Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C13A124A82E11F083B149BBDAE4EC9C.roa
File: 7C13A124A82E11F083B149BBDAE4EC9C.roa (raw, json)
Hash identifier: RB+QikezCDcaN4eUA2SAcJlGTh7kNrRri66qhr4vvXU=
Subject key identifier: D6:15:A8:BF:85:BC:8D:D0:AC:49:5C:C6:4F:50:6A:B8:AD:6B:39:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01806A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C13A124A82E11F083B149BBDAE4EC9C.roa
Signing time: Mon 13 Oct 2025 12:16:45 +0000
ROA not before: Mon 13 Oct 2025 12:16:40 +0000
ROA not after: Sat 01 Nov 2025 12:16:40 +0000
asID: 328840
IP address blocks: 45.195.91.0/24 maxlen: 24
45.195.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98410 (0x1806a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 12:16:40 2025 GMT
Not After : Nov 1 12:16:40 2025 GMT
Subject: CN=68ecedad-ced4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:d3:c7:1b:82:88:54:08:25:fb:80:93:ac:
b1:af:dd:31:3d:c8:6d:2c:91:fd:f5:b9:0c:ab:21:
64:48:36:f9:5d:70:17:f0:10:80:86:41:e8:37:db:
1e:c7:c9:21:e7:bb:84:17:6c:11:9a:59:1a:28:ab:
7c:83:e1:2d:49:f9:00:c3:46:d9:67:20:49:6b:16:
2f:89:16:cb:ea:6c:45:b5:ce:9e:b1:00:40:d3:61:
72:21:89:a5:b3:21:f8:ce:a5:8c:46:88:49:7e:a4:
f9:ab:04:84:da:69:a3:ef:78:f7:4d:9e:0a:9f:6e:
40:70:6d:17:14:4c:64:15:b1:af:40:b4:54:fc:5d:
20:2f:ed:f7:1d:4b:04:81:09:66:88:e4:21:5c:8c:
e9:81:43:33:5c:31:26:6b:61:29:d8:7c:ba:dd:58:
f2:72:25:b3:52:37:71:44:0f:33:c2:b7:ed:95:04:
07:04:98:4b:59:d4:b9:07:11:a4:4f:20:3b:b6:af:
86:f8:92:76:57:9f:06:40:ea:25:5c:9b:21:a4:84:
91:50:18:30:40:46:7b:25:6c:c6:be:a7:ad:f9:3b:
99:94:c1:42:c0:8e:25:33:e3:2b:b0:b7:48:8e:66:
5b:a7:6a:bc:41:7e:c4:ce:59:4a:d9:91:f1:9d:ef:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:A8:BF:85:BC:8D:D0:AC:49:5C:C6:4F:50:6A:B8:AD:6B:39:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C13A124A82E11F083B149BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.91.0/24
45.195.93.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d2:54:b0:6e:d7:9c:86:08:ec:80:f3:03:0a:f3:c2:68:89:
80:ab:9b:a2:d0:f2:21:4e:8e:70:3f:43:ad:ba:9e:69:cc:ac:
fe:ab:85:95:8b:89:fd:84:4f:b5:2f:4c:f8:bb:af:db:ec:6f:
8e:ba:f1:ca:e9:fe:58:74:1c:a1:f0:8a:67:75:31:53:28:aa:
05:cf:3f:dd:88:18:21:de:23:4d:f5:05:ec:44:a5:07:79:61:
4e:bd:7c:2f:e0:b3:07:f6:bf:89:55:fb:9c:bc:ec:4c:a0:f3:
f7:e8:78:ce:d2:e1:00:38:94:a4:4a:06:e6:20:79:24:c9:89:
76:9e:44:f5:f7:d1:71:ec:23:07:1d:97:5a:42:00:60:d0:e7:
53:07:58:ea:29:36:22:49:b2:c7:94:98:96:68:c2:d4:70:60:
fb:99:56:45:03:4d:47:9d:54:f7:2f:64:e1:da:dc:c9:f0:a1:
92:88:5b:fb:69:7e:66:10:6f:e9:3f:6a:65:6e:62:09:7e:b8:
11:78:ab:51:74:b0:52:11:f8:97:1c:e7:24:67:16:19:fd:9d:
86:5f:3d:13:96:dd:84:1d:65:38:81:7c:bb:5c:ea:74:8d:33:
25:de:d7:f5:5c:87:f3:1c:b6:50:20:03:54:e7:3f:8c:fb:1a:
0d:a6:d8:37
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYBqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDEzMTIxNjQwWhcNMjUxMTAxMTIxNjQwWjAYMRYw
FAYDVQQDEw02OGVjZWRhZC1jZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArt/TxxuCiFQIJfuAk6yxr90xPchtLJH99bkMqyFkSDb5XXAX8BCAhkHo
N9sex8kh57uEF2wRmlkaKKt8g+EtSfkAw0bZZyBJaxYviRbL6mxFtc6esQBA02Fy
IYmlsyH4zqWMRohJfqT5qwSE2mmj73j3TZ4Kn25AcG0XFExkFbGvQLRU/F0gL+33
HUsEgQlmiOQhXIzpgUMzXDEma2Ep2Hy63VjyciWzUjdxRA8zwrftlQQHBJhLWdS5
BxGkTyA7tq+G+JJ2V58GQOolXJshpISRUBgwQEZ7JWzGvqet+TuZlMFCwI4lM+Mr
sLdIjmZbp2q8QX7EzllK2ZHxne81tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYV
qL+FvI3QrElcxk9QaritazkSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QzEzQTEyNEE4MkUxMUYwODNCMTQ5QkJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcNbAwQALcNdMA0GCSqGSIb3
DQEBCwUAA4IBAQAD0lSwbtechgjsgPMDCvPCaImAq5ui0PIhTo5wP0Otup5pzKz+
q4WVi4n9hE+1L0z4u6/b7G+OuvHK6f5YdByh8IpndTFTKKoFzz/diBgh3iNN9QXs
RKUHeWFOvXwv4LMH9r+JVfucvOxMoPP36HjO0uEAOJSkSgbmIHkkyYl2nkT199Fx
7CMHHZdaQgBg0OdTB1jqKTYiSbLHlJiWaMLUcGD7mVZFA01HnVT3L2Th2tzJ8KGS
iFv7aX5mEG/pP2plbmIJfrgReKtRdLBSEfiXHOckZxYZ/Z2GXz0Tlt2EHWU4gXy7
XOp0jTMl3tf1XIfzHLZQIANU5z+M+xoNptg3
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:07 2025 by rpki-client