Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/056194907DFA11F0AF0A867ADAE4EC9C.roa
File: 056194907DFA11F0AF0A867ADAE4EC9C.roa (raw, json)
Hash identifier: N5FOSZTS61l0CxBQDAkNUI4zPNj6swfmvZG21xRrh84=
Subject key identifier: 6B:8E:E7:EF:85:58:B0:55:D2:F9:8D:69:5F:E8:8F:0B:32:60:DB:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016C9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/056194907DFA11F0AF0A867ADAE4EC9C.roa
Signing time: Wed 20 Aug 2025 19:15:24 +0000
ROA not before: Wed 20 Aug 2025 19:15:19 +0000
ROA not after: Sun 12 Dec 2027 19:15:19 +0000
asID: 17561
IP address blocks: 45.193.199.0/24 maxlen: 24
45.193.200.0/24 maxlen: 24
45.193.201.0/24 maxlen: 24
45.193.202.0/24 maxlen: 24
45.193.203.0/24 maxlen: 24
45.193.204.0/24 maxlen: 24
45.193.205.0/24 maxlen: 24
45.193.206.0/24 maxlen: 24
45.193.207.0/24 maxlen: 24
45.193.208.0/24 maxlen: 24
45.193.209.0/24 maxlen: 24
45.193.210.0/24 maxlen: 24
45.193.211.0/24 maxlen: 24
45.193.212.0/24 maxlen: 24
45.193.213.0/24 maxlen: 24
45.193.214.0/24 maxlen: 24
45.193.215.0/24 maxlen: 24
45.193.216.0/24 maxlen: 24
45.193.217.0/24 maxlen: 24
45.193.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93341 (0x16c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 19:15:19 2025 GMT
Not After : Dec 12 19:15:19 2027 GMT
Subject: CN=68a61ecc-b150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:3f:60:a1:be:08:8f:4f:bb:75:07:78:f5:
66:92:af:37:41:bb:01:f6:b5:65:c1:cf:7a:2a:16:
ca:20:9b:42:fd:72:55:0e:42:4a:b2:42:e4:58:b8:
81:a3:ce:e2:36:56:83:31:6f:8c:4f:23:eb:9a:e9:
76:c4:cd:07:77:d5:be:16:42:00:84:61:ea:47:0e:
01:26:cd:46:cf:cc:f5:26:72:9e:ab:53:92:11:a6:
5f:26:93:7d:a5:07:c9:ae:56:fe:7b:53:0c:dc:07:
d7:24:bf:65:ad:d8:79:09:de:31:99:fe:63:2e:10:
fb:57:2a:70:c6:3d:8b:00:28:0c:5d:d9:d7:b1:fb:
27:4e:89:02:5b:e0:cb:44:ae:bd:e2:95:7f:74:93:
f3:de:e7:37:50:8b:34:16:48:95:cd:8f:9c:6d:d9:
7b:4e:d0:04:e7:99:10:c0:16:53:e4:34:a2:9b:db:
cb:10:f8:6f:df:12:09:10:95:28:5b:17:c7:6c:94:
58:6f:46:c3:ac:1a:14:ad:f6:47:3c:14:e8:9a:45:
f1:b0:37:b3:dd:d3:3f:3e:7b:de:fa:ba:2d:3d:fc:
40:90:de:a5:26:1c:67:c6:78:98:76:07:7a:d1:d9:
da:7e:39:ed:b3:0f:eb:e3:b7:4c:8c:59:6e:86:f8:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:E7:EF:85:58:B0:55:D2:F9:8D:69:5F:E8:8F:0B:32:60:DB:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/056194907DFA11F0AF0A867ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.193.199.0-45.193.218.255
Signature Algorithm: sha256WithRSAEncryption
a7:3b:41:75:2b:5c:7f:97:45:00:fe:d4:55:7a:0a:3e:e6:d1:
0e:0f:f7:a7:d0:4d:2c:91:d3:06:39:af:6d:c4:77:70:1d:cd:
94:38:5e:0f:68:63:4b:8f:bb:eb:4b:a6:cc:d4:e9:a2:f9:3e:
7b:21:d8:bc:8e:be:ad:3d:ed:ab:2b:5f:38:c2:12:0f:cb:05:
27:7f:4c:b1:c5:05:8d:90:a5:4c:a3:7b:ac:20:86:71:68:1b:
c9:b2:90:9c:07:32:f3:65:50:f2:51:1d:f5:9f:3d:71:14:fa:
6b:46:c7:9c:73:db:c3:ec:61:0a:ce:aa:57:a0:c2:86:25:bf:
94:de:2d:36:d8:3a:14:29:f5:09:15:80:b0:4a:32:0b:7d:68:
6b:2e:90:26:17:ef:13:27:26:f2:78:da:fb:fb:59:ac:20:cf:
e2:b2:9d:cf:7f:9b:a1:7e:94:ff:fb:38:dd:14:46:1d:ab:e0:
0a:d9:f6:c0:73:98:9d:9b:8b:2f:f8:3f:90:62:72:8d:e1:cc:
4b:fc:b2:91:42:f3:9e:ec:ca:a6:d6:24:34:ec:f2:9b:db:e5:
85:1e:73:3e:32:0e:f7:5f:fa:e6:6a:4c:9f:11:12:fd:60:cc:
62:b5:ea:68:3e:9c:ce:dc:5e:11:da:f7:89:d4:82:d6:c3:ff:
04:5a:bc:f7
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAWydMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIwMTkxNTE5WhcNMjcxMjEyMTkxNTE5WjAYMRYw
FAYDVQQDEw02OGE2MWVjYy1iMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAswQ/YKG+CI9Pu3UHePVmkq83QbsB9rVlwc96KhbKIJtC/XJVDkJKskLk
WLiBo87iNlaDMW+MTyPrmul2xM0Hd9W+FkIAhGHqRw4BJs1Gz8z1JnKeq1OSEaZf
JpN9pQfJrlb+e1MM3AfXJL9lrdh5Cd4xmf5jLhD7Vypwxj2LACgMXdnXsfsnTokC
W+DLRK694pV/dJPz3uc3UIs0FkiVzY+cbdl7TtAE55kQwBZT5DSim9vLEPhv3xIJ
EJUoWxfHbJRYb0bDrBoUrfZHPBTomkXxsDez3dM/Pnve+rotPfxAkN6lJhxnxniY
dgd60dnafjntsw/r47dMjFluhvgPmQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGuO
5++FWLBV0vmNaV/ojwsyYNuBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNTYxOTQ5MDdERkExMUYwQUYwQTg2N0FEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtwccDBAAtwdowDQYJKoZI
hvcNAQELBQADggEBAKc7QXUrXH+XRQD+1FV6Cj7m0Q4P96fQTSyR0wY5r23Ed3Ad
zZQ4Xg9oY0uPu+tLpszU6aL5Pnsh2LyOvq097asrXzjCEg/LBSd/TLHFBY2QpUyj
e6wghnFoG8mykJwHMvNlUPJRHfWfPXEU+mtGx5xz28PsYQrOqlegwoYlv5TeLTbY
OhQp9QkVgLBKMgt9aGsukCYX7xMnJvJ42vv7Wawgz+Kync9/m6F+lP/7ON0URh2r
4ArZ9sBzmJ2biy/4P5Bico3hzEv8spFC857syqbWJDTs8pvb5YUecz4yDvdf+uZq
TJ8REv1gzGK16mg+nM7cXhHa94nUgtbD/wRavPc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:05 2025 by rpki-client