Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ACFE42A332511F1B27D4CF3CE1D38B0.roa
File: 8ACFE42A332511F1B27D4CF3CE1D38B0.roa (raw, json)
Hash identifier: hQaqQzHf+kQULv1/cvDN7DGNWriORgfmNspb+kynIac=
Subject key identifier: 69:7A:20:BB:67:4D:11:ED:41:DF:56:1F:8F:FF:EB:9E:88:B9:EE:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AAF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ACFE42A332511F1B27D4CF3CE1D38B0.roa
Signing time: Wed 08 Apr 2026 08:32:56 +0000
ROA not before: Wed 08 Apr 2026 08:32:52 +0000
ROA not after: Wed 20 May 2026 08:32:52 +0000
asID: 214413
IP address blocks: 45.194.87.0/24 maxlen: 24
45.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109298 (0x1aaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 8 08:32:52 2026 GMT
Not After : May 20 08:32:52 2026 GMT
Subject: CN=69d612b8-bbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:60:2e:68:8d:8f:a1:9d:6d:ef:b7:92:58:
3e:3e:85:5b:e7:76:f2:86:86:15:25:4b:da:71:ee:
c9:45:37:49:7f:1f:90:8e:2e:e3:0b:97:cf:b0:a8:
8d:10:c1:12:58:5c:47:05:c6:0e:54:73:a0:36:0e:
33:ba:5f:2e:0a:a3:97:c7:9f:de:cf:22:5c:79:6a:
d1:ea:bb:01:41:6a:c0:84:4d:de:ab:43:26:44:b0:
0a:d9:d7:22:90:75:47:c1:d7:2d:ef:e5:63:a5:4a:
14:f9:12:1e:e6:b4:0a:db:11:06:b2:47:76:48:86:
88:3f:c8:d6:88:96:45:2a:62:0f:3a:8d:8a:c4:27:
94:57:cf:a2:5f:b2:cc:de:83:6e:9b:9d:9a:ff:28:
9e:5d:43:21:52:06:2b:fc:0f:54:9e:54:1b:52:82:
ff:c7:a5:8a:4f:b4:05:12:0e:04:cf:73:1f:f4:58:
16:5e:03:ef:f4:f1:53:d3:0a:ed:0b:4c:a0:19:3e:
0d:5f:c4:b3:9e:85:ed:b6:56:92:57:25:ce:31:a2:
09:d9:de:5e:ef:01:78:32:01:cc:70:cd:7f:1c:cb:
0b:06:62:fb:ce:2f:70:53:52:f4:e6:70:5b:2f:82:
1c:39:a1:a1:98:88:c1:22:c0:31:c4:60:5d:e1:e2:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7A:20:BB:67:4D:11:ED:41:DF:56:1F:8F:FF:EB:9E:88:B9:EE:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ACFE42A332511F1B27D4CF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.87.0/24
45.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bd:65:a7:e4:9b:3e:f0:c5:45:fa:17:31:2e:0f:eb:a8:ae:
14:b6:19:f1:f2:23:bd:50:8f:ee:55:36:b7:50:94:b6:a7:a3:
b3:ea:09:45:92:42:f4:ac:55:ad:66:ef:49:ef:ac:c2:fd:b4:
3d:ab:6c:a4:2c:61:fe:fe:bd:b0:f8:4c:68:93:ef:98:09:81:
12:9d:15:4c:87:d5:cf:8c:35:91:cb:b1:47:fa:67:e7:50:a9:
d4:d9:09:6d:6e:50:24:88:55:e5:32:dd:f1:f2:a0:b9:de:67:
57:90:ba:1a:61:6e:1e:b5:a4:72:67:e8:a3:aa:56:b6:b7:e4:
ab:6a:96:5d:be:8b:a7:62:b7:36:8c:10:56:a1:a3:90:5b:84:
c8:32:0b:9b:53:b8:38:f8:59:96:28:70:ff:3e:f8:ea:97:d0:
a2:79:a2:12:04:b9:59:de:82:15:82:5b:c5:d3:01:00:3b:3f:
f8:0e:0e:92:b6:2b:e4:89:f6:94:a6:61:b8:f6:34:e6:26:b2:
89:25:1c:99:c0:18:94:72:49:10:d7:62:58:0f:70:02:f2:35:
32:3e:31:a7:dd:ba:f6:c3:c2:43:7d:d5:45:c4:c9:c4:01:c4:
59:af:b1:59:df:e8:d6:b0:f8:7e:1c:61:d7:22:9a:82:bd:ee:
d9:00:ed:6d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAaryMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA4MDgzMjUyWhcNMjYwNTIwMDgzMjUyWjAYMRYw
FAYDVQQDEw02OWQ2MTJiOC1iYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvXNgLmiNj6Gdbe+3klg+PoVb53byhoYVJUvace7JRTdJfx+Qji7jC5fP
sKiNEMESWFxHBcYOVHOgNg4zul8uCqOXx5/ezyJceWrR6rsBQWrAhE3eq0MmRLAK
2dcikHVHwdct7+VjpUoU+RIe5rQK2xEGskd2SIaIP8jWiJZFKmIPOo2KxCeUV8+i
X7LM3oNum52a/yieXUMhUgYr/A9UnlQbUoL/x6WKT7QFEg4Ez3Mf9FgWXgPv9PFT
0wrtC0ygGT4NX8SznoXttlaSVyXOMaIJ2d5e7wF4MgHMcM1/HMsLBmL7zi9wU1L0
5nBbL4IcOaGhmIjBIsAxxGBd4eICwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl6
ILtnTRHtQd9WH4//656Iue7fMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QUNGRTQyQTMzMjUxMUYxQjI3RDRDRjNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcJXAwQALcJfMA0GCSqGSIb3
DQEBCwUAA4IBAQCTvWWn5Js+8MVF+hcxLg/rqK4Uthnx8iO9UI/uVTa3UJS2p6Oz
6glFkkL0rFWtZu9J76zC/bQ9q2ykLGH+/r2w+Exok++YCYESnRVMh9XPjDWRy7FH
+mfnUKnU2QltblAkiFXlMt3x8qC53mdXkLoaYW4etaRyZ+ijqla2t+SrapZdvoun
Yrc2jBBWoaOQW4TIMgubU7g4+FmWKHD/Pvjql9CieaISBLlZ3oIVglvF0wEAOz/4
Dg6StivkifaUpmG49jTmJrKJJRyZwBiUckkQ12JYD3AC8jUyPjGn3br2w8JDfdVF
xMnEAcRZr7FZ3+jWsPh+HGHXIpqCve7ZAO1t
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:03 2026 by rpki-client