:0f:7b:
be:f5:cc:8e:0d:00:82:bc:1e:b3:3e:06:05:6c:2f:11:f2:f1:
00:a5:59:df:07:01:8c:c7:a4:e5:d0:8f:d5:37:c6:6e:48:6b:
32:c6:b5:b8:1a:99:40:75:8c:9e:8e:9f:7b:01:d2:7d:8f:89:
61:16:ca:0d:50:6a:a7:ab:7b:36:2e:2d:0a:c2:be:c5:ff:27:
ab:99:60:b0:72:66:09:cc:3a:77:11:d7:54:93:37:4d:09:c5:
f8:f0:0d:8b:80:0c:7d:93:18:3b:6c:ff:29:1c:2a:8e:d9:0b:
76:dc:eb:bf
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAa1TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE2MTc0MDQxWhcNMjYwNDMwMTc0MDQxWjAYMRYw
FAYDVQQDEw02OWUxMWYxZC01MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwEsTK+32LXyQeF0e32jN2qmSTMI3KeMp2lO0vMBF/eAww4y+RIh0L+7P
MGqqK89hkj6uRNsP0FYJBaDof3rpD7vM9sOHdRBqV56pA/ckhZOOZHvxCWvIcnJW
r2IHyKNBlp4YfC5tekriclCkFNhjNPlBvAZJVa2PG94eYM5x9dPzqmS3OeE9v8U+
8kAa9HLptNxnB7OvD1SkrZmNkK1x3/AJfJ7cu23n7OK4bEFLhnc4Xpb0mr9I0vGZ
QxMIcS4TNbGfxleC3WCJYNL4rRtJCmTF29I049e1Gl9xr49Mz3wsK+8fiBZxs/FW
ExbdGwMcJEnQ50wY6SoDjvSk1qrRxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOF
MV8MJXJ9doEHgyNECuofq8+sMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NUE1MzBDODM5QkIxMUYxOTE4QkNFMDNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLcWoAwQCLcswMA0GCSqGSIb3
DQEBCwUAA4IBAQAkko143qEouAyJtmTwFEFX5unDJx2pvhx+B08qLvKo5asKC8sL
vfJsBTq3D0mh48472hwuNO/1kbYomMYz8s6D3XWBhyjogfC/zjkDrcfFIvsS+RLJ
GVWXrV8nqHSwN7Q40v3qIEbYajNucXLqXw0+QeFKfNtBbVwsO07me5AHbydesSI8
kBE8WsqDb+laD3u+9cyODQCCvB6zPgYFbC8R8vEApVnfBwGMx6Tl0I/VN8ZuSGsy
xrW4GplAdYyejp97AdJ9j4lhFsoNUGqnq3s2Li0Kwr7F/yermWCwcmYJzDp3EddU
kzdNCcX48A2LgAx9kxg7bP8pHCqO2Qt23Ou/
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:53 2026 by rpki-client