Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9093A8C42ED11F1A1EBB4D7CE1D38B0.roa
File: E9093A8C42ED11F1A1EBB4D7CE1D38B0.roa (raw, json)
Hash identifier: KWWfCxMPFwvHyv3aT8DvTjcwv6C6hXOmj/OP+qLN0Q8=
Subject key identifier: 7A:B7:39:F8:3A:55:9A:0D:36:32:F9:56:68:4A:0B:AA:E0:BC:F7:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9093A8C42ED11F1A1EBB4D7CE1D38B0.roa
Signing time: Tue 28 Apr 2026 10:35:01 +0000
ROA not before: Tue 28 Apr 2026 10:34:56 +0000
ROA not after: Wed 17 Jun 2026 10:34:56 +0000
asID: 273824
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 May 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110502 (0x1afa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 10:34:56 2026 GMT
Not After : Jun 17 10:34:56 2026 GMT
Subject: CN=69f08d55-f5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:bd:2c:23:57:c6:2a:7b:20:c9:5a:ba:df:
db:0b:43:d7:51:78:f5:41:7d:b8:b6:77:df:32:af:
47:f8:ec:18:d2:42:44:d9:ee:b2:ae:1d:23:00:d3:
7a:6c:df:30:52:3e:39:44:f6:83:e3:64:8f:6c:78:
c4:ae:4d:6a:ef:3c:40:e8:2e:a0:f4:27:18:09:4f:
5d:e9:e9:50:78:0c:6a:ee:4c:91:4a:65:b6:69:3b:
59:fd:58:85:bf:fa:ff:d0:e3:4d:e1:db:fd:9f:3b:
a3:22:2c:75:88:0c:55:1b:5f:ee:0b:07:33:e2:5c:
ca:6f:d8:7f:52:78:2d:84:6c:74:f6:ac:94:f8:e0:
83:26:28:89:0b:24:0f:41:54:6d:7d:b1:e3:57:3d:
3d:7b:ff:3d:3b:a0:3b:10:17:cd:01:ea:0f:c3:cd:
4f:18:99:87:21:88:8e:3e:ce:ff:dd:96:0e:86:02:
4d:5b:91:8a:e8:aa:9c:a1:b3:ee:27:23:c7:98:42:
59:b2:bd:01:1a:42:b0:48:e0:05:93:f5:27:49:e9:
4d:9b:0c:69:31:5a:f9:7a:67:82:ce:2d:c8:c7:96:
cf:f8:98:bb:b7:23:5e:6a:d1:d3:79:8b:b3:6b:01:
4b:83:50:bd:db:39:8c:09:ce:01:bb:bc:50:b7:14:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:39:F8:3A:55:9A:0D:36:32:F9:56:68:4A:0B:AA:E0:BC:F7:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9093A8C42ED11F1A1EBB4D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b4:ad:a5:20:df:9c:90:c4:06:97:57:90:39:59:a3:a8:6c:
bc:d6:44:17:28:82:69:fc:4e:97:f3:c0:99:38:04:1f:04:56:
22:6e:db:a5:94:5a:c9:90:38:37:68:fd:c2:e1:4f:54:98:14:
07:64:e4:94:98:77:ca:23:5c:ba:b2:6f:d9:d1:93:37:1b:6b:
5a:9b:91:43:80:49:22:e2:ba:77:69:02:a0:21:ed:2a:16:e9:
2f:49:17:b1:a3:57:f4:4f:1b:72:9c:1d:43:27:5f:06:06:0a:
da:0c:9b:2d:26:1c:44:0d:f4:a1:df:9d:12:6f:11:da:f7:15:
9a:f6:e7:98:fd:43:ab:6b:7f:87:d5:51:30:9d:62:b8:13:d1:
cb:70:24:6d:28:49:5f:5e:cc:17:1c:f6:d5:35:55:f0:0e:06:
40:f4:63:18:94:a2:d3:46:05:06:4e:1f:ba:df:f3:75:0c:66:
0f:f1:24:2d:30:17:ad:65:64:ac:4a:9a:5a:59:b3:41:26:72:
c6:75:74:99:f3:d1:17:da:59:23:b6:c1:eb:6a:2f:20:f4:3e:
5a:fd:06:fe:65:a6:21:da:75:0c:4f:1f:29:0a:94:c6:b3:a9:
f3:c7:32:31:d8:5d:38:39:8a:ac:84:94:2e:d3:6a:fc:c9:42:
9c:a2:8b:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAa+mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDI4MTAzNDU2WhcNMjYwNjE3MTAzNDU2WjAYMRYw
FAYDVQQDEw02OWYwOGQ1NS1mNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsqu9LCNXxip7IMlaut/bC0PXUXj1QX24tnffMq9H+OwY0kJE2e6yrh0j
ANN6bN8wUj45RPaD42SPbHjErk1q7zxA6C6g9CcYCU9d6elQeAxq7kyRSmW2aTtZ
/ViFv/r/0ONN4dv9nzujIix1iAxVG1/uCwcz4lzKb9h/UngthGx09qyU+OCDJiiJ
CyQPQVRtfbHjVz09e/89O6A7EBfNAeoPw81PGJmHIYiOPs7/3ZYOhgJNW5GK6Kqc
obPuJyPHmEJZsr0BGkKwSOAFk/UnSelNmwxpMVr5emeCzi3Ix5bP+Ji7tyNeatHT
eYuzawFLg1C92zmMCc4Bu7xQtxT4bQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHq3
Ofg6VZoNNjL5VmhKC6rgvPe6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOTA5M0E4QzQyRUQxMUYxQTFFQkI0RDdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ7MA0GCSqGSIb3DQEBCwUA
A4IBAQAStK2lIN+ckMQGl1eQOVmjqGy81kQXKIJp/E6X88CZOAQfBFYibtullFrJ
kDg3aP3C4U9UmBQHZOSUmHfKI1y6sm/Z0ZM3G2tam5FDgEki4rp3aQKgIe0qFukv
SRexo1f0TxtynB1DJ18GBgraDJstJhxEDfSh350SbxHa9xWa9ueY/UOra3+H1VEw
nWK4E9HLcCRtKElfXswXHPbVNVXwDgZA9GMYlKLTRgUGTh+63/N1DGYP8SQtMBet
ZWSsSppaWbNBJnLGdXSZ89EX2lkjtsHrai8g9D5a/Qb+ZaYh2nUMTx8pCpTGs6nz
xzIx2F04OYqshJQu02r8yUKcoos4
-----END CERTIFICATE-----
Generated at Fri May 1 03:14:44 2026 by rpki-client