Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A6E4384E9811F08708AA89DAE4EC9C.roa
File: 59A6E4384E9811F08708AA89DAE4EC9C.roa (raw, json)
Hash identifier: 7ZfPEUnlfJWGYczetFdbEP4Q+kAyaJTINaPO9fsLqy4=
Subject key identifier: 60:96:92:08:6B:5B:DF:4E:9E:F4:A4:96:2E:94:9C:BA:0E:F3:76:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A6E4384E9811F08708AA89DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 12:07:49 +0000
ROA not before: Sat 21 Jun 2025 12:07:45 +0000
ROA not after: Fri 19 Jun 2026 12:07:45 +0000
asID: 62610
IP address blocks: 45.207.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89538 (0x15dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 12:07:45 2025 GMT
Not After : Jun 19 12:07:45 2026 GMT
Subject: CN=6856a095-1f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:67:62:f6:aa:ba:f9:5c:f5:28:4d:63:90:
c0:75:a4:e6:f7:76:f4:f4:d1:51:39:a1:f4:47:b5:
69:6a:fc:0b:e9:a2:10:0b:6e:6d:aa:08:0f:a7:a1:
7c:12:4f:11:70:7f:84:8c:cd:91:a5:98:a6:4d:ea:
6d:b1:ff:0d:af:9e:40:87:2d:db:a6:49:79:56:be:
44:42:e3:01:73:1e:34:ae:fe:0d:9a:b8:64:d9:d2:
98:9d:81:5c:9b:c0:c8:c4:16:2f:ce:7f:26:a0:74:
94:2c:c5:d4:f3:08:87:7a:2a:3e:b4:30:bf:a0:34:
fc:b9:6a:7f:e1:32:73:b5:d0:e7:6a:61:68:06:5a:
b2:a4:55:1f:06:18:17:07:1c:e8:1b:ea:62:53:b3:
80:86:49:43:e9:28:df:cb:36:27:35:7d:55:28:1f:
8a:01:49:d2:28:29:5d:a6:78:73:f3:4c:19:f9:a3:
b5:a9:80:b9:cf:eb:98:ea:0a:0e:4d:49:da:e7:38:
1d:6c:34:8e:78:b5:b9:df:c4:2e:f5:fc:7d:8e:eb:
90:c9:79:32:24:f3:ff:36:fb:e0:62:1e:4b:d9:18:
3b:8a:42:9b:8f:63:e0:94:92:b5:1c:4a:9b:70:13:
b1:4f:ba:11:47:b7:53:60:f4:3b:a5:89:3d:65:54:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:92:08:6B:5B:DF:4E:9E:F4:A4:96:2E:94:9C:BA:0E:F3:76:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A6E4384E9811F08708AA89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.168.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9d:3b:cd:f0:ce:e9:08:24:9b:25:e7:cc:15:98:f4:fa:81:
37:5d:39:7c:fc:53:70:b9:c6:c1:11:ba:ce:20:12:56:df:75:
1e:f3:b8:b0:d9:9f:f0:30:5f:8c:bd:2b:2c:db:2b:24:2d:13:
5c:2e:be:96:eb:f3:90:eb:61:3b:8a:94:1f:d5:ca:22:30:02:
28:aa:89:47:d6:e5:b5:41:69:ef:f7:21:c8:4e:ac:3b:e5:17:
48:af:58:ed:78:7a:65:6c:8b:64:59:3b:01:f7:f9:61:ed:0f:
fc:ab:23:04:38:c9:81:e5:af:07:4d:0e:72:4f:75:5d:f7:25:
8c:fa:6e:d1:4a:85:5c:e8:df:23:a9:6b:cb:7d:47:1a:70:c4:
95:ed:d0:62:f6:93:82:87:89:56:ea:6b:bb:ce:c4:2d:cf:7d:
a1:7a:d6:78:59:5a:7f:c9:e8:f1:f8:2a:5e:4c:3d:d8:13:7f:
e1:d7:c2:e9:0b:db:bd:ea:6e:a5:57:ee:5b:cb:ce:ed:e3:52:
c9:47:3f:fe:a3:73:dd:54:f8:41:d6:43:32:d5:21:67:8b:33:
68:92:04:df:d7:52:8f:58:89:ef:a9:55:ca:70:46:2b:f7:d9:
73:2f:8d:42:f3:ca:07:f3:dd:be:2f:09:54:65:2f:6c:61:88:
3b:92:6e:2b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV3CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIxMTIwNzQ1WhcNMjYwNjE5MTIwNzQ1WjAYMRYw
FAYDVQQDEw02ODU2YTA5NS0xZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsIRnYvaquvlc9ShNY5DAdaTm93b09NFROaH0R7VpavwL6aIQC25tqggP
p6F8Ek8RcH+EjM2RpZimTeptsf8Nr55Ahy3bpkl5Vr5EQuMBcx40rv4Nmrhk2dKY
nYFcm8DIxBYvzn8moHSULMXU8wiHeio+tDC/oDT8uWp/4TJztdDnamFoBlqypFUf
BhgXBxzoG+piU7OAhklD6SjfyzYnNX1VKB+KAUnSKCldpnhz80wZ+aO1qYC5z+uY
6goOTUna5zgdbDSOeLW538Qu9fx9juuQyXkyJPP/NvvgYh5L2Rg7ikKbj2PglJK1
HEqbcBOxT7oRR7dTYPQ7pYk9ZVSRBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGCW
kghrW99OnvSkli6UnLoO83YRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81OUE2RTQzODRFOTgxMUYwODcwOEFBODlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc+oMA0GCSqGSIb3DQEBCwUA
A4IBAQB4nTvN8M7pCCSbJefMFZj0+oE3XTl8/FNwucbBEbrOIBJW33Ue87iw2Z/w
MF+MvSss2yskLRNcLr6W6/OQ62E7ipQf1coiMAIoqolH1uW1QWnv9yHITqw75RdI
r1jteHplbItkWTsB9/lh7Q/8qyMEOMmB5a8HTQ5yT3Vd9yWM+m7RSoVc6N8jqWvL
fUcacMSV7dBi9pOCh4lW6mu7zsQtz32hetZ4WVp/yejx+CpeTD3YE3/h18LpC9u9
6m6lV+5by87t41LJRz/+o3PdVPhB1kMy1SFnizNokgTf11KPWInvqVXKcEYr99lz
L41C88oH892+LwlUZS9sYYg7km4r
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:33:47 2025 by rpki-client