Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746685381B9011F1B5B7F779DAE4EC9C.roa
File: 746685381B9011F1B5B7F779DAE4EC9C.roa (raw, json)
Hash identifier: MjDtbk2mpKl0NJOex1qvBhmXk6gMSXjxfesh0vzDYIo=
Subject key identifier: 6C:31:6C:55:5E:FA:61:9B:C4:0A:DB:2D:F7:08:51:F3:22:A8:81:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A36B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746685381B9011F1B5B7F779DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:17:47 +0000
ROA not before: Mon 09 Mar 2026 08:17:41 +0000
ROA not after: Thu 09 Apr 2026 08:17:41 +0000
asID: 139613
IP address blocks: 45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.207.224.0/19 maxlen: 24
45.207.224.0/20 maxlen: 24
45.207.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107371 (0x1a36b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 08:17:41 2026 GMT
Not After : Apr 9 08:17:41 2026 GMT
Subject: CN=69ae822b-8f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:1a:dd:09:5c:5e:59:0b:df:11:e5:e9:db:
8a:81:b9:86:55:de:c0:bc:48:b5:e1:d4:c2:db:05:
ec:1c:39:03:d7:9d:9d:90:2f:9c:e4:af:41:27:31:
7d:8c:9e:86:f5:2f:3d:9f:14:21:7e:4e:85:51:a2:
d1:44:23:86:a7:89:f4:f5:75:ec:98:76:de:c7:3f:
42:22:17:12:f2:97:5d:ae:76:a0:c7:a8:7e:96:67:
e7:5d:ee:72:5f:cc:43:95:45:7c:07:04:c9:e0:81:
dd:61:70:10:04:04:e1:39:60:31:6f:d6:e0:b1:3c:
7f:f1:0d:fd:b0:f2:96:06:79:81:7a:30:47:22:49:
b3:a6:b3:8e:82:88:08:e0:62:5e:f6:4c:09:7a:09:
e2:d5:ab:ad:78:b2:3c:69:10:02:00:41:7c:94:d7:
a4:2a:eb:71:03:e9:72:83:09:f1:47:c3:c4:cb:32:
7a:a6:cf:65:0c:e6:58:bf:0a:94:e3:4b:27:81:50:
c2:57:0e:33:06:c2:da:77:64:42:89:79:2e:3e:db:
1b:50:27:76:92:6c:ca:50:70:80:27:8d:73:5c:b5:
68:c6:7a:71:41:ed:52:e9:97:a1:53:90:2a:d7:4e:
72:d9:3d:0f:c4:c1:9b:64:d2:05:37:51:81:a9:4a:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:6C:55:5E:FA:61:9B:C4:0A:DB:2D:F7:08:51:F3:22:A8:81:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/746685381B9011F1B5B7F779DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.214.0-45.201.231.255
45.201.240.0/20
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:9f:74:d6:8a:d5:ed:28:96:88:0e:cc:0f:d4:dc:da:ed:c2:
5b:39:01:b0:8a:3a:6c:da:47:fc:06:17:32:f0:b6:6d:83:1c:
2a:76:50:e8:57:11:85:c3:f3:b9:47:49:1d:4e:74:34:46:46:
f9:f1:b1:5a:91:d6:22:87:0c:43:8c:87:72:5f:86:30:da:7b:
47:c5:72:61:14:3c:9b:74:f1:3d:ff:73:1c:57:f6:19:af:cf:
93:f3:c9:bc:a8:6a:f9:76:ee:16:fe:84:41:b5:9f:6f:fb:63:
b5:4c:7c:9c:29:5c:c6:fe:d2:cd:dc:9f:e5:fa:45:f6:81:d9:
d9:62:ca:79:be:05:cf:14:cb:8b:96:b9:6f:aa:7a:58:93:b6:
60:44:ce:09:18:18:e9:f5:98:fe:8e:2d:c7:52:b5:a2:f9:72:
02:6c:87:f8:84:f7:1c:78:9a:1f:56:d1:c1:74:0c:43:4d:02:
a6:f3:89:bd:0e:d5:b8:a3:3c:c0:7e:62:93:c4:5a:8a:16:95:
d0:45:12:5d:71:75:e5:59:cb:e7:51:c8:c4:d8:53:8e:c6:b4:
57:ac:68:5d:e6:66:59:b2:29:7e:3a:8d:fe:e6:53:f2:a1:9d:
76:90:af:49:38:0f:60:86:11:e1:3b:8d:b3:02:04:28:69:6c:
fa:ef:1c:a7
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAaNrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA5MDgxNzQxWhcNMjYwNDA5MDgxNzQxWjAYMRYw
FAYDVQQDEw02OWFlODIyYi04ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtLYa3QlcXlkL3xHl6duKgbmGVd7AvEi14dTC2wXsHDkD152dkC+c5K9B
JzF9jJ6G9S89nxQhfk6FUaLRRCOGp4n09XXsmHbexz9CIhcS8pddrnagx6h+lmfn
Xe5yX8xDlUV8BwTJ4IHdYXAQBAThOWAxb9bgsTx/8Q39sPKWBnmBejBHIkmzprOO
gogI4GJe9kwJegni1auteLI8aRACAEF8lNekKutxA+lygwnxR8PEyzJ6ps9lDOZY
vwqU40sngVDCVw4zBsLad2RCiXkuPtsbUCd2kmzKUHCAJ41zXLVoxnpxQe1S6Zeh
U5Aq105y2T0PxMGbZNIFN1GBqUp3dQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGwx
bFVe+mGbxArbLfcIUfMiqIE+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDY2ODUzODFCOTAxMUYxQjVCN0Y3NzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAEtydYDBAMtyeADBAQtyfAD
BAUtz+AwDQYJKoZIhvcNAQELBQADggEBAA6fdNaK1e0ologOzA/U3Nrtwls5AbCK
OmzaR/wGFzLwtm2DHCp2UOhXEYXD87lHSR1OdDRGRvnxsVqR1iKHDEOMh3JfhjDa
e0fFcmEUPJt08T3/cxxX9hmvz5Pzybyoavl27hb+hEG1n2/7Y7VMfJwpXMb+0s3c
n+X6RfaB2dliynm+Bc8Uy4uWuW+qeliTtmBEzgkYGOn1mP6OLcdStaL5cgJsh/iE
9xx4mh9W0cF0DENNAqbzib0O1bijPMB+YpPEWooWldBFEl1xdeVZy+dRyMTYU47G
tFesaF3mZlmyKX46jf7mU/KhnXaQr0k4D2CGEeE7jbMCBChpbPrvHKc=
-----END CERTIFICATE-----
Generated at Mon Mar 9 14:05:42 2026 by rpki-client