Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89CDA8067E1B11F0BF9496D2DAE4EC9C.roa
File: 89CDA8067E1B11F0BF9496D2DAE4EC9C.roa (raw, json)
Hash identifier: j59CPr3i42TqkhnfWEVPuqiJtO2iPQxkgfJWM6XGZig=
Subject key identifier: A5:81:87:A5:54:56:CD:CA:B1:78:CB:C2:C6:FB:F7:9A:22:25:C7:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016D11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89CDA8067E1B11F0BF9496D2DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 23:15:19 +0000
ROA not before: Wed 20 Aug 2025 23:15:15 +0000
ROA not after: Wed 09 Aug 2028 23:15:15 +0000
asID: 17561
IP address blocks: 45.194.66.0/24 maxlen: 24
45.194.241.0/24 maxlen: 24
45.194.242.0/24 maxlen: 24
45.194.243.0/24 maxlen: 24
45.194.244.0/24 maxlen: 24
45.194.245.0/24 maxlen: 24
45.194.246.0/24 maxlen: 24
45.194.247.0/24 maxlen: 24
45.194.248.0/24 maxlen: 24
45.194.249.0/24 maxlen: 24
45.194.250.0/24 maxlen: 24
45.194.251.0/24 maxlen: 24
45.194.252.0/24 maxlen: 24
45.194.253.0/24 maxlen: 24
45.194.254.0/24 maxlen: 24
45.194.255.0/24 maxlen: 24
45.195.139.0/24 maxlen: 24
45.198.29.0/24 maxlen: 24
45.201.34.0/24 maxlen: 24
45.206.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93457 (0x16d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 23:15:15 2025 GMT
Not After : Aug 9 23:15:15 2028 GMT
Subject: CN=68a65707-0d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:c4:91:46:26:15:b4:df:75:3e:3d:bf:cc:
10:c7:bc:3b:fd:a4:77:eb:a0:5c:ec:ae:0b:86:b7:
17:96:8e:3a:65:6e:01:38:b6:b2:98:14:16:2b:3a:
15:80:f0:00:03:1f:bc:15:d4:56:4e:22:c6:f0:65:
a1:fb:75:a0:5a:36:ca:cf:84:a7:a3:1a:c2:e7:5a:
1f:fe:02:85:98:83:d8:0e:3a:71:cd:69:dc:20:01:
7f:20:84:fd:12:11:e2:ca:63:8f:3d:f9:b2:e6:86:
ca:7b:1e:b2:19:dd:23:fe:5f:69:77:30:47:d9:81:
d5:ec:0a:e8:97:52:d3:a5:49:15:50:5b:14:db:3e:
90:92:45:c7:10:41:51:9a:e0:f2:cf:52:fa:0d:40:
e6:56:ec:9b:d2:d8:a5:e1:d7:0b:de:cf:2a:84:9d:
c3:0f:26:b2:f4:0e:25:e6:9b:29:b0:01:b5:9e:57:
78:ca:93:38:81:fc:a2:0c:51:d8:a8:2e:42:45:ff:
4d:c4:5c:c4:07:bb:78:8f:75:81:53:19:72:5d:6b:
7b:0e:c4:1f:63:d3:be:15:51:c2:60:29:07:b3:a4:
59:37:d9:a5:3c:51:c9:ea:ad:d6:ea:14:25:79:20:
9c:7e:e0:8e:27:4a:c1:66:99:5f:ce:a6:00:fc:6b:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:87:A5:54:56:CD:CA:B1:78:CB:C2:C6:FB:F7:9A:22:25:C7:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89CDA8067E1B11F0BF9496D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.66.0/24
45.194.241.0-45.194.255.255
45.195.139.0/24
45.198.29.0/24
45.201.34.0/24
45.206.51.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d1:24:0b:08:6a:b9:54:bd:31:df:18:76:46:57:ce:43:00:
13:34:9c:11:25:da:d0:de:bf:f2:63:b2:5f:41:70:d2:66:93:
3d:f3:74:7b:91:3f:47:3a:a8:2c:d3:a4:75:08:99:56:99:f0:
45:94:37:26:55:35:0c:80:fd:64:50:66:1a:e4:c3:8a:1a:84:
7d:09:59:d6:bc:e9:50:b8:d6:5e:6c:b7:1f:82:a0:a6:12:53:
36:4b:3f:7f:2d:3a:e7:a1:a3:a4:64:4f:cc:6b:22:52:43:b8:
8d:c8:e8:f2:47:f9:0c:6b:af:33:01:54:05:fa:0b:05:dd:93:
4c:54:f9:5f:3f:dc:76:a8:3d:2e:8b:30:12:c7:3a:4d:93:e1:
89:bc:bd:89:ce:a9:d6:4b:06:6d:ce:07:7c:8b:f5:d4:e7:fe:
c3:e7:d5:47:ee:99:b0:06:78:d2:d6:eb:62:bf:73:aa:84:7a:
49:ef:f4:20:35:90:8e:36:23:44:c1:d4:8f:8f:50:4a:16:b5:
48:75:ac:db:e8:24:77:45:64:d2:62:e3:fa:a7:72:ee:ce:48:
06:8c:cd:14:a5:ee:cb:b7:45:9a:00:a8:0c:f9:e9:06:a8:51:
9c:e7:3c:d0:ab:72:72:a1:95:43:c6:98:d5:33:30:45:6e:ac:
e5:1e:ee:ae
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAW0RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIwMjMxNTE1WhcNMjgwODA5MjMxNTE1WjAYMRYw
FAYDVQQDEw02OGE2NTcwNy0wZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv5DEkUYmFbTfdT49v8wQx7w7/aR366Bc7K4LhrcXlo46ZW4BOLaymBQW
KzoVgPAAAx+8FdRWTiLG8GWh+3WgWjbKz4SnoxrC51of/gKFmIPYDjpxzWncIAF/
IIT9EhHiymOPPfmy5obKex6yGd0j/l9pdzBH2YHV7Arol1LTpUkVUFsU2z6QkkXH
EEFRmuDyz1L6DUDmVuyb0til4dcL3s8qhJ3DDyay9A4l5pspsAG1nld4ypM4gfyi
DFHYqC5CRf9NxFzEB7t4j3WBUxlyXWt7DsQfY9O+FVHCYCkHs6RZN9mlPFHJ6q3W
6hQleSCcfuCOJ0rBZplfzqYA/GsffwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFKWB
h6VUVs3KsXjLwsb795oiJcddMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUNEQTgwNjdFMUIxMUYwQkY5NDk2RDJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwQALcJCMAsDBAAtwvEDAwAtwgME
AC3DiwMEAC3GHQMEAC3JIgMEAC3OMzANBgkqhkiG9w0BAQsFAAOCAQEAM9EkCwhq
uVS9Md8YdkZXzkMAEzScESXa0N6/8mOyX0Fw0maTPfN0e5E/RzqoLNOkdQiZVpnw
RZQ3JlU1DID9ZFBmGuTDihqEfQlZ1rzpULjWXmy3H4KgphJTNks/fy0656GjpGRP
zGsiUkO4jcjo8kf5DGuvMwFUBfoLBd2TTFT5Xz/cdqg9LoswEsc6TZPhiby9ic6p
1ksGbc4HfIv11Of+w+fVR+6ZsAZ40tbrYr9zqoR6Se/0IDWQjjYjRMHUj49QSha1
SHWs2+gkd0Vk0mLj+qdy7s5IBozNFKXuy7dFmgCoDPnpBqhRnOc80KtycqGVQ8aY
1TMwRW6s5R7urg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:26:49 2025 by rpki-client