Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A93BB1095E711F0B7D769CFDAE4EC9C.roa
File: 9A93BB1095E711F0B7D769CFDAE4EC9C.roa (raw, json)
Hash identifier: V73ydTLwMF4GtBCvfZDq0mE6XWW2i8GJeDmbHNZXS0Q=
Subject key identifier: AA:F0:8B:A6:BD:09:43:4D:67:AB:DD:C4:77:2B:79:C0:69:4F:A5:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A93BB1095E711F0B7D769CFDAE4EC9C.roa
Signing time: Sat 20 Sep 2025 06:04:01 +0000
ROA not before: Sat 20 Sep 2025 06:03:56 +0000
ROA not after: Sat 21 Mar 2026 06:03:56 +0000
asID: 136907
IP address blocks: 45.202.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97414 (0x17c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 20 06:03:56 2025 GMT
Not After : Mar 21 06:03:56 2026 GMT
Subject: CN=68ce43d1-bc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:e4:6c:80:34:42:d9:8f:1e:07:a8:01:a4:
7b:e0:f3:12:9b:70:28:15:54:d4:46:57:c6:45:c0:
e8:7e:75:b6:bd:07:23:ec:1e:33:9d:4f:1b:f7:d1:
b3:d8:3b:18:48:0d:85:68:f1:14:30:9f:00:7b:75:
d8:6f:b1:60:c2:97:17:6e:f0:b3:60:67:4b:9f:39:
07:8b:02:a3:b0:52:ed:16:e3:34:a8:24:43:c5:47:
02:00:bc:2d:ff:15:d7:9f:18:62:e1:a9:58:3a:69:
3f:12:44:e0:66:28:21:e6:f8:57:0a:2b:9e:79:5a:
ca:1f:30:41:4e:dc:6e:a4:37:91:33:36:34:52:1b:
b6:44:4f:b2:cd:df:7d:f1:ec:6f:5c:73:ba:2f:01:
f4:e3:25:5e:5b:e6:74:94:05:f8:47:df:9a:80:bb:
26:da:f7:26:62:cc:74:37:68:73:7a:16:30:5b:73:
49:9f:ca:1e:a0:37:d0:d2:f3:a2:84:8c:13:1e:e9:
5f:0b:54:72:3e:c1:cb:b0:c9:ff:a3:a0:95:8a:9a:
c2:d0:5a:63:72:aa:46:21:45:5e:06:fd:1f:7b:e2:
ac:f0:e7:87:b3:a8:c0:07:c3:64:65:92:ed:91:8e:
8d:2c:cc:8d:c1:1d:58:d3:81:b6:73:db:74:76:9d:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:8B:A6:BD:09:43:4D:67:AB:DD:C4:77:2B:79:C0:69:4F:A5:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A93BB1095E711F0B7D769CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.160.0/20
Signature Algorithm: sha256WithRSAEncryption
16:36:6e:43:1c:ee:7f:32:76:41:49:a1:37:7d:f2:a2:44:53:
71:69:53:6c:69:1a:b5:d8:51:63:de:bc:98:ff:0b:c7:3c:fa:
6c:5a:19:db:a9:fe:92:49:01:b4:8a:e4:4a:c6:5b:57:86:1e:
72:3c:87:c2:3e:19:c9:63:e1:17:a6:c3:82:ca:cb:ee:c0:d6:
4e:8d:3d:09:f8:15:80:27:a9:67:ae:06:b3:48:b9:8c:3f:b4:
d0:c8:5f:07:70:10:f5:54:b3:2d:e6:00:aa:aa:70:cc:c3:f1:
40:cd:e6:f2:95:32:c5:44:1e:e9:7c:48:d6:97:e3:76:e5:78:
e4:64:51:7d:40:01:92:4e:59:b2:53:8e:96:93:97:22:25:d7:
12:89:1f:32:ab:b2:cf:c6:8a:46:5e:58:f1:65:cf:fd:04:6d:
a6:e5:84:dd:01:9e:01:23:12:a0:16:d1:9f:69:7d:44:03:a6:
fa:44:0c:0d:a4:af:d9:ce:c1:be:07:7a:79:32:1c:f9:7b:fa:
1e:76:4b:63:09:be:c0:ce:0c:21:f7:c0:fa:68:8e:79:d0:9a:
40:2c:13:84:8e:71:6c:47:ba:a5:f0:c0:50:80:69:63:35:ff:
3f:3b:1e:91:44:aa:09:7a:8f:9c:02:b9:c1:8d:ef:09:80:cb:
6c:a4:9a:74
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXyGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTIwMDYwMzU2WhcNMjYwMzIxMDYwMzU2WjAYMRYw
FAYDVQQDEw02OGNlNDNkMS1iYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2hPkbIA0QtmPHgeoAaR74PMSm3AoFVTURlfGRcDofnW2vQcj7B4znU8b
99Gz2DsYSA2FaPEUMJ8Ae3XYb7FgwpcXbvCzYGdLnzkHiwKjsFLtFuM0qCRDxUcC
ALwt/xXXnxhi4alYOmk/EkTgZigh5vhXCiueeVrKHzBBTtxupDeRMzY0Uhu2RE+y
zd998exvXHO6LwH04yVeW+Z0lAX4R9+agLsm2vcmYsx0N2hzehYwW3NJn8oeoDfQ
0vOihIwTHulfC1RyPsHLsMn/o6CViprC0FpjcqpGIUVeBv0fe+Ks8OeHs6jAB8Nk
ZZLtkY6NLMyNwR1Y04G2c9t0dp35uQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKrw
i6a9CUNNZ6vdxHcrecBpT6UwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTkzQkIxMDk1RTcxMUYwQjdENzY5Q0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcqgMA0GCSqGSIb3DQEBCwUA
A4IBAQAWNm5DHO5/MnZBSaE3ffKiRFNxaVNsaRq12FFj3ryY/wvHPPpsWhnbqf6S
SQG0iuRKxltXhh5yPIfCPhnJY+EXpsOCysvuwNZOjT0J+BWAJ6lnrgazSLmMP7TQ
yF8HcBD1VLMt5gCqqnDMw/FAzebylTLFRB7pfEjWl+N25XjkZFF9QAGSTlmyU46W
k5ciJdcSiR8yq7LPxopGXljxZc/9BG2m5YTdAZ4BIxKgFtGfaX1EA6b6RAwNpK/Z
zsG+B3p5Mhz5e/oedktjCb7Azgwh98D6aI550JpALBOEjnFsR7ql8MBQgGljNf8/
Ox6RRKoJeo+cArnBje8JgMtspJp0
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:28 2025 by rpki-client