Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3636698A67F11F08C4308D9DAE4EC9C.roa
File: A3636698A67F11F08C4308D9DAE4EC9C.roa (raw, json)
Hash identifier: OylLic02cVsPGuBh+zzJthOnZ59VZCYWuufcSSz4rD8=
Subject key identifier: 3E:D3:B8:95:8B:3D:90:2D:1E:C5:FD:66:08:5C:17:6A:91:56:FB:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018009
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3636698A67F11F08C4308D9DAE4EC9C.roa
Signing time: Sat 11 Oct 2025 08:52:38 +0000
ROA not before: Sat 11 Oct 2025 08:52:30 +0000
ROA not after: Mon 10 Nov 2025 08:52:30 +0000
asID: 984
IP address blocks: 45.195.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98313 (0x18009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 11 08:52:30 2025 GMT
Not After : Nov 10 08:52:30 2025 GMT
Subject: CN=68ea1ad6-71b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:86:86:9e:53:0b:82:3d:8c:c0:d0:66:cb:
b4:f9:0d:6c:89:99:62:d8:95:60:c8:55:69:bc:05:
aa:86:f6:3b:c4:8a:ab:be:78:d2:8c:cb:38:59:3b:
ca:4a:ec:fa:41:a5:0c:58:fe:46:a3:a6:9d:38:bc:
f0:5e:fc:33:06:4f:7b:59:42:2d:7a:da:c4:d1:00:
c8:4f:05:9e:1b:b1:11:33:35:dd:57:e8:b4:49:bd:
9e:f3:9d:e4:95:2c:79:e7:8d:28:2c:eb:0d:23:50:
aa:a3:b6:84:fe:10:40:3c:dc:d8:e8:1f:0a:e6:53:
28:f7:dd:6a:57:a9:f8:0e:8f:41:df:13:3f:ee:da:
38:c0:76:58:52:18:2e:24:78:a0:fa:cd:ef:d6:03:
7a:95:ee:02:9c:30:e0:c8:bc:b0:08:8d:3a:43:55:
32:06:e9:9d:65:10:12:3b:39:25:5b:bf:76:68:24:
1a:c7:15:0b:71:56:8c:15:fe:a3:69:fd:97:95:d6:
29:6b:72:31:95:3d:f6:bb:ac:4a:b7:67:a5:2c:8b:
26:ec:e0:ff:52:a9:1f:0f:50:10:42:e7:aa:bb:c1:
c5:a2:4f:4c:4f:77:e1:0b:1a:31:d6:3c:db:b3:de:
1f:ce:1b:34:4f:a5:2e:57:a5:0f:c5:52:9d:59:7e:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:B8:95:8B:3D:90:2D:1E:C5:FD:66:08:5C:17:6A:91:56:FB:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3636698A67F11F08C4308D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cf:cc:31:8b:8a:59:db:5f:ca:a0:8d:3d:8e:19:3a:38:54:
59:74:28:a3:4c:6f:bb:f1:ac:5d:6f:28:bf:29:05:9c:8a:1a:
7e:60:3f:8d:ae:be:55:45:da:c2:91:fe:74:ef:4f:e8:06:60:
0f:82:e8:35:73:49:a1:2c:23:15:b7:d5:98:c2:5f:8a:2d:b7:
9b:2e:ab:57:17:c9:9d:a5:72:87:d6:79:44:32:fb:f6:88:21:
05:5a:4b:f9:c0:9b:ef:d9:b8:c5:2f:0e:b3:d2:c3:1c:cf:3e:
4b:d8:bc:c6:f7:b1:64:2a:ad:fb:12:2f:11:45:d4:4f:b7:27:
cf:f6:8d:20:9b:3f:3b:26:73:db:e7:a3:29:a8:f5:2c:99:12:
36:cc:2b:68:37:96:a9:9f:76:53:27:fe:e4:f1:3c:f8:49:f5:
21:7f:f4:98:df:62:b7:23:9e:32:c8:9a:49:91:b9:e1:2c:81:
fe:74:29:e9:5e:68:36:87:56:d8:37:5b:99:e2:99:8b:3b:26:
f0:b7:2d:a8:61:a2:40:73:5b:e5:a1:6a:26:0c:b9:6d:e1:fe:
b7:03:70:e0:be:a4:df:eb:66:38:9b:ec:c4:d6:2c:1f:68:2e:
a2:dc:0a:99:18:4b:7e:86:7a:c1:10:3e:4f:fb:43:2c:27:2b:
f3:c6:65:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYAJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDExMDg1MjMwWhcNMjUxMTEwMDg1MjMwWjAYMRYw
FAYDVQQDEw02OGVhMWFkNi03MWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2V2Ghp5TC4I9jMDQZsu0+Q1siZli2JVgyFVpvAWqhvY7xIqrvnjSjMs4
WTvKSuz6QaUMWP5Go6adOLzwXvwzBk97WUItetrE0QDITwWeG7ERMzXdV+i0Sb2e
853klSx5540oLOsNI1Cqo7aE/hBAPNzY6B8K5lMo991qV6n4Do9B3xM/7to4wHZY
UhguJHig+s3v1gN6le4CnDDgyLywCI06Q1UyBumdZRASOzklW792aCQaxxULcVaM
Ff6jaf2XldYpa3IxlT32u6xKt2elLIsm7OD/UqkfD1AQQuequ8HFok9MT3fhCxox
1jzbs94fzhs0T6UuV6UPxVKdWX6YGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD7T
uJWLPZAtHsX9ZghcF2qRVvuJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMzYzNjY5OEE2N0YxMUYwOEM0MzA4RDlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOZMA0GCSqGSIb3DQEBCwUA
A4IBAQArz8wxi4pZ21/KoI09jhk6OFRZdCijTG+78axdbyi/KQWcihp+YD+Nrr5V
RdrCkf5070/oBmAPgug1c0mhLCMVt9WYwl+KLbebLqtXF8mdpXKH1nlEMvv2iCEF
Wkv5wJvv2bjFLw6z0sMczz5L2LzG97FkKq37Ei8RRdRPtyfP9o0gmz87JnPb56Mp
qPUsmRI2zCtoN5apn3ZTJ/7k8Tz4SfUhf/SY32K3I54yyJpJkbnhLIH+dCnpXmg2
h1bYN1uZ4pmLOybwty2oYaJAc1vloWomDLlt4f63A3DgvqTf62Y4m+zE1iwfaC6i
3AqZGEt+hnrBED5P+0MsJyvzxmVn
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:32 2025 by rpki-client