Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCA5A0A525A11F08C32037BDAE4EC9C.roa
File: 3CCA5A0A525A11F08C32037BDAE4EC9C.roa (raw, json)
Hash identifier: AEJkZvPgxmJfulYOuT+7yc+zD6ybtx35EBunoYEq8fo=
Subject key identifier: CA:82:A8:DC:A6:11:66:25:A6:04:A4:A3:BE:EF:CC:69:40:E8:81:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015ED7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCA5A0A525A11F08C32037BDAE4EC9C.roa
Signing time: Thu 26 Jun 2025 06:53:17 +0000
ROA not before: Thu 26 Jun 2025 06:53:13 +0000
ROA not after: Sat 27 Jun 2026 06:53:13 +0000
asID: 137184
IP address blocks: 45.207.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89815 (0x15ed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 06:53:13 2025 GMT
Not After : Jun 27 06:53:13 2026 GMT
Subject: CN=685cee5d-36e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:74:33:9b:ed:4f:76:5b:82:6a:69:7d:48:
53:93:eb:d0:e1:1e:b1:e5:95:b9:d8:29:69:86:db:
7e:e8:a7:e0:63:37:0b:d7:1c:a9:1b:99:bc:f8:bd:
32:96:fa:d8:96:39:04:e9:b3:7b:7b:6a:c5:5e:ff:
c8:16:a3:23:8c:99:52:cd:3b:25:f1:b1:71:be:93:
f6:88:70:c5:81:ce:97:39:9e:f6:a9:f3:5e:14:d4:
5c:53:78:3e:84:aa:22:13:72:c3:cd:d0:c2:58:07:
67:1d:ca:45:3d:d6:76:1d:da:8d:56:6b:29:e9:2e:
3a:ea:a5:76:1e:a9:00:78:73:92:e7:e1:7b:90:48:
9a:d0:4c:56:e2:1c:80:d7:b8:d7:15:73:c1:8a:3d:
17:39:6a:88:4d:f5:b7:0c:15:25:6b:9c:89:03:9f:
78:07:3a:a2:4f:f9:85:67:f9:7f:d7:20:5d:53:ea:
03:4b:5a:9c:d4:fc:c1:08:39:9f:57:0e:be:61:7e:
47:1d:f9:36:16:44:b7:c1:28:56:c4:2d:99:4e:ce:
88:6e:13:e8:82:65:6a:a0:ba:96:d9:a5:b7:e9:b6:
ed:60:34:e3:e9:95:b7:51:90:b0:5d:6c:bc:3d:fb:
5c:71:b3:71:e1:22:63:35:3a:c5:0d:8e:7e:01:50:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:82:A8:DC:A6:11:66:25:A6:04:A4:A3:BE:EF:CC:69:40:E8:81:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCA5A0A525A11F08C32037BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.169.0/24
Signature Algorithm: sha256WithRSAEncryption
07:73:b9:be:91:31:44:35:ad:2d:a9:96:2f:47:03:df:b4:50:
c7:8e:dc:35:37:f6:7d:9c:9a:8a:64:6f:20:8c:e9:41:33:73:
0b:c4:06:07:51:32:f0:70:5d:d0:65:2f:a5:6a:e7:cd:2a:a7:
ba:ce:e2:9e:52:4b:59:19:6e:d8:55:4e:a0:e2:47:2a:0d:73:
02:e8:fe:aa:c0:a9:6c:15:3d:63:80:fd:ab:9a:2a:ff:28:37:
7a:0a:c6:fd:a7:d6:b1:ec:b5:db:9e:bc:04:9f:e5:ec:df:f7:
2b:2e:f6:91:7a:62:30:7e:14:d2:6a:71:27:dc:99:36:f2:7c:
d6:a7:d4:d9:eb:81:e8:9a:97:fd:83:ab:76:47:41:c1:e2:c5:
28:f0:b9:08:65:d8:80:33:1c:4a:51:9d:77:2d:8c:a9:6e:4d:
75:f1:8a:28:54:de:20:de:a0:6c:17:56:f5:86:25:ef:3e:ea:
27:82:0d:7b:42:75:17:3e:02:0f:78:ec:ab:7e:8f:3e:9a:db:
70:57:f6:1b:ee:a3:5e:96:db:0f:6a:f9:e8:0e:4e:08:f9:8e:
84:d4:29:92:48:62:20:eb:15:6a:97:1f:88:37:a8:f9:e1:dd:
56:15:e6:f9:3b:aa:75:de:3b:14:3f:53:af:d1:81:61:c4:ac:
06:bc:cf:14
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV7XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjI2MDY1MzEzWhcNMjYwNjI3MDY1MzEzWjAYMRYw
FAYDVQQDEw02ODVjZWU1ZC0zNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAynh0M5vtT3ZbgmppfUhTk+vQ4R6x5ZW52Clphtt+6KfgYzcL1xypG5m8
+L0ylvrYljkE6bN7e2rFXv/IFqMjjJlSzTsl8bFxvpP2iHDFgc6XOZ72qfNeFNRc
U3g+hKoiE3LDzdDCWAdnHcpFPdZ2HdqNVmsp6S466qV2HqkAeHOS5+F7kEia0ExW
4hyA17jXFXPBij0XOWqITfW3DBUla5yJA594BzqiT/mFZ/l/1yBdU+oDS1qc1PzB
CDmfVw6+YX5HHfk2FkS3wShWxC2ZTs6IbhPogmVqoLqW2aW36bbtYDTj6ZW3UZCw
XWy8PftccbNx4SJjNTrFDY5+AVDzhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMqC
qNymEWYlpgSko77vzGlA6IHLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQ0NBNUEwQTUyNUExMUYwOEMzMjAzN0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc+pMA0GCSqGSIb3DQEBCwUA
A4IBAQAHc7m+kTFENa0tqZYvRwPftFDHjtw1N/Z9nJqKZG8gjOlBM3MLxAYHUTLw
cF3QZS+laufNKqe6zuKeUktZGW7YVU6g4kcqDXMC6P6qwKlsFT1jgP2rmir/KDd6
Csb9p9ax7LXbnrwEn+Xs3/crLvaRemIwfhTSanEn3Jk28nzWp9TZ64Hompf9g6t2
R0HB4sUo8LkIZdiAMxxKUZ13LYypbk118YooVN4g3qBsF1b1hiXvPuongg17QnUX
PgIPeOyrfo8+mttwV/Yb7qNeltsPavnoDk4I+Y6E1CmSSGIg6xVqlx+IN6j54d1W
Feb5O6p13jsUP1Ov0YFhxKwGvM8U
-----END CERTIFICATE-----
Generated at Sat Jul 5 21:03:15 2025 by rpki-client