Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/409CB5E04B5E11F0A492C1F6DAE4EC9C.roa
File: 409CB5E04B5E11F0A492C1F6DAE4EC9C.roa (raw, json)
Hash identifier: ugjRs5BGp4i/yets2YNvjbaf59R3wy4Uylr/DXGW+PQ=
Subject key identifier: BD:8F:04:16:1A:59:94:DE:60:EB:17:14:94:81:AA:20:78:83:6C:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/409CB5E04B5E11F0A492C1F6DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 09:34:24 +0000
ROA not before: Tue 17 Jun 2025 09:34:19 +0000
ROA not after: Sun 20 Jul 2025 09:34:19 +0000
asID: 214413
IP address blocks: 45.194.87.0/24 maxlen: 24
45.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89218 (0x15c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 09:34:19 2025 GMT
Not After : Jul 20 09:34:19 2025 GMT
Subject: CN=6851369f-4c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:b7:c1:35:b1:1f:a2:54:66:43:31:93:b6:
fb:be:0c:51:5e:ce:73:70:55:06:d6:41:f6:d2:dc:
75:ad:db:29:1b:1a:4d:2a:7f:40:b7:3e:ba:b2:6e:
f6:1b:60:3c:fd:45:fa:32:79:61:46:1b:37:78:c0:
2d:22:fe:ef:6c:65:51:d9:3f:67:ab:d2:fc:19:ae:
be:1d:ae:b7:09:06:ab:6b:2c:86:81:f0:b2:0a:e8:
6c:08:5a:49:b9:f7:25:cc:9a:8e:29:7a:3d:8d:b8:
29:ab:e2:55:cf:f4:57:1e:d4:cc:cf:94:bd:cd:3b:
d8:1b:b5:29:19:67:ff:25:88:53:90:7e:c3:a4:29:
0b:da:40:fc:9b:47:7e:dd:24:e7:53:f5:cb:a8:2d:
1b:28:c7:24:22:b0:a8:79:d6:eb:94:bb:89:f9:f3:
91:70:df:df:59:97:c0:26:84:0e:a7:e7:ab:f6:7c:
85:dc:6a:8b:61:a7:e6:ae:8e:0c:f6:ae:93:44:7c:
f4:f0:c4:85:a0:12:e8:b6:0d:75:f8:cc:ff:04:55:
e7:21:c7:9b:f5:0b:5c:79:5c:da:32:ce:20:08:08:
9a:92:9f:b9:49:a7:51:dd:c1:96:03:1d:7b:22:f8:
8a:12:ab:9a:78:b9:56:53:fa:3c:0b:2f:aa:03:1a:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:04:16:1A:59:94:DE:60:EB:17:14:94:81:AA:20:78:83:6C:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/409CB5E04B5E11F0A492C1F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.87.0/24
45.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0e:80:61:28:cf:c6:06:2b:19:b3:58:83:55:c8:c5:2c:58:
8f:04:7e:4d:fc:c6:8a:f6:19:30:d6:ec:87:e1:6f:86:ff:d3:
5a:99:18:b6:17:dc:15:df:4a:c7:8d:8d:78:f5:68:e9:6c:61:
a9:3b:d5:73:5d:5c:fa:87:6d:49:14:dc:21:a6:67:b8:ed:1e:
db:5a:80:42:67:da:34:92:a1:1b:6b:15:a4:70:63:da:ee:9c:
09:24:72:62:b4:f1:17:b2:36:9c:29:f3:79:1d:e5:84:d8:43:
9b:eb:d6:85:bb:f0:95:98:3a:f6:b1:87:3d:0a:f5:d5:52:69:
c5:37:39:7a:d7:2d:21:c0:a2:ff:1e:f1:b0:a7:a5:11:a3:b7:
96:e0:38:02:8a:7c:61:e2:7c:5e:17:99:b6:6e:54:11:b0:a8:
d0:ac:f2:15:9a:6e:b9:f7:0d:84:41:ec:5c:50:ec:62:ba:dc:
f4:b4:b4:14:82:75:33:74:22:a7:86:54:26:57:19:2c:37:e2:
1b:8c:81:12:88:76:db:03:96:e1:6d:6d:cd:5b:47:cb:36:89:
c6:97:9f:c1:de:a9:42:b9:41:76:d2:e2:83:55:45:f4:6b:01:
ad:41:bb:52:4d:9a:d8:75:c7:f1:ee:6a:60:14:05:01:43:b5:
b4:b5:f3:82
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAVyCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE3MDkzNDE5WhcNMjUwNzIwMDkzNDE5WjAYMRYw
FAYDVQQDEw02ODUxMzY5Zi00YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzM63wTWxH6JUZkMxk7b7vgxRXs5zcFUG1kH20tx1rdspGxpNKn9Atz66
sm72G2A8/UX6MnlhRhs3eMAtIv7vbGVR2T9nq9L8Ga6+Ha63CQarayyGgfCyCuhs
CFpJufclzJqOKXo9jbgpq+JVz/RXHtTMz5S9zTvYG7UpGWf/JYhTkH7DpCkL2kD8
m0d+3STnU/XLqC0bKMckIrCoedbrlLuJ+fORcN/fWZfAJoQOp+er9nyF3GqLYafm
ro4M9q6TRHz08MSFoBLotg11+Mz/BFXnIceb9QtceVzaMs4gCAiakp+5SadR3cGW
Ax17IviKEquaeLlWU/o8Cy+qAxpFZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2P
BBYaWZTeYOsXFJSBqiB4g2y8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MDlDQjVFMDRCNUUxMUYwQTQ5MkMxRjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcJXAwQALcJfMA0GCSqGSIb3
DQEBCwUAA4IBAQCpDoBhKM/GBisZs1iDVcjFLFiPBH5N/MaK9hkw1uyH4W+G/9Na
mRi2F9wV30rHjY149WjpbGGpO9VzXVz6h21JFNwhpme47R7bWoBCZ9o0kqEbaxWk
cGPa7pwJJHJitPEXsjacKfN5HeWE2EOb69aFu/CVmDr2sYc9CvXVUmnFNzl61y0h
wKL/HvGwp6URo7eW4DgCinxh4nxeF5m2blQRsKjQrPIVmm659w2EQexcUOxiutz0
tLQUgnUzdCKnhlQmVxksN+IbjIESiHbbA5bhbW3NW0fLNonGl5/B3qlCuUF20uKD
VUX0awGtQbtSTZrYdcfx7mpgFAUBQ7W0tfOC
-----END CERTIFICATE-----
Generated at Fri Jul 4 13:27:29 2025 by rpki-client