Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3A13D40565811F08FACE9EEDAE4EC9C.roa
File: B3A13D40565811F08FACE9EEDAE4EC9C.roa (raw, json)
Hash identifier: O8ay7hf8n2oAbh4TpRmDcFGX0q0jjvPJYJ115xs6C9Y=
Subject key identifier: D3:93:51:36:30:55:7B:29:E0:0D:55:9B:F6:6E:CD:ED:6F:E5:A1:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3A13D40565811F08FACE9EEDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 08:52:26 +0000
ROA not before: Tue 01 Jul 2025 08:52:17 +0000
ROA not after: Thu 10 Jul 2025 08:52:17 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90031 (0x15faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 08:52:17 2025 GMT
Not After : Jul 10 08:52:17 2025 GMT
Subject: CN=6863a1ca-664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:7c:18:af:63:6d:a3:f3:5d:33:10:f7:2a:
d2:fb:5c:0d:d8:50:37:68:f1:37:bc:2e:71:6c:14:
6a:8c:b7:16:91:3a:cc:75:92:77:88:42:07:45:e7:
01:9d:8b:b3:ce:e1:54:50:ff:4d:99:f6:75:8b:fa:
81:4c:fd:4a:8a:35:d0:13:ab:d8:a2:48:bf:a9:c3:
fb:62:d1:1a:64:4e:52:46:b9:e7:be:b9:5f:57:2f:
8a:c8:7a:ea:54:97:f5:72:b9:7f:4a:57:60:14:60:
ed:7e:f5:69:2c:0c:cd:b8:91:b4:b6:88:e3:67:76:
6a:1c:d9:63:ff:59:db:74:48:27:77:59:9e:c8:13:
a8:7f:da:35:0f:9d:8b:d0:42:ad:02:11:3f:6b:79:
19:0c:c8:b4:28:2e:8c:18:17:e1:49:b8:c9:47:55:
1a:87:3c:da:99:0a:fe:8b:33:69:81:fa:a3:4e:13:
92:4b:d8:8a:d9:18:e8:69:61:68:b2:f8:a6:5b:c9:
8f:4b:0e:ee:f1:8b:54:73:9f:ad:49:92:51:99:f6:
2d:ca:9f:0c:8c:66:14:bd:34:87:0a:a5:38:bd:bb:
0e:64:f2:2d:7a:77:ba:81:66:14:18:43:d2:34:61:
e0:17:02:b7:76:87:b7:70:be:e4:23:a8:b2:8d:fd:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:93:51:36:30:55:7B:29:E0:0D:55:9B:F6:6E:CD:ED:6F:E5:A1:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3A13D40565811F08FACE9EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:b8:e2:e3:35:0d:ef:30:f1:07:9c:ec:58:b8:1f:a0:ad:14:
2d:f0:2e:b9:3a:ab:3b:86:54:8c:34:69:74:c6:9a:68:26:8a:
52:ab:c1:39:87:64:ec:f4:dd:b8:15:a4:6c:45:32:c0:ab:07:
6f:3f:cc:db:63:35:4f:bd:3d:37:01:1e:60:d0:29:aa:f9:f6:
3a:83:e0:49:91:96:37:71:9c:cd:6b:6b:90:b5:47:66:ba:11:
55:53:99:f9:96:97:52:4e:41:4c:0b:f9:3c:c2:b5:ce:9c:7a:
42:2b:75:42:c2:cb:99:d3:a1:f0:48:ff:22:b4:1a:d1:f3:ff:
23:76:99:8b:d7:5f:05:73:3d:59:bb:0d:ae:b9:d4:68:27:09:
f5:4c:1e:db:d7:1e:07:43:60:68:6e:1d:25:f7:a9:c1:c4:b1:
74:2f:78:57:d3:81:d7:38:f7:1b:f4:27:80:b9:74:bb:14:41:
95:c3:44:56:a5:d5:79:40:b8:5e:c1:7b:79:7b:04:1a:7c:e1:
4a:3e:12:eb:ba:d0:5a:7c:93:bf:14:b8:93:2f:91:26:56:db:
76:67:a4:99:f5:21:f9:27:80:a2:c7:f9:bb:a0:88:28:30:4b:
e4:12:8c:76:f6:e1:22:3e:d4:e3:77:cd:13:6b:b6:a4:5c:f4:
6b:b4:b7:d9
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAV+vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAxMDg1MjE3WhcNMjUwNzEwMDg1MjE3WjAYMRYw
FAYDVQQDEw02ODYzYTFjYS02NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz2x8GK9jbaPzXTMQ9yrS+1wN2FA3aPE3vC5xbBRqjLcWkTrMdZJ3iEIH
RecBnYuzzuFUUP9NmfZ1i/qBTP1KijXQE6vYoki/qcP7YtEaZE5SRrnnvrlfVy+K
yHrqVJf1crl/SldgFGDtfvVpLAzNuJG0tojjZ3ZqHNlj/1nbdEgnd1meyBOof9o1
D52L0EKtAhE/a3kZDMi0KC6MGBfhSbjJR1UahzzamQr+izNpgfqjThOSS9iK2Rjo
aWFosvimW8mPSw7u8YtUc5+tSZJRmfYtyp8MjGYUvTSHCqU4vbsOZPItene6gWYU
GEPSNGHgFwK3doe3cL7kI6iyjf2oUQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFNOT
UTYwVXsp4A1Vm/Zuze1v5aGIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CM0ExM0Q0MDU2NTgxMUYwOEZBQ0U5RUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLcIOMAwDBAAtwhkDBAAtwhoD
BAEtwlADBAEtwlgwDQYJKoZIhvcNAQELBQADggEBAFq44uM1De8w8Qec7Fi4H6Ct
FC3wLrk6qzuGVIw0aXTGmmgmilKrwTmHZOz03bgVpGxFMsCrB28/zNtjNU+9PTcB
HmDQKar59jqD4EmRljdxnM1ra5C1R2a6EVVTmfmWl1JOQUwL+TzCtc6cekIrdULC
y5nTofBI/yK0GtHz/yN2mYvXXwVzPVm7Da651GgnCfVMHtvXHgdDYGhuHSX3qcHE
sXQveFfTgdc49xv0J4C5dLsUQZXDRFal1XlAuF7Be3l7BBp84Uo+Euu60Fp8k78U
uJMvkSZW23ZnpJn1IfkngKLH+bugiCgwS+QSjHb24SI+1ON3zRNrtqRc9Gu0t9k=
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:26:28 2025 by rpki-client