Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7D117AA255111F1A4C430D9DAE4EC9C.roa
File: B7D117AA255111F1A4C430D9DAE4EC9C.roa (raw, json)
Hash identifier: FLp5h9Tj2tBhYSfMIkKr5etviVIU9qryqAzrc1c+2vk=
Subject key identifier: F5:0A:09:C7:3A:E9:94:EA:6B:02:15:0F:A8:44:6E:B8:11:7D:CF:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7D117AA255111F1A4C430D9DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 18:13:54 +0000
ROA not before: Sat 21 Mar 2026 18:13:47 +0000
ROA not after: Tue 31 Mar 2026 18:13:47 +0000
asID: 136907
IP address blocks: 45.202.128.0/19 maxlen: 24
45.202.160.0/20 maxlen: 24
45.202.176.0/21 maxlen: 24
45.202.184.0/21 maxlen: 24
45.203.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108193 (0x1a6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 18:13:47 2026 GMT
Not After : Mar 31 18:13:47 2026 GMT
Subject: CN=69bedfe1-48d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:35:73:31:df:3b:d5:64:96:8e:6d:df:94:
7a:5c:7c:4d:d3:17:6b:54:41:8f:d2:e3:36:d7:8a:
a5:b9:dd:37:a9:2c:6d:45:48:32:40:c7:eb:a6:75:
91:9d:10:bb:59:d4:1b:3e:19:68:03:51:27:58:24:
a5:90:95:df:b8:e4:c6:ae:f6:30:f2:2f:70:e2:4f:
96:2f:7b:9b:17:a8:54:ce:7e:68:7a:b5:79:fe:8d:
24:af:18:b7:b1:b0:58:c0:ac:9c:97:ec:b9:78:4a:
a7:c4:ea:b9:48:37:88:30:04:d8:85:80:46:9b:9b:
c7:22:08:05:02:96:11:a4:c4:f3:71:0a:a2:43:f8:
ba:d3:8c:53:44:2c:bd:91:81:e5:25:e6:d8:2c:d6:
40:cc:4b:27:38:49:66:ce:5c:6d:49:c0:70:31:0f:
fa:bc:92:27:43:d1:44:e4:ee:42:bb:7c:b1:1f:1d:
35:63:07:98:67:9b:60:6c:5b:bc:53:bd:e6:71:dd:
97:01:ec:b1:74:68:54:4c:ca:c9:93:5a:a0:c4:9b:
42:57:f4:e3:96:8a:9b:a6:c2:52:c5:a9:18:45:66:
0d:d5:55:4f:2e:ee:83:21:ca:71:d6:ea:9e:c7:0b:
14:e9:04:61:f4:ea:bc:91:be:87:ec:7d:74:dd:e4:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0A:09:C7:3A:E9:94:EA:6B:02:15:0F:A8:44:6E:B8:11:7D:CF:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7D117AA255111F1A4C430D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.128.0/18
45.203.40.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:96:db:79:e2:36:94:5e:bd:d5:06:66:07:55:a6:f0:34:d6:
50:5a:a7:df:c0:14:72:55:67:38:9f:64:09:ec:f0:bc:89:69:
1f:6e:31:35:28:c1:02:a9:ef:10:3b:43:5b:fe:17:3b:84:d1:
d3:91:23:cc:71:7d:14:6c:4b:af:c3:a7:b8:0f:95:89:b0:07:
81:14:c7:c6:00:76:f8:9b:b4:6e:03:b7:4e:c2:17:0a:e9:85:
47:b2:55:ed:40:70:30:ef:2b:38:99:09:e2:c5:7b:b8:d3:12:
4c:67:ef:52:1d:26:77:62:b7:1f:ec:55:e5:99:fb:e0:96:24:
c8:1c:b0:12:b6:ab:30:08:8e:24:66:ee:1c:a9:a7:9e:35:e6:
36:f2:5e:5a:09:22:43:6c:f9:dd:2d:a4:51:54:48:4a:4d:c2:
47:d9:e4:00:dc:f6:f7:c8:be:fb:b9:01:c1:24:34:7f:af:c1:
62:d8:35:ec:3d:e7:38:42:9a:14:03:5c:8f:d9:cd:2c:37:e6:
6e:a1:ee:45:b9:ae:bb:c5:17:aa:5e:ba:80:a5:34:83:7b:9f:
09:b7:0a:ab:5c:fe:2d:69:fe:04:b7:c0:ba:eb:ea:fd:d3:ee:
b4:b3:57:7b:d6:56:c4:e9:e6:73:58:2d:34:c1:8c:d0:44:b9:
fb:ba:c4:b7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAaahMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIxMTgxMzQ3WhcNMjYwMzMxMTgxMzQ3WjAYMRYw
FAYDVQQDEw02OWJlZGZlMS00OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4O41czHfO9Vklo5t35R6XHxN0xdrVEGP0uM214qlud03qSxtRUgyQMfr
pnWRnRC7WdQbPhloA1EnWCSlkJXfuOTGrvYw8i9w4k+WL3ubF6hUzn5oerV5/o0k
rxi3sbBYwKycl+y5eEqnxOq5SDeIMATYhYBGm5vHIggFApYRpMTzcQqiQ/i604xT
RCy9kYHlJebYLNZAzEsnOElmzlxtScBwMQ/6vJInQ9FE5O5Cu3yxHx01YweYZ5tg
bFu8U73mcd2XAeyxdGhUTMrJk1qgxJtCV/TjloqbpsJSxakYRWYN1VVPLu6DIcpx
1uqexwsU6QRh9Oq8kb6H7H103eS6cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUK
Ccc66ZTqawIVD6hEbrgRfc/1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CN0QxMTdBQTI1NTExMUYxQTRDNDMwRDlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGLcqAAwQDLcsoMA0GCSqGSIb3
DQEBCwUAA4IBAQC4ltt54jaUXr3VBmYHVabwNNZQWqffwBRyVWc4n2QJ7PC8iWkf
bjE1KMECqe8QO0Nb/hc7hNHTkSPMcX0UbEuvw6e4D5WJsAeBFMfGAHb4m7RuA7dO
whcK6YVHslXtQHAw7ys4mQnixXu40xJMZ+9SHSZ3Yrcf7FXlmfvgliTIHLAStqsw
CI4kZu4cqaeeNeY28l5aCSJDbPndLaRRVEhKTcJH2eQA3Pb3yL77uQHBJDR/r8Fi
2DXsPec4QpoUA1yP2c0sN+Zuoe5Fua67xReqXrqApTSDe58JtwqrXP4taf4Et8C6
6+r90+60s1d71lbE6eZzWC00wYzQRLn7usS3
-----END CERTIFICATE-----
Generated at Wed Mar 25 09:33:05 2026 by rpki-client