Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7B5E4017D211F1A714CBF0DAE4EC9C.roa
File: 8B7B5E4017D211F1A714CBF0DAE4EC9C.roa (raw, json)
Hash identifier: GM6JXkTcvAQfTP4ZhdGu6N0GcK5iJo/MResD51H4+VI=
Subject key identifier: 26:B0:C4:46:0C:03:20:6D:8F:D6:7F:FB:B8:49:76:D0:46:99:22:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A266
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7B5E4017D211F1A714CBF0DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 14:00:48 +0000
ROA not before: Wed 04 Mar 2026 14:00:44 +0000
ROA not after: Sun 26 Apr 2026 14:00:44 +0000
asID: 48678
IP address blocks: 45.192.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107110 (0x1a266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 14:00:44 2026 GMT
Not After : Apr 26 14:00:44 2026 GMT
Subject: CN=69a83b10-cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:19:2b:81:bb:f4:a6:63:dd:6d:61:5f:7d:
0c:2e:21:96:c0:de:e9:ba:15:de:7d:18:8a:29:69:
35:8b:78:b1:91:bd:b6:c1:9a:5e:33:6e:bb:18:a6:
b5:ae:83:62:6c:2d:96:c7:f6:9d:d1:81:ea:cd:91:
23:9b:a8:6d:b0:8b:8d:e8:44:be:2a:df:44:00:a9:
ae:68:20:7e:20:95:58:74:23:b8:4b:6e:3c:0f:a7:
0c:46:e3:5c:b5:ef:30:95:46:19:ad:41:b4:1b:6c:
d5:d7:2f:b1:61:f2:0b:14:4e:f3:4f:bd:d6:26:73:
db:40:53:61:15:5d:41:5f:36:ac:8c:e5:a3:b2:e2:
c8:e2:c0:74:44:3e:e7:f2:c9:10:30:a5:53:26:9c:
ad:72:19:f9:ab:7e:09:c3:4e:35:72:3d:7e:e2:79:
b8:57:3a:59:90:69:43:51:d4:87:f8:9d:b9:84:ea:
5d:55:5a:5a:ee:34:e0:83:17:85:28:51:3c:b3:41:
b7:b9:b1:81:29:ef:32:e9:17:eb:b2:e4:d7:52:7f:
2e:9c:8e:85:3c:67:1a:46:59:71:70:5a:a0:02:66:
c0:c1:5f:cc:6f:d4:06:4b:90:ba:e0:de:58:8b:ca:
e7:19:db:1a:7f:21:06:40:56:27:fe:3c:97:b3:23:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:C4:46:0C:03:20:6D:8F:D6:7F:FB:B8:49:76:D0:46:99:22:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7B5E4017D211F1A714CBF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:5b:bd:73:d1:6e:ed:39:c4:43:a0:fb:6e:f2:9b:23:c0:ea:
73:c3:7c:a9:78:ac:41:49:7b:b4:28:69:51:6e:4e:58:e0:e3:
95:6b:41:e1:b7:da:40:16:6a:1f:4a:28:97:3f:73:5d:51:62:
dc:ea:8c:91:e4:6b:13:d0:5f:d1:78:70:d8:eb:f0:a5:06:1e:
f6:ee:ce:32:6f:75:6a:e9:16:45:a4:a3:54:39:29:c9:c2:79:
ab:fb:02:ea:b2:de:b7:c4:9f:1c:35:c8:f9:4f:f6:3f:a3:2a:
55:4e:a1:fd:52:07:f6:76:cb:46:dc:d0:99:a0:b7:34:91:34:
18:b7:71:c1:7e:de:7b:1e:ac:aa:9e:ab:9a:57:08:a5:79:54:
9c:d1:4b:73:e1:59:64:ee:db:d0:91:74:a1:45:53:c1:fe:6c:
fb:4a:58:af:a1:c3:c8:75:f6:05:d4:3e:5b:be:26:d4:9f:d7:
4e:82:cf:76:00:59:ae:e9:f3:2e:07:1e:cf:cb:10:cb:df:c1:
51:2e:b8:bc:fa:b5:bd:a0:73:58:cc:7a:f3:a9:a6:fa:92:f3:
dc:09:d4:35:45:55:6d:08:83:85:34:6a:61:82:65:aa:78:d5:
fa:86:5f:9d:91:08:70:53:4e:98:a9:8f:bf:20:2d:2b:77:40:
d5:b7:01:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaJmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA0MTQwMDQ0WhcNMjYwNDI2MTQwMDQ0WjAYMRYw
FAYDVQQDEw02OWE4M2IxMC1jYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt5IZK4G79KZj3W1hX30MLiGWwN7puhXefRiKKWk1i3ixkb22wZpeM267
GKa1roNibC2Wx/ad0YHqzZEjm6htsIuN6ES+Kt9EAKmuaCB+IJVYdCO4S248D6cM
RuNcte8wlUYZrUG0G2zV1y+xYfILFE7zT73WJnPbQFNhFV1BXzasjOWjsuLI4sB0
RD7n8skQMKVTJpytchn5q34Jw041cj1+4nm4VzpZkGlDUdSH+J25hOpdVVpa7jTg
gxeFKFE8s0G3ubGBKe8y6RfrsuTXUn8unI6FPGcaRllxcFqgAmbAwV/Mb9QGS5C6
4N5Yi8rnGdsafyEGQFYn/jyXsyP9fQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCaw
xEYMAyBtj9Z/+7hJdtBGmSIeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QjdCNUU0MDE3RDIxMUYxQTcxNENCRjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCFMA0GCSqGSIb3DQEBCwUA
A4IBAQC5W71z0W7tOcRDoPtu8psjwOpzw3ypeKxBSXu0KGlRbk5Y4OOVa0Hht9pA
FmofSiiXP3NdUWLc6oyR5GsT0F/ReHDY6/ClBh727s4yb3Vq6RZFpKNUOSnJwnmr
+wLqst63xJ8cNcj5T/Y/oypVTqH9Ugf2dstG3NCZoLc0kTQYt3HBft57Hqyqnqua
VwileVSc0Utz4Vlk7tvQkXShRVPB/mz7SlivocPIdfYF1D5bvibUn9dOgs92AFmu
6fMuBx7PyxDL38FRLri8+rW9oHNYzHrzqab6kvPcCdQ1RVVtCIOFNGphgmWqeNX6
hl+dkQhwU06YqY+/IC0rd0DVtwF+
-----END CERTIFICATE-----
Generated at Thu Mar 5 20:25:34 2026 by rpki-client