Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD09D05A1EC311F1BC811FB0DAE4EC9C.roa
File: DD09D05A1EC311F1BC811FB0DAE4EC9C.roa (raw, json)
Hash identifier: arxrZ3L83V62we08hwqR6zsro7UDMjR/Shadn2/tuc8=
Subject key identifier: 8B:F5:73:AD:8D:68:D1:31:85:E2:49:97:4A:E0:C3:DA:AF:62:EB:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD09D05A1EC311F1BC811FB0DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 10:03:20 +0000
ROA not before: Fri 13 Mar 2026 10:03:16 +0000
ROA not after: Sun 12 Apr 2026 10:03:16 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107761 (0x1a4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 10:03:16 2026 GMT
Not After : Apr 12 10:03:16 2026 GMT
Subject: CN=69b3e0e8-fa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:6b:da:4e:19:72:4e:7c:2d:9d:28:d4:e1:
81:24:13:3e:f1:c3:b3:4a:c4:78:a7:21:47:a0:18:
1e:53:7a:4b:bd:fc:f8:fb:17:9a:92:bb:29:6e:2e:
a1:a4:80:db:85:6f:3b:ba:71:51:0c:7b:9f:49:4a:
b0:3f:2d:18:d3:3b:de:2a:7e:0d:6f:a6:10:ea:b7:
c1:80:c9:9e:69:e9:09:f3:2c:b8:c5:76:59:f9:dc:
0f:28:84:66:2f:5a:ec:43:e9:ee:26:34:03:a7:05:
b8:33:b8:06:9f:36:e6:3b:9b:9d:02:86:c0:60:44:
06:68:20:94:f4:70:ee:9b:df:53:99:3e:9b:82:50:
ef:44:40:e8:cb:80:16:75:6d:88:fe:88:50:84:c1:
d9:d6:c2:ee:7b:99:23:45:c0:67:be:a2:b0:97:66:
df:06:8a:d0:23:05:b7:39:09:bf:74:ad:6b:01:66:
9c:f7:54:8e:0d:c3:12:e6:bb:a9:a6:24:ed:60:0b:
78:f8:ba:70:9e:c2:e5:49:bf:41:d5:2f:e0:bc:a1:
be:6f:fb:3d:e7:f4:50:af:78:28:a2:ea:06:9a:da:
bc:fe:94:3a:31:70:a3:2e:c7:d0:f4:df:f1:30:70:
53:2e:d0:20:1a:41:4c:ad:f6:3a:fa:52:6e:05:cb:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:73:AD:8D:68:D1:31:85:E2:49:97:4A:E0:C3:DA:AF:62:EB:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD09D05A1EC311F1BC811FB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:64:14:4b:89:95:bb:83:e8:fc:80:f5:1a:3d:07:36:ef:38:
bb:28:33:1e:a7:11:15:04:91:7a:a8:a5:31:8d:8e:9f:e9:67:
7a:6c:f9:26:c6:bd:eb:69:a0:86:89:97:41:d4:b5:04:2d:1c:
eb:71:a2:a5:4d:dc:3f:b7:fe:24:65:0b:50:40:de:1c:d7:e2:
6d:91:77:bb:70:2a:25:54:a6:88:91:c0:13:cc:a0:d4:e5:2b:
4e:fe:13:e2:71:65:58:52:9d:15:dd:ac:d2:70:ab:56:c8:77:
18:c0:a4:bd:a4:7f:e1:73:13:c8:dc:ab:dd:8b:03:5f:de:90:
91:f8:0b:7e:b9:af:d5:8b:21:02:ea:fb:db:de:1d:c3:7e:af:
6a:28:30:0c:c2:52:dd:41:c5:50:89:d5:14:55:ef:1c:c9:90:
86:a5:3f:f3:57:f7:11:97:89:eb:f7:0e:16:74:74:9a:24:ad:
60:ef:95:bd:55:be:4c:84:d7:74:60:47:0f:c4:89:7f:ae:40:
53:c2:d7:33:0b:c1:06:3e:6f:54:18:9e:90:15:0d:42:8c:63:
8f:59:6d:f6:31:e0:63:ff:cf:b2:33:05:da:f8:62:61:f5:df:
b4:a9:58:e4:b4:f7:e3:e3:56:53:c9:79:10:c7:a4:1a:21:2a:
79:6b:44:44
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaTxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEzMTAwMzE2WhcNMjYwNDEyMTAwMzE2WjAYMRYw
FAYDVQQDEw02OWIzZTBlOC1mYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzG5r2k4Zck58LZ0o1OGBJBM+8cOzSsR4pyFHoBgeU3pLvfz4+xeakrsp
bi6hpIDbhW87unFRDHufSUqwPy0Y0zveKn4Nb6YQ6rfBgMmeaekJ8yy4xXZZ+dwP
KIRmL1rsQ+nuJjQDpwW4M7gGnzbmO5udAobAYEQGaCCU9HDum99TmT6bglDvREDo
y4AWdW2I/ohQhMHZ1sLue5kjRcBnvqKwl2bfBorQIwW3OQm/dK1rAWac91SODcMS
5ruppiTtYAt4+LpwnsLlSb9B1S/gvKG+b/s95/RQr3goouoGmtq8/pQ6MXCjLsfQ
9N/xMHBTLtAgGkFMrfY6+lJuBcvWjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIv1
c62NaNExheJJl0rgw9qvYutpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERDA5RDA1QTFFQzMxMUYxQkM4MTFGQjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcIwMA0GCSqGSIb3DQEBCwUA
A4IBAQAPZBRLiZW7g+j8gPUaPQc27zi7KDMepxEVBJF6qKUxjY6f6Wd6bPkmxr3r
aaCGiZdB1LUELRzrcaKlTdw/t/4kZQtQQN4c1+JtkXe7cColVKaIkcATzKDU5StO
/hPicWVYUp0V3azScKtWyHcYwKS9pH/hcxPI3KvdiwNf3pCR+At+ua/ViyEC6vvb
3h3Dfq9qKDAMwlLdQcVQidUUVe8cyZCGpT/zV/cRl4nr9w4WdHSaJK1g75W9Vb5M
hNd0YEcPxIl/rkBTwtczC8EGPm9UGJ6QFQ1CjGOPWW32MeBj/8+yMwXa+GJh9d+0
qVjktPfj41ZTyXkQx6QaISp5a0RE
-----END CERTIFICATE-----
Generated at Mon Mar 16 05:47:44 2026 by rpki-client