Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DDF167249DC11F0B0CA10AADAE4EC9C.roa
File: 4DDF167249DC11F0B0CA10AADAE4EC9C.roa (raw, json)
Hash identifier: qX7rDugS2SFKcd1ELfkNAbDiujYZ6//bR6kSbiW/Hho=
Subject key identifier: A7:72:E6:5C:E9:1B:07:AE:9B:BB:04:B3:B0:F1:A9:F5:8C:FF:C8:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DDF167249DC11F0B0CA10AADAE4EC9C.roa
Signing time: Sun 15 Jun 2025 11:31:40 +0000
ROA not before: Sun 15 Jun 2025 11:31:35 +0000
ROA not after: Tue 22 Jul 2025 11:31:35 +0000
asID: 19318
IP address blocks: 45.202.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89184 (0x15c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 11:31:35 2025 GMT
Not After : Jul 22 11:31:35 2025 GMT
Subject: CN=684eaf1c-6334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:63:2a:16:f3:9e:80:86:57:27:f0:de:2b:
7c:4e:ad:b6:dd:d1:a7:05:19:a3:fa:22:d0:a0:6a:
0f:45:d2:8d:37:7b:9d:c6:56:ec:41:bc:d1:aa:31:
b3:61:e5:e8:fd:e7:dc:88:4f:08:7f:c2:c2:52:a7:
68:8a:62:86:29:f5:4f:a1:90:a6:41:8f:a1:f9:4a:
4e:05:87:e3:8d:e1:35:c7:f9:09:d3:df:60:80:47:
61:69:f8:0b:f7:d1:ba:d0:9d:2a:5f:90:09:51:26:
40:8f:aa:67:08:4c:b7:93:4a:99:ac:dd:d4:f9:28:
d8:19:b8:5d:a2:e7:c7:bd:0c:d0:9f:c5:0e:c4:7b:
44:33:12:ea:61:91:be:a5:a0:c7:fd:1d:60:f4:03:
94:e6:fd:1c:94:01:26:fc:66:55:c0:cf:02:db:9c:
2a:ac:0b:4d:5b:5f:14:66:d4:9f:b5:74:46:67:a9:
3b:74:c2:36:b7:75:d6:7a:ba:c2:60:7b:6c:c5:6f:
70:14:da:da:a2:bc:7d:04:fa:75:99:49:d5:6e:0a:
d6:7e:89:21:61:96:ef:48:c3:c2:db:d1:c6:f4:ca:
29:d1:40:65:37:c7:71:71:8d:6b:38:e5:6d:1c:bb:
92:d6:e5:e2:c9:69:5d:15:1d:0f:2d:83:cc:15:c6:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:E6:5C:E9:1B:07:AE:9B:BB:04:B3:B0:F1:A9:F5:8C:FF:C8:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DDF167249DC11F0B0CA10AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.120.0/22
Signature Algorithm: sha256WithRSAEncryption
15:f8:78:c2:89:90:58:4e:84:6a:60:77:ea:47:c2:2e:de:5e:
e2:ad:9b:c4:f7:71:19:07:64:66:7c:8d:c1:65:91:7a:5c:10:
9d:b0:c0:c2:6c:43:db:e4:c6:c7:0f:19:60:af:b2:66:9b:70:
b9:42:9c:01:4b:aa:32:1d:9b:ab:75:f4:70:ba:7f:a8:a1:f4:
48:10:dd:7b:a4:d5:39:78:fa:32:b9:03:c6:07:a0:39:b3:41:
75:e1:ec:20:8a:6d:b3:e8:2e:bf:ee:89:ad:28:03:10:d2:a2:
39:d6:18:f2:e9:e9:cd:3b:48:2b:f8:b7:16:cd:91:76:ab:88:
9d:74:61:1d:dc:82:e6:7e:83:b2:48:4b:82:ba:04:84:d7:96:
32:ea:0f:b1:5b:ad:9b:66:fb:50:b0:71:55:41:d5:89:11:c9:
fc:11:2b:c3:0c:c6:22:89:05:bc:20:ea:42:f4:84:e9:95:1c:
90:92:a3:df:0f:08:57:a7:7c:6e:e6:64:6a:2a:a9:76:1c:d0:
91:a9:c0:a2:ee:11:2c:f9:25:93:a0:57:ef:76:7a:a3:e2:48:
e3:d4:fa:53:55:d4:91:64:d7:61:15:9f:bd:fd:d3:6d:11:92:
a5:55:f6:a0:a3:ad:15:b8:17:e3:f2:8e:c3:9f:97:34:b7:92:
b3:04:98:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVxgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE1MTEzMTM1WhcNMjUwNzIyMTEzMTM1WjAYMRYw
FAYDVQQDEw02ODRlYWYxYy02MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArlljKhbznoCGVyfw3it8Tq223dGnBRmj+iLQoGoPRdKNN3udxlbsQbzR
qjGzYeXo/efciE8If8LCUqdoimKGKfVPoZCmQY+h+UpOBYfjjeE1x/kJ099ggEdh
afgL99G60J0qX5AJUSZAj6pnCEy3k0qZrN3U+SjYGbhdoufHvQzQn8UOxHtEMxLq
YZG+paDH/R1g9AOU5v0clAEm/GZVwM8C25wqrAtNW18UZtSftXRGZ6k7dMI2t3XW
errCYHtsxW9wFNraorx9BPp1mUnVbgrWfokhYZbvSMPC29HG9Mop0UBlN8dxcY1r
OOVtHLuS1uXiyWldFR0PLYPMFcbtkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKdy
5lzpGweum7sEs7DxqfWM/8goMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RERGMTY3MjQ5REMxMUYwQjBDQTEwQUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcp4MA0GCSqGSIb3DQEBCwUA
A4IBAQAV+HjCiZBYToRqYHfqR8Iu3l7irZvE93EZB2RmfI3BZZF6XBCdsMDCbEPb
5MbHDxlgr7Jmm3C5QpwBS6oyHZurdfRwun+oofRIEN17pNU5ePoyuQPGB6A5s0F1
4ewgim2z6C6/7omtKAMQ0qI51hjy6enNO0gr+LcWzZF2q4iddGEd3ILmfoOySEuC
ugSE15Yy6g+xW62bZvtQsHFVQdWJEcn8ESvDDMYiiQW8IOpC9ITplRyQkqPfDwhX
p3xu5mRqKql2HNCRqcCi7hEs+SWToFfvdnqj4kjj1PpTVdSRZNdhFZ+9/dNtEZKl
Vfago60VuBfj8o7Dn5c0t5KzBJjJ
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:09:24 2025 by rpki-client