Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C970F436242A11F081953CE9DAE4EC9C.roa
File: C970F436242A11F081953CE9DAE4EC9C.roa (raw, json)
Hash identifier: e+JCO9N0EhkzUilKCIWLzLmNnhn2nu34Crpx7Ap/UWg=
Subject key identifier: 26:AB:1C:91:BA:3E:6B:09:40:45:8C:EA:34:DB:10:A0:24:43:26:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C970F436242A11F081953CE9DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:17:44 +0000
ROA not before: Mon 28 Apr 2025 12:17:39 +0000
ROA not after: Tue 21 Mar 2028 12:17:39 +0000
asID: 17561
IP address blocks: 45.200.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85794 (0x14f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 12:17:39 2025 GMT
Not After : Mar 21 12:17:39 2028 GMT
Subject: CN=680f71e8-9b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:fc:57:8d:a6:44:95:97:c3:62:22:63:fb:
7c:da:d7:35:20:60:4f:30:b8:f2:4f:8d:24:2b:7b:
40:c4:0d:0d:44:5a:3d:81:b3:9b:f1:7a:88:41:94:
b3:0b:ec:37:75:14:dd:c2:ff:3f:22:4d:3a:d9:ec:
d7:61:68:51:7b:c7:38:d3:ff:31:70:93:2d:26:ff:
e9:ad:17:6f:84:1a:cb:c8:f2:b4:3a:90:2c:ea:87:
31:56:69:2e:1a:5d:91:0b:7a:2c:65:e8:3f:b9:70:
d2:db:b8:02:d6:10:4b:ec:0a:46:0b:16:fb:86:7c:
9b:e8:4b:f5:b2:01:18:97:9f:32:7f:99:8e:3f:74:
4d:6f:12:2c:5c:66:6c:fc:1a:48:48:a0:6d:06:78:
f2:a8:b3:14:e7:97:49:64:fa:60:9f:ff:ad:8c:07:
2f:88:55:8c:88:2c:73:35:ee:4b:5b:d9:d1:f0:72:
24:1a:80:3a:e5:92:b2:a8:a6:e0:34:ee:15:71:cc:
c7:96:6f:3d:88:d5:f5:aa:cc:cc:fa:11:f7:5a:1a:
bf:8c:ff:28:10:ff:a9:e4:ef:90:64:3f:68:2d:b4:
db:e3:00:d8:2b:33:8d:05:b7:26:91:47:99:20:f3:
99:70:bf:1e:78:bc:3d:7f:1a:8b:fe:9d:8d:b4:d6:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:1C:91:BA:3E:6B:09:40:45:8C:EA:34:DB:10:A0:24:43:26:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C970F436242A11F081953CE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:81:8b:42:03:29:ff:39:43:93:97:dd:61:bd:1f:a6:b7:54:
54:d5:09:d0:a6:75:bc:85:d0:e1:d0:b4:ef:b6:5b:cb:ba:0d:
7a:c7:34:91:3f:4b:57:1b:15:5d:ce:8a:ce:b8:60:6d:d6:e2:
12:0c:f3:c8:dc:eb:bb:cb:5e:18:f4:1b:97:1f:ec:71:34:a8:
74:a2:5b:1a:23:55:14:38:5f:bc:ef:89:14:e9:3c:ad:c9:71:
b5:c0:db:a5:de:7f:2c:81:7d:e6:26:93:83:76:61:9c:c8:f9:
d3:f3:8c:7c:0f:b2:83:d6:38:50:14:fd:27:47:aa:5f:aa:cd:
01:24:22:e9:d1:f5:1e:e2:bf:47:36:b9:54:76:dd:47:10:cc:
7b:b2:7b:7d:1c:0d:c5:db:7b:d7:21:cd:89:b5:39:8b:7f:24:
e3:c4:f7:ac:38:5d:e6:9c:1f:99:91:cd:d2:d7:3b:71:c1:17:
4f:2d:06:27:51:f5:a2:77:12:f0:ce:25:1f:18:7c:b9:85:23:
9a:3f:f8:f3:e5:c2:3f:30:4d:27:d5:7e:95:c9:02:20:46:4c:
26:8e:c3:14:a2:18:5b:2c:36:36:ad:ef:a9:5b:ea:61:89:34:
bd:ea:ad:2b:c6:73:74:9e:22:fc:ee:76:31:10:67:95:21:e9:
47:8e:f5:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU8iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTIxNzM5WhcNMjgwMzIxMTIxNzM5WjAYMRYw
FAYDVQQDEw02ODBmNzFlOC05YjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo7v8V42mRJWXw2IiY/t82tc1IGBPMLjyT40kK3tAxA0NRFo9gbOb8XqI
QZSzC+w3dRTdwv8/Ik062ezXYWhRe8c40/8xcJMtJv/prRdvhBrLyPK0OpAs6ocx
VmkuGl2RC3osZeg/uXDS27gC1hBL7ApGCxb7hnyb6Ev1sgEYl58yf5mOP3RNbxIs
XGZs/BpISKBtBnjyqLMU55dJZPpgn/+tjAcviFWMiCxzNe5LW9nR8HIkGoA65ZKy
qKbgNO4VcczHlm89iNX1qszM+hH3Whq/jP8oEP+p5O+QZD9oLbTb4wDYKzONBbcm
kUeZIPOZcL8eeLw9fxqL/p2NtNYK2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCar
HJG6PmsJQEWM6jTbEKAkQyZCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOTcwRjQzNjI0MkExMUYwODE5NTNDRTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALciMMA0GCSqGSIb3DQEBCwUA
A4IBAQBvgYtCAyn/OUOTl91hvR+mt1RU1QnQpnW8hdDh0LTvtlvLug16xzSRP0tX
GxVdzorOuGBt1uISDPPI3Ou7y14Y9BuXH+xxNKh0olsaI1UUOF+874kU6TytyXG1
wNul3n8sgX3mJpODdmGcyPnT84x8D7KD1jhQFP0nR6pfqs0BJCLp0fUe4r9HNrlU
dt1HEMx7snt9HA3F23vXIc2JtTmLfyTjxPesOF3mnB+Zkc3S1ztxwRdPLQYnUfWi
dxLwziUfGHy5hSOaP/jz5cI/ME0n1X6VyQIgRkwmjsMUohhbLDY2re+pW+phiTS9
6q0rxnN0niL87nYxEGeVIelHjvWJ
-----END CERTIFICATE-----
Generated at Sat May 10 05:17:18 2025 by rpki-client