Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/420FED7E729C11F0B3287EE3DAE4EC9C.roa
File: 420FED7E729C11F0B3287EE3DAE4EC9C.roa (raw, json)
Hash identifier: +rNDTbhTEw163PQvNAce/WQxkS0aBsI3Z6H3l2Odo/Y=
Subject key identifier: 3E:A8:5A:17:28:30:0A:BE:88:3C:6C:33:E1:B2:D3:65:71:34:C4:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01693A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/420FED7E729C11F0B3287EE3DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 08:06:30 +0000
ROA not before: Wed 06 Aug 2025 08:06:25 +0000
ROA not after: Fri 12 Sep 2025 08:06:25 +0000
asID: 395886
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92474 (0x1693a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 08:06:25 2025 GMT
Not After : Sep 12 08:06:25 2025 GMT
Subject: CN=68930d06-2574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:1c:61:36:96:48:a4:77:70:d9:4a:e7:a6:
95:d5:4e:06:61:74:3c:00:8f:86:35:37:fa:a3:6f:
8c:f6:3d:79:1a:61:0e:71:a3:65:43:82:09:1a:88:
8a:3d:3f:b4:4b:e0:98:eb:2e:48:e3:bc:09:01:81:
48:6c:a4:79:6e:25:29:db:b0:24:16:83:e4:b0:d0:
f3:bd:de:f2:94:21:ce:c4:82:ec:5b:6c:5a:cd:88:
c2:fa:ce:22:ac:ad:87:94:11:59:63:f3:7f:06:15:
59:da:57:c9:e6:0d:fe:f5:c6:5e:7d:56:33:2e:f9:
d3:3d:4f:74:39:2c:b1:4a:70:8d:00:1f:c6:58:7a:
0b:45:74:c3:08:24:a8:13:c7:bd:6e:78:6d:40:58:
e2:4d:c3:c0:57:bb:28:23:b9:ae:b9:a5:48:41:a5:
25:62:1a:20:64:70:71:a9:d7:44:77:d4:54:67:e4:
6b:df:ec:b0:12:fa:a7:b8:61:97:40:bd:1a:e2:f0:
30:55:1b:ae:79:43:ca:5c:c9:5c:59:7c:80:de:1e:
f3:c8:8c:26:f5:d7:68:dd:a7:c9:7f:dc:13:25:a1:
d6:2b:3c:14:37:be:33:2b:6a:44:a3:92:6c:01:e6:
c5:9b:d4:45:29:90:13:f7:5a:d9:1e:b5:79:30:d4:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:5A:17:28:30:0A:BE:88:3C:6C:33:E1:B2:D3:65:71:34:C4:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/420FED7E729C11F0B3287EE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
99:09:a2:67:50:f9:39:7c:9f:5a:23:ab:54:5a:f1:f5:d1:7e:
b0:6f:7e:e0:d2:43:21:92:85:ae:d7:29:90:4f:f1:78:34:b8:
ec:98:94:cf:25:e6:eb:d2:35:01:ee:21:69:be:22:94:0e:ab:
54:9c:44:0a:97:2e:e8:14:25:f2:e8:9b:b5:97:6e:d1:d4:4c:
5c:4e:1e:57:04:66:91:ae:c9:dd:4f:c5:fe:26:a2:78:91:5b:
b7:1d:47:44:9d:51:15:a4:b1:ad:08:f3:d5:30:7b:72:3d:97:
e4:5e:7b:5a:7c:4b:95:ab:6b:68:8e:40:c2:ab:c5:40:7a:39:
d1:73:b0:04:21:e9:71:00:23:65:48:85:c1:95:76:e7:9e:c4:
42:74:14:c0:33:46:89:6f:42:e5:94:a4:a9:c8:37:fe:bf:78:
b1:a2:a9:3b:ca:ba:92:3c:ad:13:4c:4e:d3:c8:86:ed:fe:79:
90:52:d5:03:71:8d:59:cd:02:5a:90:f5:f7:4d:21:f4:47:d1:
fc:f1:8c:d5:56:35:b4:10:7e:00:b7:0d:9d:96:42:89:7e:4f:
94:17:6b:a4:78:7e:e8:d0:93:08:9b:ff:c3:05:1b:63:68:52:
26:57:3e:45:24:5b:0f:30:cd:08:92:0a:b5:ba:1c:f0:a5:e4:
9f:fc:3e:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWk6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA2MDgwNjI1WhcNMjUwOTEyMDgwNjI1WjAYMRYw
FAYDVQQDEw02ODkzMGQwNi0yNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw80cYTaWSKR3cNlK56aV1U4GYXQ8AI+GNTf6o2+M9j15GmEOcaNlQ4IJ
GoiKPT+0S+CY6y5I47wJAYFIbKR5biUp27AkFoPksNDzvd7ylCHOxILsW2xazYjC
+s4irK2HlBFZY/N/BhVZ2lfJ5g3+9cZefVYzLvnTPU90OSyxSnCNAB/GWHoLRXTD
CCSoE8e9bnhtQFjiTcPAV7soI7muuaVIQaUlYhogZHBxqddEd9RUZ+Rr3+ywEvqn
uGGXQL0a4vAwVRuueUPKXMlcWXyA3h7zyIwm9ddo3afJf9wTJaHWKzwUN74zK2pE
o5JsAebFm9RFKZAT91rZHrV5MNTlXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD6o
WhcoMAq+iDxsM+Gy02VxNMRpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MjBGRUQ3RTcyOUMxMUYwQjMyODdFRTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQCZCaJnUPk5fJ9aI6tUWvH10X6wb37g0kMhkoWu1ymQT/F4NLjsmJTPJebr
0jUB7iFpviKUDqtUnEQKly7oFCXy6Ju1l27R1ExcTh5XBGaRrsndT8X+JqJ4kVu3
HUdEnVEVpLGtCPPVMHtyPZfkXntafEuVq2tojkDCq8VAejnRc7AEIelxACNlSIXB
lXbnnsRCdBTAM0aJb0LllKSpyDf+v3ixoqk7yrqSPK0TTE7TyIbt/nmQUtUDcY1Z
zQJakPX3TSH0R9H88YzVVjW0EH4Atw2dlkKJfk+UF2ukeH7o0JMIm//DBRtjaFIm
Vz5FJFsPMM0Ikgq1uhzwpeSf/D7f
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:08:38 2025 by rpki-client