Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B51C4027E6D11F08EC6637EDAE4EC9C.roa
File: 4B51C4027E6D11F08EC6637EDAE4EC9C.roa (raw, json)
Hash identifier: yrA+4LuYiRCoZtjoU0k2nRQqfwDZv8L9Uepj6k5Qehc=
Subject key identifier: 6E:C8:1D:B8:A5:0C:CE:9E:BE:07:52:85:D2:60:FD:FA:0D:2A:BA:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B51C4027E6D11F08EC6637EDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 09:00:33 +0000
ROA not before: Thu 21 Aug 2025 09:00:27 +0000
ROA not after: Sat 08 Nov 2025 09:00:27 +0000
asID: 63787
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/24 maxlen: 24
45.192.179.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93651 (0x16dd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 09:00:27 2025 GMT
Not After : Nov 8 09:00:27 2025 GMT
Subject: CN=68a6e031-186f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:e7:3c:f4:95:6d:82:85:10:7d:4d:84:42:
b6:3e:b3:60:48:73:a8:ac:44:4f:5f:21:87:14:4e:
19:f6:51:4a:bf:10:d9:38:94:ef:5c:71:72:70:ea:
19:60:e9:81:77:5f:fa:74:73:f6:35:54:55:76:bd:
87:54:4b:c1:b3:b5:4f:18:29:96:8b:f5:0e:2a:75:
aa:95:d7:a1:a4:03:9b:f5:f0:de:18:75:58:d0:83:
3f:15:61:30:8d:4b:ae:4f:80:db:48:8e:9d:07:c5:
2d:7a:65:7d:ab:91:d2:fa:05:f6:bb:0e:52:8f:8f:
30:29:aa:43:a3:cc:d4:55:d4:56:92:92:96:52:18:
82:2d:08:58:ff:ed:a8:97:0a:0e:4a:a3:0e:52:61:
4e:f1:ff:4a:5d:d9:7b:07:ff:0c:d1:d6:3b:13:4a:
d6:a4:28:3e:40:49:dc:bb:5f:3d:57:c4:0a:b4:11:
3f:93:f3:1a:2d:85:1e:8d:02:dc:55:33:c9:15:fc:
72:bb:0d:3e:68:3d:cd:e8:b8:84:71:73:5c:fe:2d:
63:1e:16:57:4d:03:39:ab:bf:85:66:9e:90:3d:46:
8c:fc:6b:d5:5e:dc:37:c1:80:e1:d1:dc:ac:8a:10:
b8:64:81:1b:1d:e0:bf:aa:54:95:d2:e1:55:50:04:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:1D:B8:A5:0C:CE:9E:BE:07:52:85:D2:60:FD:FA:0D:2A:BA:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B51C4027E6D11F08EC6637EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0-45.192.180.255
Signature Algorithm: sha256WithRSAEncryption
47:e5:2c:bf:d2:06:55:2b:e0:3f:64:47:fd:2d:57:5f:ed:96:
73:11:e5:3c:7b:47:34:96:00:7e:ae:68:59:58:99:e3:dc:85:
a8:47:3d:40:9d:99:ca:c0:80:77:a2:03:83:fd:0f:98:17:5f:
97:66:ec:35:91:18:4c:37:9a:99:a6:00:40:6e:ae:6d:45:16:
43:75:f6:3c:3d:61:84:ec:fa:12:03:1f:7c:2d:d8:d1:e7:d3:
21:97:34:19:2d:06:53:57:97:1e:c2:4f:c7:6d:d9:77:d0:68:
36:91:16:1e:2a:e2:c8:93:7a:18:aa:88:ff:8b:05:3c:5d:5a:
5f:5a:1c:96:18:05:8d:50:92:67:99:a6:51:08:66:5e:ef:46:
8f:e7:1c:8b:db:91:8a:08:2c:f7:f2:12:aa:c4:7d:2a:38:03:
3c:93:5d:53:b7:8f:af:6b:92:69:9e:06:34:36:1c:6f:49:98:
15:d3:ce:96:19:83:d9:d1:1c:df:f3:d2:7d:24:17:44:6f:06:
36:3e:2d:a2:41:1d:99:72:33:73:fa:c4:78:64:38:7d:f7:1a:
9c:7b:1d:00:41:4c:b1:30:8b:d1:43:59:70:64:73:56:3d:f0:
55:54:02:0b:f1:12:da:b6:e3:e4:ee:6e:b6:71:9b:13:99:3f:
4d:01:07:32
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAW3TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIxMDkwMDI3WhcNMjUxMTA4MDkwMDI3WjAYMRYw
FAYDVQQDEw02OGE2ZTAzMS0xODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyljnPPSVbYKFEH1NhEK2PrNgSHOorERPXyGHFE4Z9lFKvxDZOJTvXHFy
cOoZYOmBd1/6dHP2NVRVdr2HVEvBs7VPGCmWi/UOKnWqldehpAOb9fDeGHVY0IM/
FWEwjUuuT4DbSI6dB8UtemV9q5HS+gX2uw5Sj48wKapDo8zUVdRWkpKWUhiCLQhY
/+2olwoOSqMOUmFO8f9KXdl7B/8M0dY7E0rWpCg+QEncu189V8QKtBE/k/MaLYUe
jQLcVTPJFfxyuw0+aD3N6LiEcXNc/i1jHhZXTQM5q7+FZp6QPUaM/GvVXtw3wYDh
0dysihC4ZIEbHeC/qlSV0uFVUAQdSwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFG7I
HbilDM6evgdShdJg/foNKrrjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QjUxQzQwMjdFNkQxMUYwOEVDNjYzN0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtwLADBAAtwLQwDQYJKoZI
hvcNAQELBQADggEBAEflLL/SBlUr4D9kR/0tV1/tlnMR5Tx7RzSWAH6uaFlYmePc
hahHPUCdmcrAgHeiA4P9D5gXX5dm7DWRGEw3mpmmAEBurm1FFkN19jw9YYTs+hID
H3wt2NHn0yGXNBktBlNXlx7CT8dt2XfQaDaRFh4q4siTehiqiP+LBTxdWl9aHJYY
BY1QkmeZplEIZl7vRo/nHIvbkYoILPfyEqrEfSo4AzyTXVO3j69rkmmeBjQ2HG9J
mBXTzpYZg9nRHN/z0n0kF0RvBjY+LaJBHZlyM3P6xHhkOH33Gpx7HQBBTLEwi9FD
WXBkc1Y98FVUAgvxEtq24+TubrZxmxOZP00BBzI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:46 2025 by rpki-client