Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6776DE76D211F088B026CCDAE4EC9C.roa
File: 6C6776DE76D211F088B026CCDAE4EC9C.roa (raw, json)
Hash identifier: usZVl49/WwcRBvwzXoi2t26DdAv9u4GHEf2GPUqX4Sw=
Subject key identifier: 00:CE:38:DA:87:AF:37:E1:7E:43:6C:6A:A2:B8:59:CF:9A:87:1E:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6776DE76D211F088B026CCDAE4EC9C.roa
Signing time: Mon 11 Aug 2025 16:44:19 +0000
ROA not before: Mon 11 Aug 2025 16:44:14 +0000
ROA not after: Wed 17 Sep 2025 16:44:14 +0000
asID: 54801
IP address blocks: 45.195.62.0/24 maxlen: 24
45.195.199.0/24 maxlen: 24
45.197.20.0/24 maxlen: 24
45.199.130.0/24 maxlen: 24
45.199.131.0/24 maxlen: 24
45.199.134.0/24 maxlen: 24
45.199.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92753 (0x16a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 16:44:14 2025 GMT
Not After : Sep 17 16:44:14 2025 GMT
Subject: CN=689a1de3-f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:75:45:4a:e8:c5:df:b8:33:4c:5a:8f:95:
21:bf:d3:df:1a:99:d7:01:8f:cc:d3:c9:51:8e:3e:
8c:d0:2d:52:82:47:46:56:80:32:76:9d:5e:36:91:
2a:f5:d6:3d:ee:cb:32:96:91:2b:8d:63:cb:f9:d4:
14:c6:df:eb:af:91:e3:6e:73:96:ce:d0:39:5b:44:
40:44:f2:eb:58:7a:fc:6d:63:0c:cf:b1:14:bc:21:
38:21:35:57:f2:bd:79:31:50:f7:ff:69:09:a9:a1:
66:2e:25:5a:f0:e9:a2:ed:bc:13:af:c7:4d:ea:55:
93:c9:5d:30:07:95:22:60:01:21:7b:a6:80:0a:f9:
37:8c:f7:bf:ab:b8:43:b0:9a:cb:31:f0:f4:38:76:
bb:82:6a:fc:0a:3d:52:6d:d2:7b:b6:8e:fd:bb:97:
59:a1:0d:2e:b4:2c:62:77:7c:18:2d:9b:0e:dc:3c:
d5:6e:46:ab:7d:10:20:33:6a:b1:aa:7b:04:ba:b4:
e6:77:45:90:84:0f:65:e7:6e:39:ef:69:09:dd:98:
69:4c:61:af:e8:28:f3:e2:87:e0:5b:cf:79:f8:3a:
49:bc:9a:2e:df:67:bd:ff:e9:80:b5:bd:24:f0:06:
72:9d:6b:02:c8:e7:e2:f3:b0:f5:3e:51:a5:e7:37:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:38:DA:87:AF:37:E1:7E:43:6C:6A:A2:B8:59:CF:9A:87:1E:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6776DE76D211F088B026CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.62.0/24
45.195.199.0/24
45.197.20.0/24
45.199.130.0/23
45.199.134.0/24
45.199.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ef:af:bd:2d:61:ff:00:78:0b:36:d1:fe:ce:88:59:bf:a8:
02:48:c7:9f:1f:fe:2c:2d:a4:f1:b9:f8:f4:0d:09:77:22:03:
3e:b2:26:6c:73:7a:9d:bf:a5:a0:1d:c1:f8:55:5e:15:ce:26:
57:46:0f:3c:ec:27:77:2f:a0:f4:20:13:93:bc:bb:32:5e:7c:
62:2d:33:01:59:c7:62:36:c3:a8:d6:8e:54:5b:6a:0f:af:93:
60:5b:b8:01:f5:75:45:b9:44:86:2e:13:e4:2d:93:07:23:4d:
c2:7c:86:49:2e:2f:14:b7:40:c7:a9:e0:20:8e:ae:0c:27:f0:
1d:5c:5d:7b:47:b9:4f:5e:8e:78:c4:08:2e:3c:18:de:b7:ec:
c8:a4:74:a7:08:fa:e1:23:3c:f2:a2:aa:3d:50:25:42:4f:97:
6f:75:44:18:ab:2f:18:58:f8:7a:20:99:34:73:af:7c:26:63:
40:eb:8f:2c:02:0c:6c:15:ea:23:f6:ca:b9:9d:9e:90:c0:bc:
e3:99:d6:19:15:cd:ae:29:fc:ab:85:9f:23:00:59:62:91:81:
4d:66:06:a1:a7:3a:cf:8d:df:b9:7c:8b:86:a9:9d:68:7e:ab:
b5:c8:19:e5:7f:89:89:b9:16:84:ed:75:ab:10:82:45:33:5f:
5c:f6:95:ec
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIDAWpRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODExMTY0NDE0WhcNMjUwOTE3MTY0NDE0WjAYMRYw
FAYDVQQDEw02ODlhMWRlMy1mOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxY51RUroxd+4M0xaj5Uhv9PfGpnXAY/M08lRjj6M0C1SgkdGVoAydp1e
NpEq9dY97ssylpErjWPL+dQUxt/rr5HjbnOWztA5W0RARPLrWHr8bWMMz7EUvCE4
ITVX8r15MVD3/2kJqaFmLiVa8Omi7bwTr8dN6lWTyV0wB5UiYAEhe6aACvk3jPe/
q7hDsJrLMfD0OHa7gmr8Cj1SbdJ7to79u5dZoQ0utCxid3wYLZsO3DzVbkarfRAg
M2qxqnsEurTmd0WQhA9l524572kJ3ZhpTGGv6Cjz4ofgW895+DpJvJou32e9/+mA
tb0k8AZynWsCyOfi87D1PlGl5zd62QIDAQABo4ICwDCCArwwHQYDVR0OBBYEFADO
ONqHrzfhfkNsaqK4Wc+ahx7mMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QzY3NzZERTc2RDIxMUYwODhCMDI2Q0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALcM+AwQALcPHAwQALcUUAwQB
LceCAwQALceGAwQALceJMA0GCSqGSIb3DQEBCwUAA4IBAQA/76+9LWH/AHgLNtH+
zohZv6gCSMefH/4sLaTxufj0DQl3IgM+siZsc3qdv6WgHcH4VV4VziZXRg887Cd3
L6D0IBOTvLsyXnxiLTMBWcdiNsOo1o5UW2oPr5NgW7gB9XVFuUSGLhPkLZMHI03C
fIZJLi8Ut0DHqeAgjq4MJ/AdXF17R7lPXo54xAguPBjet+zIpHSnCPrhIzzyoqo9
UCVCT5dvdUQYqy8YWPh6IJk0c698JmNA648sAgxsFeoj9sq5nZ6QwLzjmdYZFc2u
KfyrhZ8jAFlikYFNZgahpzrPjd+5fIuGqZ1ofqu1yBnlf4mJuRaE7XWrEIJFM19c
9pXs
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:54 2025 by rpki-client