Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1379F152525411F0AAD8BED5DAE4EC9C.roa
File: 1379F152525411F0AAD8BED5DAE4EC9C.roa (raw, json)
Hash identifier: wtN+gjAn09jZ2DVbgtcv7kK5zDQZ+qe0iSzT0Y0GqxA=
Subject key identifier: C2:CE:24:89:C8:A4:C0:A8:CD:F8:9B:AB:F2:23:BD:F9:38:D8:CF:DA
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0586
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1379F152525411F0AAD8BED5DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 06:09:11 +0000
ROA not before: Thu 26 Jun 2025 06:09:06 +0000
ROA not after: Wed 24 Jun 2026 06:09:06 +0000
asID: 34927
IP address blocks: 45.221.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 26 06:09:06 2025 GMT
Not After : Jun 24 06:09:06 2026 GMT
Subject: CN=685ce407-23ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:87:42:11:47:5c:c0:2e:43:6f:af:10:d8:
a2:e5:0d:71:b7:66:87:ed:32:44:c6:f9:1b:e8:46:
d9:0e:b0:af:76:82:fd:5a:49:71:f1:49:c0:57:1f:
da:6f:be:05:e0:7c:cc:bc:82:9e:c0:45:ec:12:1c:
78:53:fb:c6:e3:f1:26:c8:4d:2b:05:3d:2b:70:37:
bd:63:a2:38:ca:cb:1f:34:b9:62:e3:77:6f:c3:5c:
3a:17:d8:f4:6b:40:ef:47:17:1a:d8:48:ab:a6:e8:
4a:fa:be:6f:e1:3f:3e:36:cd:9d:e8:72:da:b1:e0:
b1:6e:db:78:ca:67:75:b2:ae:42:20:13:5e:2c:d7:
38:94:cb:81:4d:31:b1:1d:56:de:68:6d:16:61:7d:
84:1b:08:fa:68:33:85:d7:67:ec:39:96:72:3c:31:
54:7d:22:77:3e:77:67:22:71:c1:7c:96:92:d3:88:
01:d1:74:8a:55:01:dd:22:d0:71:60:b8:b9:47:1e:
33:fd:45:d6:12:df:ee:c6:81:21:7b:2e:67:38:3b:
41:0c:0e:c2:7e:16:1a:4b:57:3a:8c:26:6b:54:ce:
33:84:e9:ff:b7:30:61:f8:2a:e4:90:3c:f6:87:f4:
85:a4:fb:99:8b:f5:4d:8e:58:37:39:2d:09:de:f3:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CE:24:89:C8:A4:C0:A8:CD:F8:9B:AB:F2:23:BD:F9:38:D8:CF:DA
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/1379F152525411F0AAD8BED5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.66.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a0:ff:0a:77:ef:20:ba:04:62:e2:b2:cb:be:df:47:98:ae:
ba:62:9a:38:57:c8:90:40:29:10:e8:50:0d:83:b9:29:cc:5e:
27:24:34:bd:9e:b4:9c:7d:a9:30:5a:cc:f0:2a:9f:01:d5:16:
0a:de:43:29:6b:94:b4:02:e9:27:47:ac:7e:b1:56:73:4d:ba:
ce:1b:17:ab:47:5c:4a:62:5f:49:55:f1:16:80:73:b9:42:f8:
6b:14:c0:08:e8:1f:b5:85:eb:db:70:9f:bf:f9:ba:7a:fa:86:
69:dc:bd:ef:98:5f:30:3b:d8:71:51:48:6a:54:64:5e:2f:05:
09:42:46:19:9c:47:9c:9e:62:03:a4:cc:0a:17:88:f2:f7:c7:
68:18:b5:8e:0e:71:91:f2:8d:f6:af:a4:25:b0:00:cb:e0:00:
1d:9f:bf:12:35:ff:0e:58:f5:c5:35:7b:2a:02:56:f4:ef:77:
6a:63:d9:f7:ea:1b:79:d4:03:5f:33:43:09:c5:26:68:dd:d9:
c2:5d:ea:23:5d:c7:fe:2c:eb:73:56:8f:62:b7:a7:20:d5:fc:
77:66:9d:f0:0e:66:05:73:ee:92:41:39:7c:fa:bc:6b:84:f7:
f7:c6:5b:2b:00:39:b7:78:e8:7b:c7:c5:fd:90:a6:34:87:7e:
58:0b:fb:9f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTA2MjYwNjA5MDZaFw0yNjA2MjQwNjA5MDZaMBgxFjAU
BgNVBAMTDTY4NWNlNDA3LTIzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrg4dCEUdcwC5Db68Q2KLlDXG3ZoftMkTG+RvoRtkOsK92gv1aSXHxScBX
H9pvvgXgfMy8gp7ARewSHHhT+8bj8SbITSsFPStwN71jojjKyx80uWLjd2/DXDoX
2PRrQO9HFxrYSKum6Er6vm/hPz42zZ3octqx4LFu23jKZ3WyrkIgE14s1ziUy4FN
MbEdVt5obRZhfYQbCPpoM4XXZ+w5lnI8MVR9Inc+d2ciccF8lpLTiAHRdIpVAd0i
0HFguLlHHjP9RdYS3+7GgSF7Lmc4O0EMDsJ+FhpLVzqMJmtUzjOE6f+3MGH4KuSQ
PPaH9IWk+5mL9U2OWDc5LQne82JpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUws4k
icikwKjN+Jur8iO9+TjYz9owHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3LzEzNzlGMTUyNTI1NDExRjBBQUQ4QkVENURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UIwDQYJKoZIhvcNAQELBQAD
ggEBAIeg/wp37yC6BGLissu+30eYrrpimjhXyJBAKRDoUA2DuSnMXickNL2etJx9
qTBazPAqnwHVFgreQylrlLQC6SdHrH6xVnNNus4bF6tHXEpiX0lV8RaAc7lC+GsU
wAjoH7WF69twn7/5unr6hmncve+YXzA72HFRSGpUZF4vBQlCRhmcR5yeYgOkzAoX
iPL3x2gYtY4OcZHyjfavpCWwAMvgAB2fvxI1/w5Y9cU1eyoCVvTvd2pj2ffqG3nU
A18zQwnFJmjd2cJd6iNdx/4s63NWj2K3pyDV/HdmnfAOZgVz7pJBOXz6vGuE9/fG
WysAObd46HvHxf2QpjSHflgL+58=
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:52:02 2025 by rpki-client