Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DFA77BE752A11F0A99E2A87DAE4EC9C.roa
File: 8DFA77BE752A11F0A99E2A87DAE4EC9C.roa (raw, json)
Hash identifier: CLmFy29NGtPJF0EeJs9sIkDt7RkXonT2he+z+ib1KUI=
Subject key identifier: 84:E2:29:D3:29:28:88:E5:34:4B:A0:D4:C1:64:40:E2:82:13:26:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DFA77BE752A11F0A99E2A87DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 14:10:08 +0000
ROA not before: Sat 09 Aug 2025 14:10:03 +0000
ROA not after: Tue 16 Sep 2025 14:10:03 +0000
asID: 401783
IP address blocks: 45.192.114.0/24 maxlen: 24
45.192.116.0/23 maxlen: 24
45.192.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92642 (0x169e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 14:10:03 2025 GMT
Not After : Sep 16 14:10:03 2025 GMT
Subject: CN=689756c0-e6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:fa:41:70:5e:f0:33:5f:ab:88:96:ac:a0:
d6:57:e5:a4:2a:94:c2:02:49:be:26:a0:bf:0e:d6:
2a:7e:d1:84:70:51:16:a5:b8:bb:b7:42:62:0a:e8:
5b:12:22:29:26:4a:63:e9:40:23:3f:91:a6:86:10:
22:f4:f8:e2:1b:cc:20:c1:6b:61:97:ab:c9:4a:ad:
a0:16:1e:1a:bb:f7:37:cc:2e:a0:f4:ba:81:16:b3:
1d:36:84:e2:8c:56:a0:a4:14:d5:dd:dd:cc:09:34:
d2:20:06:42:fd:24:a8:0a:38:f8:06:fd:76:c3:af:
51:71:8b:60:4c:38:a4:62:53:87:c5:25:d0:60:d0:
c9:3a:09:3f:4a:b5:e5:39:a0:da:f9:76:8a:60:fe:
f1:9e:e2:00:c1:bd:47:ed:a4:4e:5e:fb:be:d0:d3:
68:b3:5d:4f:b5:ea:47:7b:df:a2:d2:08:08:b4:79:
30:95:f9:e9:ea:7a:ac:8f:50:e5:86:57:81:c4:a7:
82:d9:e2:0c:a5:b6:01:6c:3a:b5:5c:0a:92:71:ec:
cf:dc:e1:14:08:6b:5a:cc:bd:c1:0d:67:2d:82:89:
89:97:21:b1:ee:14:d4:5f:16:42:ee:08:67:8b:17:
6c:d3:e1:27:1c:76:8b:9e:6a:d1:e5:c3:18:d6:00:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:29:D3:29:28:88:E5:34:4B:A0:D4:C1:64:40:E2:82:13:26:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DFA77BE752A11F0A99E2A87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.114.0/24
45.192.116.0/22
Signature Algorithm: sha256WithRSAEncryption
77:1f:94:ac:22:ce:1a:da:43:93:a0:b8:5a:c7:9e:66:63:b5:
c0:42:a8:fb:e2:55:e2:72:34:db:a1:93:50:70:02:86:9f:05:
9a:fa:11:44:20:9f:b1:45:58:1b:94:c9:dd:f7:f1:c0:f1:fb:
4d:e5:6d:c0:8d:e3:a2:4e:a6:eb:87:64:95:f5:28:dc:bd:59:
52:88:e7:9b:5b:18:3e:79:67:ee:4d:8d:2e:9b:a4:b8:ef:2d:
ae:48:b5:52:da:4d:16:6b:df:65:8b:26:34:53:3d:54:0d:46:
1f:dd:27:09:03:10:4a:fc:de:08:a9:42:6b:43:80:05:fa:cb:
33:7e:2b:98:55:98:a3:52:ec:5b:b8:f5:2a:81:1a:a3:20:ce:
f1:8c:df:29:c2:b0:82:af:a9:9d:e7:3e:e7:92:ce:9f:d6:79:
2b:63:cf:10:10:21:be:1f:25:70:ec:22:34:4e:d1:0e:67:aa:
65:47:18:85:50:57:11:7e:7b:14:08:d8:0d:2b:14:11:6c:a2:
70:36:a4:16:dd:7b:ec:5f:0e:22:49:ec:f8:b7:0a:f2:7c:ab:
5e:92:35:a7:d9:8d:d4:1d:3b:e8:4b:e9:89:1f:e1:52:27:c2:
c8:8a:36:67:ba:0b:5d:7c:0d:13:dd:ab:f4:99:0f:e3:3b:6a:
50:e2:1a:47
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWniMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA5MTQxMDAzWhcNMjUwOTE2MTQxMDAzWjAYMRYw
FAYDVQQDEw02ODk3NTZjMC1lNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnNL6QXBe8DNfq4iWrKDWV+WkKpTCAkm+JqC/DtYqftGEcFEWpbi7t0Ji
CuhbEiIpJkpj6UAjP5GmhhAi9PjiG8wgwWthl6vJSq2gFh4au/c3zC6g9LqBFrMd
NoTijFagpBTV3d3MCTTSIAZC/SSoCjj4Bv12w69RcYtgTDikYlOHxSXQYNDJOgk/
SrXlOaDa+XaKYP7xnuIAwb1H7aROXvu+0NNos11PtepHe9+i0ggItHkwlfnp6nqs
j1DlhleBxKeC2eIMpbYBbDq1XAqScezP3OEUCGtazL3BDWctgomJlyGx7hTUXxZC
7ghnixds0+EnHHaLnmrR5cMY1gATHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITi
KdMpKIjlNEug1MFkQOKCEyZyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84REZBNzdCRTc1MkExMUYwQTk5RTJBODdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcByAwQCLcB0MA0GCSqGSIb3
DQEBCwUAA4IBAQB3H5SsIs4a2kOToLhax55mY7XAQqj74lXicjTboZNQcAKGnwWa
+hFEIJ+xRVgblMnd9/HA8ftN5W3AjeOiTqbrh2SV9SjcvVlSiOebWxg+eWfuTY0u
m6S47y2uSLVS2k0Wa99liyY0Uz1UDUYf3ScJAxBK/N4IqUJrQ4AF+sszfiuYVZij
UuxbuPUqgRqjIM7xjN8pwrCCr6md5z7nks6f1nkrY88QECG+HyVw7CI0TtEOZ6pl
RxiFUFcRfnsUCNgNKxQRbKJwNqQW3XvsXw4iSez4twryfKtekjWn2Y3UHTvoS+mJ
H+FSJ8LIijZnugtdfA0T3av0mQ/jO2pQ4hpH
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:07:36 2025 by rpki-client