Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E4F4B60340911F1900A21DCCE1D38B0.roa
File: 8E4F4B60340911F1900A21DCCE1D38B0.roa (raw, json)
Hash identifier: K4UzksyqmU9Ba14U9ISkHGbawSFF69AO61zK0nC+mMo=
Subject key identifier: 5F:45:76:2C:77:82:BF:F7:DD:F4:62:E7:02:3F:09:38:84:9B:8A:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E4F4B60340911F1900A21DCCE1D38B0.roa
Signing time: Thu 09 Apr 2026 11:45:07 +0000
ROA not before: Thu 09 Apr 2026 11:45:03 +0000
ROA not after: Sun 10 May 2026 11:45:03 +0000
asID: 32043
IP address blocks: 45.195.133.0/24 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109393 (0x1ab51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 11:45:03 2026 GMT
Not After : May 10 11:45:03 2026 GMT
Subject: CN=69d79143-fbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:84:60:a5:9f:fb:22:48:a2:3c:5f:b7:06:
9e:12:de:56:8e:f6:d2:fe:3c:fd:ad:f7:9a:a2:05:
9d:07:a3:b6:eb:e1:91:51:7c:27:43:7b:8d:0b:12:
9d:72:59:e4:87:7c:d7:52:d7:2d:6b:76:b2:ae:7a:
5d:44:9a:2e:12:08:c1:24:30:92:50:d3:b1:cd:28:
1e:3b:7e:c5:ae:4e:2d:fc:3e:55:b1:90:2b:b5:e7:
3a:7a:98:eb:f1:d2:91:d9:96:86:fc:0c:1c:05:94:
31:4e:e6:c3:b1:e2:1e:cc:dc:b2:b5:21:56:5d:46:
08:e8:e9:78:37:ac:d0:91:05:68:32:f6:a6:be:4f:
ef:23:7a:23:ad:a3:b9:86:b6:0e:3f:6b:bc:5f:e7:
a2:d7:c8:f8:1a:2e:db:08:5d:04:7a:34:60:f7:3a:
38:1b:c6:fb:63:1d:7c:42:e7:a5:43:9b:44:e8:66:
84:a9:d7:c3:b6:9b:61:1b:c0:64:4e:43:9c:0f:73:
d5:ba:f8:80:ef:1c:b4:48:9a:61:4a:0b:04:43:0f:
19:40:4b:ab:be:c6:f6:22:f9:0d:b1:70:59:58:41:
b6:b3:3a:6b:80:56:7e:80:75:bb:5b:41:03:4b:21:
90:0b:92:67:41:d1:c9:4c:2e:ec:13:03:92:cf:4f:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:76:2C:77:82:BF:F7:DD:F4:62:E7:02:3F:09:38:84:9B:8A:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E4F4B60340911F1900A21DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.133.0/24
45.196.225.0/24
45.196.227.0/24
45.198.228.0/23
45.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b3:d6:fb:11:46:75:a2:85:a2:55:2e:0e:0e:eb:dd:50:5d:
f0:53:2a:19:c8:00:e7:2d:bd:d4:de:bd:15:f7:f2:14:91:42:
29:da:c1:25:94:38:29:9c:4c:e8:fb:a1:9e:67:f4:61:77:b9:
be:92:8c:35:df:95:12:13:11:ba:74:47:19:ae:6f:9a:d4:42:
26:b9:37:28:0c:04:0b:b0:d2:ff:e1:cd:56:e7:87:6a:41:a3:
90:05:2b:f6:35:02:98:44:82:29:e1:3a:2c:32:a7:ff:d1:48:
49:d2:75:e8:01:02:7e:b9:30:0b:01:d4:6c:2c:3e:d5:69:cf:
a9:44:a7:72:75:d4:14:ec:8a:58:d3:51:73:b1:dc:ae:29:79:
26:89:f9:5d:e8:8d:d1:51:26:b9:5d:1b:c5:19:10:cc:37:8a:
2b:a5:2b:8a:29:46:d8:93:39:c2:d3:52:56:9a:14:c1:67:67:
48:5a:af:27:bf:ff:e2:ae:0b:ab:51:a4:bd:37:7c:f4:49:c2:
cb:90:01:a2:46:81:9d:8a:aa:f5:ab:50:49:33:77:fb:22:06:
b8:52:13:5b:79:86:a7:ac:1b:bf:32:e3:63:4d:15:a4:83:29:
5a:cb:1c:79:a0:0d:b2:c0:06:d2:95:5c:cf:54:69:df:9d:83:
28:38:20:0c
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAatRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA5MTE0NTAzWhcNMjYwNTEwMTE0NTAzWjAYMRYw
FAYDVQQDEw02OWQ3OTE0My1mYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1qmEYKWf+yJIojxftwaeEt5WjvbS/jz9rfeaogWdB6O26+GRUXwnQ3uN
CxKdclnkh3zXUtcta3ayrnpdRJouEgjBJDCSUNOxzSgeO37Frk4t/D5VsZArtec6
epjr8dKR2ZaG/AwcBZQxTubDseIezNyytSFWXUYI6Ol4N6zQkQVoMvamvk/vI3oj
raO5hrYOP2u8X+ei18j4Gi7bCF0EejRg9zo4G8b7Yx18QuelQ5tE6GaEqdfDtpth
G8BkTkOcD3PVuviA7xy0SJphSgsEQw8ZQEurvsb2IvkNsXBZWEG2szprgFZ+gHW7
W0EDSyGQC5JnQdHJTC7sEwOSz0/uDQIDAQABo4ICujCCArYwHQYDVR0OBBYEFF9F
dix3gr/33fRi5wI/CTiEm4pWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTRGNEI2MDM0MDkxMUYxOTAwQTIxRENDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALcOFAwQALcThAwQALcTjAwQB
LcbkAwQALc5CMA0GCSqGSIb3DQEBCwUAA4IBAQA2s9b7EUZ1ooWiVS4ODuvdUF3w
UyoZyADnLb3U3r0V9/IUkUIp2sEllDgpnEzo+6GeZ/Rhd7m+kow135USExG6dEcZ
rm+a1EImuTcoDAQLsNL/4c1W54dqQaOQBSv2NQKYRIIp4TosMqf/0UhJ0nXoAQJ+
uTALAdRsLD7Vac+pRKdyddQU7IpY01FzsdyuKXkmifld6I3RUSa5XRvFGRDMN4or
pSuKKUbYkznC01JWmhTBZ2dIWq8nv//irgurUaS9N3z0ScLLkAGiRoGdiqr1q1BJ
M3f7Iga4UhNbeYanrBu/MuNjTRWkgylayxx5oA2ywAbSlVzPVGnfnYMoOCAM
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:25 2026 by rpki-client