Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7EE65C76DB11F0BBF44088DAE4EC9C.roa
File: AE7EE65C76DB11F0BBF44088DAE4EC9C.roa (raw, json)
Hash identifier: obrgtXIMUZhNhm8QAy/PawHdtoKn/g9SGq+t4uDJeOI=
Subject key identifier: F6:FB:77:5E:F2:48:D1:20:BF:85:D3:93:8E:02:22:F4:4B:43:58:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7EE65C76DB11F0BBF44088DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 17:50:35 +0000
ROA not before: Mon 11 Aug 2025 17:50:30 +0000
ROA not after: Mon 22 Sep 2025 17:50:30 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92767 (0x16a5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 17:50:30 2025 GMT
Not After : Sep 22 17:50:30 2025 GMT
Subject: CN=689a2d6b-6d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:ce:56:81:50:25:2e:06:58:36:ea:de:43:
f1:d7:cf:59:cc:22:f1:3a:8f:eb:f1:a4:6b:c6:40:
80:07:a6:12:71:03:cc:9a:ec:6c:c3:61:f4:34:be:
b2:74:d9:03:d9:09:61:01:47:04:2d:36:34:8b:81:
27:d7:cc:20:c4:c9:6d:bf:96:81:b0:26:eb:44:7b:
1a:97:49:35:42:94:f7:48:d7:50:24:4a:d8:fe:8a:
b1:0a:46:15:2b:f0:5f:70:d7:96:e5:03:a0:1b:bf:
d7:20:b1:d4:f0:8f:94:f6:a3:95:79:64:1f:aa:17:
f0:08:c4:de:73:5c:84:f8:9d:df:ad:16:56:95:2d:
ec:93:19:e8:c3:c4:7e:86:96:cf:8d:83:71:f2:a1:
f8:a8:9b:b9:3b:3d:7e:c3:7d:2c:d7:78:ca:d0:df:
c3:3b:19:64:8f:08:67:1d:83:8f:80:56:b7:64:7e:
7f:30:9c:21:e1:6e:de:7b:bb:54:a9:3e:16:b3:c1:
7e:43:67:fd:00:6f:95:44:e8:68:47:e0:b4:33:4f:
83:da:01:1f:ac:af:2e:09:69:86:b2:db:b8:3a:91:
b5:b8:c0:a5:ec:dd:1c:12:c3:63:d9:db:56:86:f2:
97:c2:db:41:17:66:08:5f:50:79:06:99:9b:c8:28:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:77:5E:F2:48:D1:20:BF:85:D3:93:8E:02:22:F4:4B:43:58:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7EE65C76DB11F0BBF44088DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
75:90:d1:7d:26:9b:d6:6a:7b:c3:b8:5f:c2:a3:1d:fb:fd:e7:
d3:38:2d:15:d6:0d:fb:52:cc:bf:16:14:76:d4:a1:18:9c:b7:
49:30:0d:d2:ab:ed:b9:e2:b6:6d:72:21:44:32:6d:b8:bf:11:
d2:06:ac:bd:ff:8b:ff:75:b4:43:9f:ea:03:b4:a0:f2:ea:c9:
f6:01:51:de:c9:92:50:28:ff:6b:28:54:cb:f5:6d:c0:f2:1a:
bc:8c:06:0f:c2:8a:0b:31:f9:16:25:86:59:88:0d:41:4b:71:
aa:de:bf:62:75:7f:46:c1:ad:29:68:3b:3c:af:68:83:72:b1:
46:a6:96:7e:06:66:82:ce:c8:85:3f:53:bf:2e:86:57:3e:ea:
47:67:bb:dc:c8:c5:a9:4d:da:af:01:4e:26:1f:07:63:73:c4:
30:66:c6:24:f7:c0:c1:b9:52:00:46:b0:d5:6c:02:19:16:0f:
c2:ae:9d:09:44:66:cb:7f:51:65:08:06:f9:7f:8e:f7:ae:e4:
88:51:a4:0b:fd:04:89:b8:28:76:d7:97:c3:78:d6:65:54:1d:
a3:1b:6c:a1:1e:0b:56:67:83:ad:40:e4:3c:ae:d4:99:d9:e7:
90:b2:7b:57:42:25:f7:82:7b:81:b0:b3:77:b2:64:04:68:56:
89:bf:c5:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWpfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODExMTc1MDMwWhcNMjUwOTIyMTc1MDMwWjAYMRYw
FAYDVQQDEw02ODlhMmQ2Yi02ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1qvOVoFQJS4GWDbq3kPx189ZzCLxOo/r8aRrxkCAB6YScQPMmuxsw2H0
NL6ydNkD2QlhAUcELTY0i4En18wgxMltv5aBsCbrRHsal0k1QpT3SNdQJErY/oqx
CkYVK/BfcNeW5QOgG7/XILHU8I+U9qOVeWQfqhfwCMTec1yE+J3frRZWlS3skxno
w8R+hpbPjYNx8qH4qJu5Oz1+w30s13jK0N/DOxlkjwhnHYOPgFa3ZH5/MJwh4W7e
e7tUqT4Ws8F+Q2f9AG+VROhoR+C0M0+D2gEfrK8uCWmGstu4OpG1uMCl7N0cEsNj
2dtWhvKXwttBF2YIX1B5BpmbyCggiwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPb7
d17ySNEgv4XTk44CIvRLQ1hjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRTdFRTY1Qzc2REIxMUYwQkJGNDQwODhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOGMA0GCSqGSIb3DQEBCwUA
A4IBAQB1kNF9JpvWanvDuF/Cox37/efTOC0V1g37Usy/FhR21KEYnLdJMA3Sq+25
4rZtciFEMm24vxHSBqy9/4v/dbRDn+oDtKDy6sn2AVHeyZJQKP9rKFTL9W3A8hq8
jAYPwooLMfkWJYZZiA1BS3Gq3r9idX9Gwa0paDs8r2iDcrFGppZ+BmaCzsiFP1O/
LoZXPupHZ7vcyMWpTdqvAU4mHwdjc8QwZsYk98DBuVIARrDVbAIZFg/Crp0JRGbL
f1FlCAb5f473ruSIUaQL/QSJuCh215fDeNZlVB2jG2yhHgtWZ4OtQOQ8rtSZ2eeQ
sntXQiX3gnuBsLN3smQEaFaJv8X7
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:35:57 2025 by rpki-client