Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BA9173279B011F0A8657D8CDAE4EC9C.roa
File: 9BA9173279B011F0A8657D8CDAE4EC9C.roa (raw, json)
Hash identifier: A+24llL97y5fV+fRl9VCjcgQOUPk5cxAyq7JPF0hKDY=
Subject key identifier: F8:C2:4B:F5:43:FD:3C:09:B0:19:45:28:84:5F:B2:C8:E2:05:7A:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BA9173279B011F0A8657D8CDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 08:19:48 +0000
ROA not before: Fri 15 Aug 2025 08:19:44 +0000
ROA not after: Tue 16 Sep 2025 08:19:44 +0000
asID: 273079
IP address blocks: 45.194.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92972 (0x16b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 08:19:44 2025 GMT
Not After : Sep 16 08:19:44 2025 GMT
Subject: CN=689eeda4-9996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:e5:14:f9:07:fe:c1:6f:7f:72:a8:98:f3:
5d:d5:44:53:42:21:9d:80:63:83:23:aa:1f:7c:fd:
65:9f:40:56:78:70:67:ff:d7:61:62:c2:ae:03:1d:
d6:01:95:32:d0:1f:a1:6b:4f:8c:86:0e:95:4f:cc:
b9:f5:b5:1f:4d:2a:0e:7c:e8:0c:83:ca:8b:42:50:
eb:a4:cd:0f:d9:a1:8c:0e:d5:fe:09:d9:fb:cd:68:
5e:a1:ab:30:7b:a0:27:cb:5a:26:ba:0f:35:4e:6b:
66:fa:8a:ac:d0:15:c5:29:c8:7c:05:c2:32:2f:07:
49:fc:80:15:6e:b3:dc:95:76:c2:78:fa:33:eb:cf:
5c:2c:cb:cb:9f:5d:ec:9a:48:28:7f:f8:9c:5e:fc:
d8:12:a2:dc:7c:72:59:29:52:40:54:e2:a8:cf:b4:
d3:bd:73:49:4b:78:b3:f4:31:59:e2:a3:98:35:62:
6b:62:ef:f3:89:1c:d9:06:61:36:f9:20:4d:c2:3e:
c2:8c:7a:95:80:80:45:de:cb:3d:1d:a6:8b:6c:51:
d4:ed:00:c8:b2:1c:eb:49:5e:14:a0:35:3e:d2:4c:
de:dd:7a:de:6b:69:be:40:21:45:43:09:92:de:ea:
ad:f4:1e:b7:56:b5:4c:ce:d4:45:e7:d3:ee:23:26:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:4B:F5:43:FD:3C:09:B0:19:45:28:84:5F:B2:C8:E2:05:7A:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BA9173279B011F0A8657D8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.45.0/24
Signature Algorithm: sha256WithRSAEncryption
03:95:83:60:fe:06:36:fa:38:c0:75:a8:5e:66:92:31:a1:18:
a6:a0:45:e4:69:8f:56:53:c2:58:67:dc:1d:55:f6:18:3c:1b:
4f:5e:97:6c:aa:53:c8:58:e7:ab:35:89:92:c5:94:ef:60:e7:
aa:26:94:8f:4d:a7:a9:6f:9c:dd:44:d0:bc:fe:02:76:fc:fd:
c5:f4:1d:6e:7f:bf:9e:d8:da:21:ce:00:21:b5:62:16:b8:c2:
4e:23:01:46:99:50:07:76:fb:9d:e2:ce:4b:fa:be:5c:67:96:
35:61:9a:f6:8b:c3:9a:e8:3e:a2:05:58:5f:5b:d1:07:14:38:
77:e6:68:54:4c:a4:2e:14:91:f5:cc:80:eb:81:2f:49:c2:70:
5b:05:ef:93:7c:89:ac:d9:91:7f:c7:00:da:0d:e9:70:ab:7f:
6b:c6:3c:23:9c:c3:c1:12:d5:8b:6c:d6:71:f1:f9:b1:9b:d1:
98:c3:9a:78:c2:1d:c4:99:e7:00:15:e7:47:63:48:44:da:a6:
c2:01:42:9d:41:16:21:4e:43:95:b9:ee:98:0b:76:45:ea:a2:
90:42:8f:bd:32:3b:4a:ca:60:87:c4:48:79:61:c9:ed:66:9e:
7f:5f:ff:74:86:20:73:92:f6:fe:d9:37:42:6b:b2:91:a3:cc:
21:97:22:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWssMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODE1MDgxOTQ0WhcNMjUwOTE2MDgxOTQ0WjAYMRYw
FAYDVQQDEw02ODllZWRhNC05OTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnGDlFPkH/sFvf3KomPNd1URTQiGdgGODI6offP1ln0BWeHBn/9dhYsKu
Ax3WAZUy0B+ha0+Mhg6VT8y59bUfTSoOfOgMg8qLQlDrpM0P2aGMDtX+Cdn7zWhe
oaswe6Any1omug81Tmtm+oqs0BXFKch8BcIyLwdJ/IAVbrPclXbCePoz689cLMvL
n13smkgof/icXvzYEqLcfHJZKVJAVOKoz7TTvXNJS3iz9DFZ4qOYNWJrYu/ziRzZ
BmE2+SBNwj7CjHqVgIBF3ss9HaaLbFHU7QDIshzrSV4UoDU+0kze3Xrea2m+QCFF
QwmS3uqt9B63VrVMztRF59PuIybnCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPjC
S/VD/TwJsBlFKIRfssjiBXpmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QkE5MTczMjc5QjAxMUYwQTg2NTdEOENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcItMA0GCSqGSIb3DQEBCwUA
A4IBAQADlYNg/gY2+jjAdaheZpIxoRimoEXkaY9WU8JYZ9wdVfYYPBtPXpdsqlPI
WOerNYmSxZTvYOeqJpSPTaepb5zdRNC8/gJ2/P3F9B1uf7+e2NohzgAhtWIWuMJO
IwFGmVAHdvud4s5L+r5cZ5Y1YZr2i8Oa6D6iBVhfW9EHFDh35mhUTKQuFJH1zIDr
gS9JwnBbBe+TfIms2ZF/xwDaDelwq39rxjwjnMPBEtWLbNZx8fmxm9GYw5p4wh3E
mecAFedHY0hE2qbCAUKdQRYhTkOVue6YC3ZF6qKQQo+9MjtKymCHxEh5YcntZp5/
X/90hiBzkvb+2TdCa7KRo8whlyK6
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:32 2025 by rpki-client