Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ADD3CAE2CE511F0B365C7D2DAE4EC9C.roa
File: 6ADD3CAE2CE511F0B365C7D2DAE4EC9C.roa (raw, json)
Hash identifier: UNxXdettKCGy37mmRv4V/BaQTkNcOoQw00A8cVh8d9s=
Subject key identifier: 9D:B7:28:F0:77:F1:8E:F5:F4:93:8F:FA:DD:14:03:B2:23:85:3A:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015333
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ADD3CAE2CE511F0B365C7D2DAE4EC9C.roa
Signing time: Fri 09 May 2025 14:53:50 +0000
ROA not before: Fri 09 May 2025 14:53:45 +0000
ROA not after: Wed 25 Jun 2025 14:53:45 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86835 (0x15333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 14:53:45 2025 GMT
Not After : Jun 25 14:53:45 2025 GMT
Subject: CN=681e16fe-077a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:9a:45:6b:e8:fd:f0:9b:9c:bd:2b:8e:0c:
56:10:b1:10:36:0a:b1:94:05:ee:2b:72:50:f5:3a:
ec:24:70:23:80:f7:25:94:3c:ad:5b:fe:44:e2:cf:
59:6d:61:ee:37:8c:e3:8e:ce:07:88:40:98:36:5f:
7c:67:20:fc:9f:cf:93:33:d9:83:d6:d7:0d:4b:b8:
06:71:2d:66:ac:21:2b:e1:9c:2c:ed:bd:df:fb:79:
d7:f0:20:e5:6a:13:58:95:2a:5f:36:5d:9b:e8:0d:
24:25:ee:f9:bb:da:8b:7b:cd:06:43:11:46:db:85:
ce:42:34:7f:14:21:ea:73:94:ee:d6:d6:71:a3:e1:
66:0f:50:8f:3d:49:05:53:9e:b0:04:f3:be:8e:36:
c1:4f:8b:81:b4:07:bb:66:4b:98:b7:1b:28:b3:0e:
a4:6d:ec:35:76:5d:6c:5c:76:34:23:34:22:b9:ab:
35:b1:bd:16:b6:27:cf:be:28:14:e9:0e:30:84:b6:
94:13:75:21:53:9c:d2:d8:c4:33:f7:d8:3a:78:a6:
de:37:28:94:91:00:16:af:f2:ba:d1:71:d4:42:8f:
a7:5f:96:06:b9:54:e7:67:6d:58:f0:42:b8:cf:2e:
94:25:13:98:91:f7:bd:d8:ca:a7:ab:e0:fb:d3:ba:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:28:F0:77:F1:8E:F5:F4:93:8F:FA:DD:14:03:B2:23:85:3A:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ADD3CAE2CE511F0B365C7D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
83:f6:0c:c9:62:03:13:62:ad:87:90:c0:20:cc:e8:ed:8e:63:
2f:1b:45:af:f6:30:d2:7b:93:0e:c2:03:72:2b:35:8c:47:48:
25:14:bf:33:00:37:1a:60:fc:93:e4:eb:d9:19:ee:83:09:ac:
68:3b:6b:de:7e:c2:b5:92:7d:2d:01:bc:cf:96:f9:b5:0b:29:
3c:89:09:94:e4:47:f9:c1:45:dc:05:85:3f:24:1d:e5:a6:fa:
03:bf:4d:f8:cc:5b:3d:9e:dd:4e:46:66:4d:b4:1e:47:9b:bc:
f5:fb:58:6b:14:04:23:78:c3:ac:e7:05:c9:c1:c3:90:09:b9:
cc:bc:16:d1:c1:25:8f:a0:59:8b:d7:97:9f:56:e8:d6:e1:6d:
ac:8b:df:85:fd:eb:da:4c:d4:8a:3c:c4:5e:08:f0:55:a8:0a:
9f:1d:8a:83:87:33:91:c4:81:2f:97:55:81:46:5d:2a:b5:cb:
73:46:65:83:35:0b:66:3d:b6:06:81:37:b0:11:d9:96:bf:2b:
bb:25:67:1a:d0:d2:09:0b:72:08:be:ef:3b:12:2f:6c:53:ce:
94:98:66:1f:bc:f1:1a:2d:4e:c9:9b:3c:fe:42:8c:78:90:d0:
09:22:95:8e:92:5c:71:ba:86:b3:56:63:20:23:a0:28:4e:92:
f3:a1:90:5c
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVMzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA5MTQ1MzQ1WhcNMjUwNjI1MTQ1MzQ1WjAYMRYw
FAYDVQQDEw02ODFlMTZmZS0wNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvO2aRWvo/fCbnL0rjgxWELEQNgqxlAXuK3JQ9TrsJHAjgPcllDytW/5E
4s9ZbWHuN4zjjs4HiECYNl98ZyD8n8+TM9mD1tcNS7gGcS1mrCEr4Zws7b3f+3nX
8CDlahNYlSpfNl2b6A0kJe75u9qLe80GQxFG24XOQjR/FCHqc5Tu1tZxo+FmD1CP
PUkFU56wBPO+jjbBT4uBtAe7ZkuYtxsosw6kbew1dl1sXHY0IzQiuas1sb0WtifP
vigU6Q4whLaUE3UhU5zS2MQz99g6eKbeNyiUkQAWr/K60XHUQo+nX5YGuVTnZ21Y
8EK4zy6UJROYkfe92Mqnq+D707rVJQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJ23
KPB38Y719JOP+t0UA7IjhTrsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QUREM0NBRTJDRTUxMUYwQjM2NUM3RDJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAty9UDBAAty9wwDQYJKoZI
hvcNAQELBQADggEBAIP2DMliAxNirYeQwCDM6O2OYy8bRa/2MNJ7kw7CA3IrNYxH
SCUUvzMANxpg/JPk69kZ7oMJrGg7a95+wrWSfS0BvM+W+bULKTyJCZTkR/nBRdwF
hT8kHeWm+gO/TfjMWz2e3U5GZk20HkebvPX7WGsUBCN4w6znBcnBw5AJucy8FtHB
JY+gWYvXl59W6NbhbayL34X969pM1Io8xF4I8FWoCp8dioOHM5HEgS+XVYFGXSq1
y3NGZYM1C2Y9tgaBN7AR2Za/K7slZxrQ0gkLcgi+7zsSL2xTzpSYZh+88RotTsmb
PP5CjHiQ0AkilY6SXHG6hrNWYyAjoChOkvOhkFw=
-----END CERTIFICATE-----
Generated at Sun May 11 07:37:27 2025 by rpki-client