Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675FD17272A911F0BAE531B9DAE4EC9C.roa
File: 675FD17272A911F0BAE531B9DAE4EC9C.roa (raw, json)
Hash identifier: kQhKH1r0buOJ/EkuFievV/O2SZrHs5sRuC47dgC0BcA=
Subject key identifier: 8F:64:37:27:8D:BE:2D:4D:F2:1F:D0:38:7A:D3:D0:ED:1C:20:C1:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016948
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675FD17272A911F0BAE531B9DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 09:40:36 +0000
ROA not before: Wed 06 Aug 2025 09:40:30 +0000
ROA not after: Mon 08 Sep 2025 09:40:30 +0000
asID: 147176
IP address blocks: 45.195.152.0/24 maxlen: 24
45.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92488 (0x16948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 09:40:30 2025 GMT
Not After : Sep 8 09:40:30 2025 GMT
Subject: CN=68932314-206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:bd:cf:6a:50:2e:b3:07:eb:27:d0:97:71:
a9:07:e7:a9:ca:99:6b:45:04:57:83:84:9c:bd:a9:
08:c7:0a:28:d5:e2:fd:c1:6f:40:e0:3a:15:b1:80:
45:76:a2:df:55:a5:bd:fa:59:8e:5f:46:54:4b:f7:
c9:27:9f:98:8b:45:9b:2e:7a:ef:a6:eb:76:80:ad:
bf:39:27:61:87:c3:75:93:8e:8b:3a:75:60:b5:87:
37:29:cd:f6:25:8d:5f:20:bb:cd:6f:f5:ad:d7:45:
92:6f:b3:ae:b9:d6:ee:d2:5e:5f:63:14:00:4a:a1:
82:28:2b:48:04:ef:db:7b:4e:f5:13:c4:09:ae:49:
be:28:c9:19:71:9b:fc:ac:9b:d6:6e:01:39:0e:cc:
9b:5f:07:e8:2c:6c:77:6e:80:61:8d:4e:a5:d4:99:
db:de:60:0e:d4:3b:45:83:48:4c:84:c2:85:ec:86:
79:5e:ef:e1:ba:dc:70:f6:82:2f:fa:c1:24:a2:a8:
9a:23:c7:cf:a3:09:91:7a:8c:9c:10:80:df:07:52:
40:af:93:c7:1e:de:44:71:b6:77:a8:17:66:b7:b3:
d1:8f:e9:22:99:6e:cc:35:6f:27:56:36:80:e0:6a:
35:eb:c6:0a:5b:51:92:c4:62:d9:24:81:38:f0:6b:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:64:37:27:8D:BE:2D:4D:F2:1F:D0:38:7A:D3:D0:ED:1C:20:C1:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675FD17272A911F0BAE531B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/24
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:85:a1:5e:df:79:89:1b:7e:4a:92:d8:38:82:89:b1:1f:e8:
0e:5a:0e:59:a4:8e:0b:58:cb:96:26:d1:6d:01:3a:39:3b:fe:
88:d7:43:74:c7:5e:37:ed:cb:23:69:7c:02:76:cc:a4:68:9f:
95:2b:23:59:45:24:fc:90:7b:fb:07:d3:d9:a0:41:0b:1e:02:
87:93:ac:bc:9e:f3:c9:76:00:bd:05:f9:39:2f:f8:8d:d1:fd:
95:00:e8:1a:4f:75:94:17:81:c9:ef:59:f3:6d:bc:57:6d:2e:
67:d5:0d:89:33:5e:58:7b:89:58:d4:30:34:e1:44:38:6c:d1:
f7:fd:ed:0a:54:cc:91:f4:8a:a8:a5:f3:43:5c:c6:ec:e6:0b:
16:17:0e:c5:19:05:d7:50:5e:a9:21:1e:dc:24:19:12:72:e5:
2b:5d:e0:b0:82:24:a5:29:2f:82:b6:8c:a5:65:ef:15:08:f6:
02:c9:68:55:27:d9:70:4f:a9:89:21:ac:6e:3d:43:4f:88:fe:
22:0c:d2:19:05:2c:32:fa:d6:b9:ca:c4:57:cd:24:72:63:19:
c0:26:3f:60:02:4b:d2:74:6e:2c:0b:72:f2:a9:1c:5f:8c:18:
46:67:b9:0a:eb:fc:1b:5c:69:78:73:9e:22:bc:84:99:a4:87:
aa:20:79:fc
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWlIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA2MDk0MDMwWhcNMjUwOTA4MDk0MDMwWjAYMRYw
FAYDVQQDEw02ODkzMjMxNC0yMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArrG9z2pQLrMH6yfQl3GpB+epyplrRQRXg4ScvakIxwoo1eL9wW9A4DoV
sYBFdqLfVaW9+lmOX0ZUS/fJJ5+Yi0WbLnrvput2gK2/OSdhh8N1k46LOnVgtYc3
Kc32JY1fILvNb/Wt10WSb7Ouudbu0l5fYxQASqGCKCtIBO/be071E8QJrkm+KMkZ
cZv8rJvWbgE5DsybXwfoLGx3boBhjU6l1Jnb3mAO1DtFg0hMhMKF7IZ5Xu/hutxw
9oIv+sEkoqiaI8fPowmReoycEIDfB1JAr5PHHt5EcbZ3qBdmt7PRj+kimW7MNW8n
VjaA4Go168YKW1GSxGLZJIE48GuUJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9k
NyeNvi1N8h/QOHrT0O0cIMF2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzVGRDE3MjcyQTkxMUYwQkFFNTMxQjlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcOYAwQALckAMA0GCSqGSIb3
DQEBCwUAA4IBAQA3haFe33mJG35Kktg4gomxH+gOWg5ZpI4LWMuWJtFtATo5O/6I
10N0x1437csjaXwCdsykaJ+VKyNZRST8kHv7B9PZoEELHgKHk6y8nvPJdgC9Bfk5
L/iN0f2VAOgaT3WUF4HJ71nzbbxXbS5n1Q2JM15Ye4lY1DA04UQ4bNH3/e0KVMyR
9IqopfNDXMbs5gsWFw7FGQXXUF6pIR7cJBkScuUrXeCwgiSlKS+CtoylZe8VCPYC
yWhVJ9lwT6mJIaxuPUNPiP4iDNIZBSwy+ta5ysRXzSRyYxnAJj9gAkvSdG4sC3Ly
qRxfjBhGZ7kK6/wbXGl4c54ivISZpIeqIHn8
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:04:53 2025 by rpki-client