Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4F4220E751D11F0AE1437B3DAE4EC9C.roa
File: C4F4220E751D11F0AE1437B3DAE4EC9C.roa (raw, json)
Hash identifier: 7/lSy3gz/uXfXGWwJoyE61P2X1NdJDlSvpCXYlSDHrg=
Subject key identifier: 7F:6E:01:35:44:E8:52:AD:A3:5D:C4:3C:8F:D5:9A:98:F7:E1:8D:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4F4220E751D11F0AE1437B3DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 12:38:37 +0000
ROA not before: Sat 09 Aug 2025 12:38:32 +0000
ROA not after: Sat 14 Feb 2026 12:38:32 +0000
asID: 139871
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92603 (0x169bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 12:38:32 2025 GMT
Not After : Feb 14 12:38:32 2026 GMT
Subject: CN=6897414d-8b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:e4:59:aa:a4:69:44:8a:ec:0b:40:2d:87:
30:5c:8d:d7:91:02:72:46:94:29:96:1f:98:b8:94:
fa:56:08:0c:c1:7c:3f:f3:99:f8:99:44:2e:96:51:
db:81:ac:15:5f:da:15:76:99:40:9a:24:b3:a4:ba:
b4:ed:03:16:b2:93:87:b8:2b:cd:a7:6a:b0:09:ad:
c2:39:ec:21:18:21:c7:58:35:84:d0:07:5e:bc:cc:
20:bc:67:bc:31:9a:c9:e1:22:77:c9:dd:1c:d0:ff:
29:f0:62:e2:69:5b:c3:a2:29:db:96:2c:9e:a1:df:
8a:5f:ef:1d:31:87:9b:64:41:41:3c:d3:f2:36:ba:
01:16:2a:62:8b:c6:c8:63:53:72:30:bc:58:5c:a7:
ad:96:c6:9d:48:bb:cf:11:45:82:53:79:60:c9:a1:
e1:40:dd:51:8a:51:2a:93:f7:ab:30:41:10:7e:db:
91:dc:2c:9c:ba:26:dd:1c:d3:e7:8e:9c:2d:00:b1:
d9:1b:63:e6:72:f0:5a:57:28:e7:01:4f:bf:6f:df:
c9:e9:6f:f6:4d:33:ba:84:99:10:ef:a2:f5:a3:a3:
5c:f1:c7:01:6b:89:32:bc:94:ad:d2:2f:30:eb:e0:
bc:97:87:dc:3e:2b:83:31:2c:83:50:9c:04:fa:a4:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:01:35:44:E8:52:AD:A3:5D:C4:3C:8F:D5:9A:98:F7:E1:8D:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4F4220E751D11F0AE1437B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a7:6e:e7:21:f2:fa:b6:6c:a2:a9:c2:b7:a1:20:16:8a:82:
5b:31:df:78:e3:82:76:88:79:90:28:56:ae:24:49:cd:0c:36:
23:59:a9:47:31:49:db:12:8b:fc:47:20:1e:d2:1a:03:44:63:
51:c6:10:01:49:ac:06:1a:c2:a7:45:50:22:46:e0:3d:9f:35:
0d:d6:a1:85:51:c0:24:0d:8b:43:89:b5:3f:67:0b:a7:11:bc:
f4:a9:fc:b6:17:aa:3b:f9:61:d9:9c:f0:b8:92:c2:51:6e:35:
f8:59:9d:2f:c4:d6:5f:15:ec:d0:03:e2:da:6d:76:96:73:fe:
9b:3c:37:10:7a:4c:bb:0f:7c:03:9b:32:80:b1:f5:d1:0e:4e:
5e:98:c8:59:69:4a:24:4a:26:ca:96:df:5f:5d:9e:d1:b9:95:
0c:33:8b:1c:d9:ce:79:cb:24:a9:1a:f3:cd:b6:64:fa:a9:fa:
f3:49:81:24:16:43:d3:01:08:b7:b5:07:5c:59:ff:f7:e5:52:
d3:90:3d:5c:6b:64:11:f5:2e:68:4b:e7:be:aa:03:74:8b:6d:
d6:d2:fd:b6:bb:ce:30:5d:1b:8a:4f:60:4b:71:b2:86:13:8a:
19:70:26:48:2f:4c:4e:49:e2:84:0b:29:2a:de:7b:30:28:34:
d3:bf:ea:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWm7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA5MTIzODMyWhcNMjYwMjE0MTIzODMyWjAYMRYw
FAYDVQQDEw02ODk3NDE0ZC04YjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzUzkWaqkaUSK7AtALYcwXI3XkQJyRpQplh+YuJT6VggMwXw/85n4mUQu
llHbgawVX9oVdplAmiSzpLq07QMWspOHuCvNp2qwCa3COewhGCHHWDWE0AdevMwg
vGe8MZrJ4SJ3yd0c0P8p8GLiaVvDoinbliyeod+KX+8dMYebZEFBPNPyNroBFipi
i8bIY1NyMLxYXKetlsadSLvPEUWCU3lgyaHhQN1RilEqk/erMEEQftuR3Cycuibd
HNPnjpwtALHZG2PmcvBaVyjnAU+/b9/J6W/2TTO6hJkQ76L1o6Nc8ccBa4kyvJSt
0i8w6+C8l4fcPiuDMSyDUJwE+qTGsQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH9u
ATVE6FKto13EPI/Vmpj34Y0BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNEY0MjIwRTc1MUQxMUYwQUUxNDM3QjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAJMA0GCSqGSIb3DQEBCwUA
A4IBAQAkp27nIfL6tmyiqcK3oSAWioJbMd9444J2iHmQKFauJEnNDDYjWalHMUnb
Eov8RyAe0hoDRGNRxhABSawGGsKnRVAiRuA9nzUN1qGFUcAkDYtDibU/ZwunEbz0
qfy2F6o7+WHZnPC4ksJRbjX4WZ0vxNZfFezQA+LabXaWc/6bPDcQeky7D3wDmzKA
sfXRDk5emMhZaUokSibKlt9fXZ7RuZUMM4sc2c55yySpGvPNtmT6qfrzSYEkFkPT
AQi3tQdcWf/35VLTkD1ca2QR9S5oS+e+qgN0i23W0v22u84wXRuKT2BLcbKGE4oZ
cCZIL0xOSeKECykq3nswKDTTv+oV
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:13 2025 by rpki-client