Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E027784DE911F09A6B1E94DAE4EC9C.roa
File: 92E027784DE911F09A6B1E94DAE4EC9C.roa (raw, json)
Hash identifier: PuMth7cjLto7Nxk9tAYMCpfspWkFpo57onk+0YH0TPg=
Subject key identifier: 6C:FB:FD:A5:F1:97:C5:A4:EF:90:81:F6:26:02:BD:70:BB:90:2B:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E027784DE911F09A6B1E94DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 15:16:44 +0000
ROA not before: Fri 20 Jun 2025 15:16:39 +0000
ROA not after: Wed 03 Sep 2025 15:16:39 +0000
asID: 135377
IP address blocks: 45.194.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89469 (0x15d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 20 15:16:39 2025 GMT
Not After : Sep 3 15:16:39 2025 GMT
Subject: CN=68557b5c-b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:53:53:07:0b:0a:9e:ea:4b:27:0f:3e:ce:
4e:21:59:da:74:e2:6e:26:9e:c9:01:04:a8:2a:6a:
de:b6:34:b5:75:5d:b3:99:40:67:92:76:95:51:9d:
c7:14:9c:d3:76:6b:56:da:0d:0d:3d:27:0b:03:a8:
9a:0d:6b:9f:03:74:9a:24:9c:87:43:e4:37:f9:d9:
7b:2d:de:a9:96:3b:da:2e:96:8f:b8:14:90:60:7f:
95:48:ce:c1:2f:e7:c5:bc:f3:25:a1:53:85:8b:7e:
16:c8:16:9e:a0:19:3d:97:f3:27:67:1a:db:13:2c:
8e:b3:90:33:78:e2:84:d3:9b:0a:f1:75:c9:a4:36:
9d:46:f6:c1:5f:ec:a8:40:f9:b1:6a:b1:c4:57:48:
4c:71:ff:70:7b:b7:ef:ec:64:41:3c:e5:3e:26:9d:
49:fd:5b:fc:f4:e3:01:7c:30:e8:aa:d8:ff:58:5b:
db:3f:a5:a9:05:9b:47:55:aa:4c:c6:51:3f:b5:4e:
f6:1e:bd:92:60:74:5a:69:f2:07:fe:fb:20:c2:e9:
a1:0c:3a:1a:96:06:60:63:78:66:d0:89:1b:e5:38:
fd:7a:32:47:1a:e2:d8:57:25:07:2c:fc:b2:97:d1:
cb:9e:aa:f2:1e:21:c6:0b:a6:ac:c3:a7:b4:40:1a:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:FD:A5:F1:97:C5:A4:EF:90:81:F6:26:02:BD:70:BB:90:2B:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E027784DE911F09A6B1E94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.70.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9b:33:7e:0c:68:92:4b:3d:b3:7f:66:3d:be:50:ee:56:f8:
47:7c:93:fc:93:ec:75:99:0f:b4:04:48:2b:ba:13:6e:32:5b:
98:35:4b:a2:ad:bc:ab:e0:67:aa:e2:d5:e6:8c:07:7b:72:5e:
d8:8f:53:1c:d9:6b:43:05:0c:34:25:b4:68:85:d0:50:03:28:
07:7a:5f:48:55:fc:b4:ca:2b:c0:57:f8:2f:77:76:f8:00:db:
5c:71:33:a4:05:ce:b9:3b:90:3b:7b:ba:e2:d0:7b:1c:5a:c2:
17:91:0e:b2:14:4e:0a:ab:92:f3:67:8b:1f:6a:d7:14:4c:52:
bf:86:02:5b:cb:d6:c3:32:dc:39:98:4a:98:3d:4b:54:b7:14:
43:36:ae:f6:06:a2:33:0b:5f:6f:8e:e4:24:54:15:08:70:cf:
af:83:cd:1a:e7:f4:39:e6:16:98:d1:23:68:05:ca:25:4e:bc:
6a:fb:46:47:fe:d5:e8:cc:d1:f6:0c:ca:c4:e2:c4:65:eb:58:
4d:4d:4b:4e:eb:06:55:4d:ef:96:35:91:ea:44:ab:23:38:a3:
70:1b:49:5a:8d:50:9c:3e:46:3d:7f:b7:84:57:74:7c:f2:cd:
30:e4:12:02:f1:3c:6f:70:46:e7:6e:c8:d8:2a:0b:38:e9:9a:
b6:85:85:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV19MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjIwMTUxNjM5WhcNMjUwOTAzMTUxNjM5WjAYMRYw
FAYDVQQDEw02ODU1N2I1Yy1iOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz7JTUwcLCp7qSycPPs5OIVnadOJuJp7JAQSoKmretjS1dV2zmUBnknaV
UZ3HFJzTdmtW2g0NPScLA6iaDWufA3SaJJyHQ+Q3+dl7Ld6pljvaLpaPuBSQYH+V
SM7BL+fFvPMloVOFi34WyBaeoBk9l/MnZxrbEyyOs5AzeOKE05sK8XXJpDadRvbB
X+yoQPmxarHEV0hMcf9we7fv7GRBPOU+Jp1J/Vv89OMBfDDoqtj/WFvbP6WpBZtH
VapMxlE/tU72Hr2SYHRaafIH/vsgwumhDDoalgZgY3hm0Ikb5Tj9ejJHGuLYVyUH
LPyyl9HLnqryHiHGC6asw6e0QBprawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGz7
/aXxl8Wk75CB9iYCvXC7kCsoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MkUwMjc3ODRERTkxMUYwOUE2QjFFOTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJGMA0GCSqGSIb3DQEBCwUA
A4IBAQAEmzN+DGiSSz2zf2Y9vlDuVvhHfJP8k+x1mQ+0BEgruhNuMluYNUuirbyr
4Geq4tXmjAd7cl7Yj1Mc2WtDBQw0JbRohdBQAygHel9IVfy0yivAV/gvd3b4ANtc
cTOkBc65O5A7e7ri0HscWsIXkQ6yFE4Kq5LzZ4sfatcUTFK/hgJby9bDMtw5mEqY
PUtUtxRDNq72BqIzC19vjuQkVBUIcM+vg80a5/Q55haY0SNoBcolTrxq+0ZH/tXo
zNH2DMrE4sRl61hNTUtO6wZVTe+WNZHqRKsjOKNwG0lajVCcPkY9f7eEV3R88s0w
5BIC8TxvcEbnbsjYKgs46Zq2hYUx
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:11:00 2025 by rpki-client