Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45EAEEE4505011F0BE0664ABDAE4EC9C.roa
File: 45EAEEE4505011F0BE0664ABDAE4EC9C.roa (raw, json)
Hash identifier: 3eR0g7CQmEUSV7xNsrjWAfiXvwtadrSzvpXBYL49Lhg=
Subject key identifier: 04:AB:BD:4B:3B:21:DA:D5:4D:23:63:CD:C3:04:C2:51:CC:10:BA:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45EAEEE4505011F0BE0664ABDAE4EC9C.roa
Signing time: Mon 23 Jun 2025 16:36:55 +0000
ROA not before: Mon 23 Jun 2025 16:36:50 +0000
ROA not after: Mon 04 Aug 2025 16:36:50 +0000
asID: 401701
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89619 (0x15e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 16:36:50 2025 GMT
Not After : Aug 4 16:36:50 2025 GMT
Subject: CN=685982a7-7f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:ad:4f:55:0f:b3:1d:2a:6d:6a:e3:5f:35:
09:59:0e:7e:af:9c:57:5c:35:e4:73:0a:eb:b0:93:
c2:ba:e4:a4:49:72:7e:f5:ea:47:b0:66:16:3f:ac:
ab:6c:7d:4d:4f:54:57:8b:69:89:f4:df:f5:c2:b1:
82:ab:ab:2e:e9:d0:f0:fb:f6:19:35:e6:d9:69:56:
e8:02:5d:f9:40:1d:e0:f7:8e:35:c8:a9:e0:d4:91:
14:e2:7e:c3:96:d4:35:40:22:67:bf:3a:69:bf:ff:
d4:ad:bc:05:7e:9d:96:ba:21:70:ab:40:5b:5a:f4:
fb:3f:af:7a:fc:85:d9:19:57:f7:cb:70:6d:c1:12:
34:bb:9c:c7:17:f9:60:fc:fc:73:f8:07:5f:fe:0b:
ce:e4:bc:21:f5:97:2a:7e:58:6a:f8:ce:24:6d:fc:
0a:45:3e:4a:ad:b4:4c:ec:36:b0:d4:49:86:6b:04:
50:88:47:ce:a6:5c:84:dc:6e:da:6b:d7:03:74:c9:
b9:f0:f3:5d:b8:64:ae:7a:0c:79:cf:e7:9d:e0:65:
2c:36:f8:ca:de:3f:3c:31:e4:ac:bd:f7:b3:67:73:
0e:68:b7:53:39:14:3a:02:a1:b0:79:d1:45:30:8a:
77:12:78:36:97:4e:13:4c:26:56:9a:d4:1f:a4:d9:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AB:BD:4B:3B:21:DA:D5:4D:23:63:CD:C3:04:C2:51:CC:10:BA:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45EAEEE4505011F0BE0664ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
70:20:0a:b7:34:11:4a:b1:7e:1e:b1:c6:b9:8e:ea:38:8c:29:
86:30:b3:c0:e5:5d:b9:c2:f1:b9:1f:37:9b:36:61:1e:c7:78:
30:ae:a7:0f:6b:8c:4d:c1:0a:f7:6c:24:a2:e9:dd:c3:17:4a:
e9:ea:4d:16:ef:e3:32:fc:17:09:36:c9:fc:03:9e:71:95:45:
d7:3b:01:4c:72:31:54:2a:b4:83:34:3a:1a:53:16:1f:72:88:
42:14:96:65:35:99:5a:09:34:83:24:75:80:7e:9a:36:12:90:
4a:79:b4:35:ce:d5:d0:e8:9e:2d:90:fa:48:38:db:18:39:05:
11:7f:b2:c7:26:f6:d2:98:d7:72:44:b8:86:45:54:7e:93:41:
1e:a5:d9:2e:55:f8:c9:95:f6:d3:37:bd:24:fe:5e:7b:3b:05:
e2:fd:71:c2:ee:9c:db:39:64:c6:95:3d:47:41:3c:10:ae:99:
2e:4f:aa:1c:96:29:26:c4:c1:de:e8:24:d7:7b:19:a8:dc:fe:
48:be:4e:12:19:d5:0e:65:2e:ff:51:21:8e:44:51:a6:77:e6:
1f:68:0d:f0:23:93:e4:03:24:dd:e4:86:50:7b:f3:70:90:e7:
74:17:bf:55:aa:bf:2d:3b:7b:31:b0:33:a5:aa:d7:9a:98:0d:
7f:45:8e:53
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV4TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIzMTYzNjUwWhcNMjUwODA0MTYzNjUwWjAYMRYw
FAYDVQQDEw02ODU5ODJhNy03ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzletT1UPsx0qbWrjXzUJWQ5+r5xXXDXkcwrrsJPCuuSkSXJ+9epHsGYW
P6yrbH1NT1RXi2mJ9N/1wrGCq6su6dDw+/YZNebZaVboAl35QB3g9441yKng1JEU
4n7DltQ1QCJnvzppv//UrbwFfp2WuiFwq0BbWvT7P696/IXZGVf3y3BtwRI0u5zH
F/lg/Pxz+Adf/gvO5Lwh9Zcqflhq+M4kbfwKRT5KrbRM7Daw1EmGawRQiEfOplyE
3G7aa9cDdMm58PNduGSuegx5z+ed4GUsNvjK3j88MeSsvfezZ3MOaLdTORQ6AqGw
edFFMIp3Eng2l04TTCZWmtQfpNkTUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFASr
vUs7IdrVTSNjzcMEwlHMELoKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NUVBRUVFNDUwNTAxMUYwQkUwNjY0QUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQBwIAq3NBFKsX4esca5juo4jCmGMLPA5V25wvG5HzebNmEex3gwrqcPa4xN
wQr3bCSi6d3DF0rp6k0W7+My/BcJNsn8A55xlUXXOwFMcjFUKrSDNDoaUxYfcohC
FJZlNZlaCTSDJHWAfpo2EpBKebQ1ztXQ6J4tkPpIONsYOQURf7LHJvbSmNdyRLiG
RVR+k0EepdkuVfjJlfbTN70k/l57OwXi/XHC7pzbOWTGlT1HQTwQrpkuT6oclikm
xMHe6CTXexmo3P5Ivk4SGdUOZS7/USGORFGmd+YfaA3wI5PkAyTd5IZQe/NwkOd0
F79Vqr8tO3sxsDOlqteamA1/RY5T
-----END CERTIFICATE-----
Generated at Thu Jul 3 16:46:52 2025 by rpki-client