Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B8FB748580611F0A920DFD6DAE4EC9C.roa
File: 1B8FB748580611F0A920DFD6DAE4EC9C.roa (raw, json)
Hash identifier: ECDIwQKwMNV6iCKaJg8e2jugluGT+7OnhR93IKfAtXU=
Subject key identifier: 6F:B2:0F:CB:2C:F6:7F:97:AA:F4:82:1C:6A:7D:71:1C:E4:C6:A2:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01606D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B8FB748580611F0A920DFD6DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:06:11 +0000
ROA not before: Thu 03 Jul 2025 12:06:06 +0000
ROA not after: Tue 21 Apr 2026 12:06:06 +0000
asID: 262167
IP address blocks: 45.199.158.0/24 maxlen: 24
45.199.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90221 (0x1606d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:06:06 2025 GMT
Not After : Apr 21 12:06:06 2026 GMT
Subject: CN=68667233-7dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:af:5d:ec:70:52:c1:8a:f5:3d:ee:2e:99:
9d:e5:06:4a:29:01:92:13:6d:b2:f6:f7:43:c1:76:
c0:a1:09:a4:d7:52:7d:d1:b3:ed:00:c6:76:f7:86:
69:58:58:c6:56:fb:eb:72:1d:00:7e:aa:13:ec:b5:
4a:3f:2a:55:af:1d:77:bf:20:25:12:eb:db:4f:92:
1f:e4:01:fe:3c:7a:2a:5a:2e:07:1b:a1:40:3b:80:
73:48:56:ae:36:42:95:6b:db:ca:04:21:b1:5f:16:
71:15:96:f9:ed:de:f9:cf:cd:62:92:30:08:cc:9c:
fe:7d:57:da:20:a8:41:6f:8c:e4:05:49:4a:6f:0e:
0a:d6:5d:23:2d:67:b2:9e:63:01:02:9c:5d:ce:1c:
b8:3d:87:b5:e5:cb:a1:81:22:6a:97:35:c6:68:fb:
d4:db:f6:e3:53:76:e2:a5:54:07:1e:77:7f:7f:e2:
dd:75:40:3c:9a:16:c0:fe:b9:20:92:ed:52:1d:b1:
1c:56:36:a5:fa:ac:52:94:4a:c5:91:b3:6f:cd:53:
a8:db:97:f3:18:7e:71:52:13:d8:81:3e:dd:78:99:
b6:c2:0b:c6:2b:4d:36:3a:fe:47:38:5f:7f:65:39:
1e:46:f8:1e:6a:63:b6:20:bd:7b:f7:60:b7:d9:f9:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:0F:CB:2C:F6:7F:97:AA:F4:82:1C:6A:7D:71:1C:E4:C6:A2:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B8FB748580611F0A920DFD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:76:fe:b3:c8:f3:b4:e9:4c:21:74:23:89:7d:c4:b6:38:46:
01:d1:5d:92:6f:e1:b8:7b:1f:d3:2b:05:b3:71:fb:7a:21:a0:
f9:e0:74:2d:da:04:31:88:a3:88:04:3d:ce:61:34:7b:e1:25:
11:2d:03:c4:5e:c8:23:79:1c:e4:5c:4b:d0:b6:30:bb:b2:56:
68:6b:b2:a8:82:0c:50:af:6d:62:14:b3:32:66:6b:a4:46:e6:
ad:05:1c:7c:96:d6:af:82:4a:42:01:da:b4:42:d5:d1:62:14:
ce:12:ed:43:5e:3b:0c:79:a4:ff:89:ad:06:7d:ee:f3:17:05:
fa:51:e5:a8:47:6c:dc:38:5a:7b:01:16:39:4d:b3:42:58:f5:
a1:d5:20:b4:27:88:f6:85:a9:ab:f3:60:c8:ee:81:b9:db:ac:
95:94:6e:50:db:ce:c2:d4:f8:6d:75:ca:de:5a:aa:a0:f6:fb:
57:ef:ae:c2:5a:c9:8c:bb:89:5c:69:69:39:02:40:9e:95:ab:
ad:c0:8a:4c:4a:06:21:46:1f:6c:41:02:30:79:33:e8:cc:82:
58:3b:4b:de:e3:81:c2:31:7c:d4:bb:0e:76:ba:d9:b6:77:80:
c5:3c:c4:fd:04:8a:54:3d:11:c6:d6:ac:5d:cf:2c:18:51:26:
da:03:29:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWBtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAzMTIwNjA2WhcNMjYwNDIxMTIwNjA2WjAYMRYw
FAYDVQQDEw02ODY2NzIzMy03ZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmdivXexwUsGK9T3uLpmd5QZKKQGSE22y9vdDwXbAoQmk11J90bPtAMZ2
94ZpWFjGVvvrch0AfqoT7LVKPypVrx13vyAlEuvbT5If5AH+PHoqWi4HG6FAO4Bz
SFauNkKVa9vKBCGxXxZxFZb57d75z81ikjAIzJz+fVfaIKhBb4zkBUlKbw4K1l0j
LWeynmMBApxdzhy4PYe15cuhgSJqlzXGaPvU2/bjU3bipVQHHnd/f+LddUA8mhbA
/rkgku1SHbEcVjal+qxSlErFkbNvzVOo25fzGH5xUhPYgT7deJm2wgvGK002Ov5H
OF9/ZTkeRvgeamO2IL1792C32fkNpQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG+y
D8ss9n+XqvSCHGp9cRzkxqKoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQjhGQjc0ODU4MDYxMUYwQTkyMERGRDZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLceeMA0GCSqGSIb3DQEBCwUA
A4IBAQA/dv6zyPO06UwhdCOJfcS2OEYB0V2Sb+G4ex/TKwWzcft6IaD54HQt2gQx
iKOIBD3OYTR74SURLQPEXsgjeRzkXEvQtjC7slZoa7KoggxQr21iFLMyZmukRuat
BRx8ltavgkpCAdq0QtXRYhTOEu1DXjsMeaT/ia0Gfe7zFwX6UeWoR2zcOFp7ARY5
TbNCWPWh1SC0J4j2hamr82DI7oG526yVlG5Q287C1PhtdcreWqqg9vtX767CWsmM
u4lcaWk5AkCelautwIpMSgYhRh9sQQIweTPozIJYO0ve44HCMXzUuw52utm2d4DF
PMT9BIpUPRHG1qxdzywYUSbaAyl3
-----END CERTIFICATE-----
Generated at Sun Jul 6 06:00:29 2025 by rpki-client