Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A786C076D111F0ADAD13C4DAE4EC9C.roa
File: 81A786C076D111F0ADAD13C4DAE4EC9C.roa (raw, json)
Hash identifier: ZSr8lKzY15nqwShkNEis6JApsR1eGr0U+/RyTmC4TE8=
Subject key identifier: 35:8F:26:2C:5F:F3:0E:10:0A:5A:4E:41:17:78:14:EE:28:44:03:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A786C076D111F0ADAD13C4DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 16:37:45 +0000
ROA not before: Mon 11 Aug 2025 16:37:40 +0000
ROA not after: Wed 17 Sep 2025 16:37:40 +0000
asID: 22773
IP address blocks: 45.204.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92747 (0x16a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 16:37:40 2025 GMT
Not After : Sep 17 16:37:40 2025 GMT
Subject: CN=689a1c59-dcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:76:55:f6:90:4c:61:9f:c0:8d:e2:47:d4:
2a:72:d6:9a:3f:0d:2b:f7:4b:9b:81:71:57:ed:df:
e5:4f:dc:e9:3f:eb:29:f3:21:80:be:f2:5f:cc:f4:
86:4c:74:96:21:73:9d:f1:93:37:e5:c7:71:5b:1e:
05:82:eb:f7:a7:f4:53:f9:a0:5d:fd:91:97:01:16:
99:b6:df:e2:9f:4c:93:5c:9b:91:e1:6b:4f:96:55:
fa:11:fe:18:65:d8:1d:46:bb:17:8a:cb:9a:85:72:
ee:c1:fd:a7:52:d7:6b:14:6d:01:06:84:f4:64:e1:
3f:46:93:f4:08:8c:27:c5:56:2b:a2:6d:89:a5:76:
4b:03:3e:5a:fd:59:0f:11:da:83:4e:87:45:e1:9d:
00:65:86:a0:12:cb:67:df:32:13:af:ba:ec:70:db:
26:84:dd:07:42:e3:fa:4f:0b:15:5b:6a:ec:b7:cc:
bf:19:79:b3:05:31:ad:5f:bf:55:dd:4a:7e:f9:e1:
1e:d1:ca:d7:a3:06:6b:0e:da:63:8d:12:df:fe:44:
59:43:4c:2c:9c:3a:0d:b4:d8:f7:3f:18:18:59:fa:
0f:e2:54:fd:59:07:83:00:cb:24:1b:c2:7e:a6:d0:
a1:da:fd:99:0a:50:d6:b0:c8:35:43:a2:7f:a9:a6:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:26:2C:5F:F3:0E:10:0A:5A:4E:41:17:78:14:EE:28:44:03:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A786C076D111F0ADAD13C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.80.0/20
Signature Algorithm: sha256WithRSAEncryption
10:db:25:f3:40:a3:1f:e2:ee:6d:c7:41:c7:1c:37:a3:9f:c2:
a3:ab:76:1d:e8:18:a9:6a:e4:2a:48:93:45:e9:07:6a:1e:22:
99:d5:56:9a:a7:a4:18:e6:4a:af:3f:2b:52:4e:9a:ca:51:c6:
aa:04:b6:3e:e4:ea:aa:4a:d9:54:4b:e9:e5:91:68:aa:d6:1b:
57:70:02:5b:7f:a8:89:37:6c:4e:50:59:c8:5b:28:3f:06:c1:
df:1e:05:04:17:1d:20:73:3b:76:5b:04:06:2b:3a:e2:b4:12:
4a:8b:e9:d9:ff:77:93:b1:b8:a4:56:89:4c:98:be:d0:93:1f:
cc:36:81:b0:de:b2:ce:4c:e5:3f:0a:d2:8b:8e:9d:56:65:4e:
37:3b:8a:ce:a4:07:75:4d:2c:11:e2:f4:a8:fa:a1:b9:22:4b:
d8:81:8c:03:b7:0f:1e:fc:03:41:ef:a2:92:02:0a:91:a1:a7:
78:fa:50:02:77:98:73:8b:fc:b6:9b:1d:3c:43:f5:85:23:fb:
7c:58:38:b2:49:6b:41:c9:9c:e2:24:66:c8:d2:02:7f:c0:19:
ee:d6:32:ad:82:47:c9:59:64:4e:70:70:23:ea:e9:ec:3f:bf:
a7:6b:2d:9f:7f:ed:b1:23:78:1d:93:72:ef:94:62:d3:78:50:
db:95:34:4c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWpLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODExMTYzNzQwWhcNMjUwOTE3MTYzNzQwWjAYMRYw
FAYDVQQDEw02ODlhMWM1OS1kY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6ut2VfaQTGGfwI3iR9QqctaaPw0r90ubgXFX7d/lT9zpP+sp8yGAvvJf
zPSGTHSWIXOd8ZM35cdxWx4Fguv3p/RT+aBd/ZGXARaZtt/in0yTXJuR4WtPllX6
Ef4YZdgdRrsXisuahXLuwf2nUtdrFG0BBoT0ZOE/RpP0CIwnxVYrom2JpXZLAz5a
/VkPEdqDTodF4Z0AZYagEstn3zITr7rscNsmhN0HQuP6TwsVW2rst8y/GXmzBTGt
X79V3Up++eEe0crXowZrDtpjjRLf/kRZQ0wsnDoNtNj3PxgYWfoP4lT9WQeDAMsk
G8J+ptCh2v2ZClDWsMg1Q6J/qaZoWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDWP
Jixf8w4QClpOQRd4FO4oRAPpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MUE3ODZDMDc2RDExMUYwQURBRDEzQzREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcxQMA0GCSqGSIb3DQEBCwUA
A4IBAQAQ2yXzQKMf4u5tx0HHHDejn8Kjq3Yd6BipauQqSJNF6QdqHiKZ1Vaap6QY
5kqvPytSTprKUcaqBLY+5OqqStlUS+nlkWiq1htXcAJbf6iJN2xOUFnIWyg/BsHf
HgUEFx0gczt2WwQGKzritBJKi+nZ/3eTsbikVolMmL7Qkx/MNoGw3rLOTOU/CtKL
jp1WZU43O4rOpAd1TSwR4vSo+qG5IkvYgYwDtw8e/ANB76KSAgqRoad4+lACd5hz
i/y2mx08Q/WFI/t8WDiySWtByZziJGbI0gJ/wBnu1jKtgkfJWWROcHAj6unsP7+n
ay2ff+2xI3gdk3LvlGLTeFDblTRM
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:58:39 2025 by rpki-client