Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A400FDC7E7311F0B74DBAA6DAE4EC9C.roa
File: 9A400FDC7E7311F0B74DBAA6DAE4EC9C.roa (raw, json)
Hash identifier: a+d3/Bbb6UyTS1iaRApZ0eTwUySSFU2R1oR9dHD5bqs=
Subject key identifier: 32:2D:75:30:0D:B9:71:A2:8D:E1:28:2B:65:0E:D9:C6:16:C8:30:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A400FDC7E7311F0B74DBAA6DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 09:45:43 +0000
ROA not before: Thu 21 Aug 2025 09:45:38 +0000
ROA not after: Sat 08 Nov 2025 09:45:38 +0000
asID: 150706
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93681 (0x16df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 09:45:38 2025 GMT
Not After : Nov 8 09:45:38 2025 GMT
Subject: CN=68a6eac6-397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8a:11:c6:8c:31:fa:3b:d6:aa:a2:66:39:92:
d6:45:aa:10:6a:59:43:f2:3a:8d:d0:d0:34:09:4b:
c8:05:d9:2f:8d:bd:b7:57:74:82:d6:54:4d:53:ee:
76:4f:19:23:5f:62:96:c4:4d:9b:f5:d5:c3:b7:ed:
ea:e5:25:1a:9f:45:0a:58:fe:f7:e4:3c:66:5a:a7:
80:0e:98:84:55:67:cc:9a:51:dd:f6:a7:ae:ae:1b:
50:80:ac:6a:fe:f4:50:0d:c4:d7:84:b9:76:05:f9:
f8:81:c3:08:e9:be:33:59:f6:86:09:66:ae:3e:3a:
cb:0d:fc:2c:c5:c5:21:16:34:61:d5:68:9f:d4:82:
17:5f:62:fd:93:1b:f2:5f:0a:d2:4f:89:0b:d2:2c:
f8:74:3d:8f:0e:e4:17:06:c1:e2:ef:8a:7d:46:0e:
e7:5c:28:57:b9:a1:26:77:fd:32:cd:0c:15:d6:96:
f0:25:14:d5:e0:76:50:23:05:14:39:d4:c3:c1:41:
fa:3e:81:85:74:18:0a:36:81:78:4b:97:83:8e:23:
d2:8d:7b:9c:64:f9:c0:ab:47:a3:0a:2a:b9:8a:f4:
14:58:0e:72:79:d8:8d:cc:f6:1a:a1:f0:9f:83:a0:
91:9c:af:c8:64:65:45:1b:14:c0:50:92:e9:58:62:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:75:30:0D:B9:71:A2:8D:E1:28:2B:65:0E:D9:C6:16:C8:30:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A400FDC7E7311F0B74DBAA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
21:ad:26:a6:d8:0e:07:2b:b0:0d:bc:26:d7:9a:71:12:a1:33:
8b:3c:d3:03:a5:81:2d:71:01:6b:a0:ba:0a:a7:90:a7:13:e5:
c4:70:db:da:c4:2a:41:5e:bf:fc:1b:99:9c:4a:bf:f1:64:64:
7d:e7:8f:4e:62:da:9a:15:73:d1:94:1d:b8:c5:e7:7c:e5:a3:
6a:41:05:3e:b2:85:87:00:77:ce:40:08:1a:2d:bd:d9:49:30:
a6:9c:60:6a:a8:ac:ba:ba:d2:2f:00:62:26:a7:1f:40:5c:70:
93:31:1d:de:73:48:1b:ec:6c:b0:53:56:e0:20:21:70:37:3c:
88:39:f5:ee:9c:f2:99:c3:db:90:c0:b7:fc:7a:3b:d6:73:5c:
0b:34:98:f1:28:a1:84:ec:98:28:78:a8:15:6f:35:0e:ef:d7:
aa:1e:09:e7:7d:56:98:be:1e:80:a3:cc:2b:95:2b:96:b9:35:
27:c3:cd:85:f5:d6:eb:57:a8:70:9f:07:4a:e4:92:ff:2e:1e:
89:7d:cb:14:c1:e8:9c:28:e5:2b:7b:0e:d1:20:f6:49:21:72:
e1:d1:97:3b:fa:43:a5:84:ca:52:f3:55:9a:f8:32:03:e6:a8:
17:92:da:47:ba:fa:6c:ea:1e:39:ce:bb:25:2a:e6:c6:ca:fd:
bc:48:70:28
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAW3xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIxMDk0NTM4WhcNMjUxMTA4MDk0NTM4WjAYMRYw
FAYDVQQDEw02OGE2ZWFjNi0zOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8ooRxowx+jvWqqJmOZLWRaoQallD8jqN0NA0CUvIBdkvjb23V3SC1lRN
U+52TxkjX2KWxE2b9dXDt+3q5SUan0UKWP735DxmWqeADpiEVWfMmlHd9qeurhtQ
gKxq/vRQDcTXhLl2Bfn4gcMI6b4zWfaGCWauPjrLDfwsxcUhFjRh1Wif1IIXX2L9
kxvyXwrST4kL0iz4dD2PDuQXBsHi74p9Rg7nXChXuaEmd/0yzQwV1pbwJRTV4HZQ
IwUUOdTDwUH6PoGFdBgKNoF4S5eDjiPSjXucZPnAq0ejCiq5ivQUWA5yediNzPYa
ofCfg6CRnK/IZGVFGxTAUJLpWGIyJQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDIt
dTANuXGijeEoK2UO2cYWyDALMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTQwMEZEQzdFNzMxMUYwQjc0REJBQTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLcCgMAwDBAItwKwDBAYtwIAw
DQYJKoZIhvcNAQELBQADggEBACGtJqbYDgcrsA28JteacRKhM4s80wOlgS1xAWug
ugqnkKcT5cRw29rEKkFev/wbmZxKv/FkZH3nj05i2poVc9GUHbjF53zlo2pBBT6y
hYcAd85ACBotvdlJMKacYGqorLq60i8AYianH0BccJMxHd5zSBvsbLBTVuAgIXA3
PIg59e6c8pnD25DAt/x6O9ZzXAs0mPEooYTsmCh4qBVvNQ7v16oeCed9Vpi+HoCj
zCuVK5a5NSfDzYX11utXqHCfB0rkkv8uHol9yxTB6Jwo5St7DtEg9kkhcuHRlzv6
Q6WEylLzVZr4MgPmqBeS2ke6+mzqHjnOuyUq5sbK/bxIcCg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:27 2025 by rpki-client