Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07DF7445A6F11F0981F3A8ADAE4EC9C.roa
File: D07DF7445A6F11F0981F3A8ADAE4EC9C.roa (raw, json)
Hash identifier: DAnIIyTAmPRZaDn5LiwiF6BqKMeVCrN4S0KRjkvZjSE=
Subject key identifier: 8F:32:78:AC:4C:48:A2:75:6C:58:9E:48:8D:37:AD:00:EC:0F:67:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016210
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07DF7445A6F11F0981F3A8ADAE4EC9C.roa
Signing time: Sun 06 Jul 2025 13:47:54 +0000
ROA not before: Sun 06 Jul 2025 13:47:49 +0000
ROA not after: Thu 07 Aug 2025 13:47:49 +0000
asID: 271907
IP address blocks: 45.195.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Jul 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90640 (0x16210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 13:47:49 2025 GMT
Not After : Aug 7 13:47:49 2025 GMT
Subject: CN=686a7e8a-4a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:3f:f1:81:00:82:30:41:17:10:f8:78:5a:
3c:a5:78:db:32:94:3b:66:92:02:4a:bd:49:1d:e2:
00:cb:2f:a9:e9:0a:2d:cf:15:1f:52:25:7f:1a:4c:
a7:00:4b:da:1b:77:7b:b1:4c:7a:2c:2f:65:8c:79:
67:24:02:63:47:1b:78:57:e2:cf:c4:59:d4:93:10:
d5:80:fe:9c:54:63:33:72:dc:08:85:39:a0:46:e8:
39:1f:73:e4:52:10:53:61:70:1c:21:2e:34:56:21:
d7:a6:75:fc:56:48:c0:04:27:cf:b8:a8:c1:33:2b:
80:09:9f:6a:b8:55:65:8f:d7:b1:04:91:f8:59:78:
35:38:51:f0:bb:c7:e9:0d:d7:bb:b4:ce:db:22:bd:
6b:02:ea:9e:26:96:35:68:2a:09:1f:fc:40:4a:e3:
32:c4:09:aa:38:b3:bf:52:bd:ec:de:bb:89:e7:dc:
b8:c7:62:1f:c9:11:ce:86:8b:52:0b:c3:cb:5e:5c:
81:40:30:7b:10:c6:8d:40:49:e2:a7:30:b0:7b:0a:
ac:4b:3b:f2:f6:0b:46:d5:e0:10:c8:57:6a:2d:bb:
f8:66:69:9e:cf:e1:1d:c5:04:c7:7f:e8:5e:f5:8f:
cc:a1:d6:b9:e5:83:3d:11:ad:51:b1:b1:64:3a:0d:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:78:AC:4C:48:A2:75:6C:58:9E:48:8D:37:AD:00:EC:0F:67:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07DF7445A6F11F0981F3A8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:a0:ec:cf:6b:27:de:0f:60:33:85:48:1f:a1:61:86:ee:5c:
18:f1:60:b3:06:e3:d3:1e:af:43:67:3a:bc:08:b2:e5:d7:78:
ec:9f:57:4e:3f:62:e3:dc:5e:93:a8:4a:45:9f:7a:94:23:07:
ce:f9:02:24:02:39:e8:ca:37:fa:44:13:73:5c:5c:41:e3:20:
af:c2:29:83:d3:aa:68:72:53:d0:0e:1a:b0:3d:a6:29:c0:dd:
ff:4f:e0:ed:07:b3:0d:67:30:fe:da:5f:79:dd:08:13:c9:66:
e5:a6:cc:a2:ea:59:13:b5:55:3d:87:02:9d:d8:48:9e:69:ef:
d4:55:f7:0c:1e:16:57:cc:dc:66:09:8d:c6:23:b2:5b:10:7a:
c0:5e:5c:09:90:fc:53:57:dd:3a:9a:8f:a3:3a:5d:a2:21:fb:
a3:47:17:77:cf:a1:8e:90:53:a9:af:f0:c2:87:dd:3b:99:21:
f4:50:89:cd:ed:26:64:ba:43:4b:e1:08:3d:0b:1b:51:47:8b:
bc:1e:97:27:33:20:a3:99:2e:6a:48:a4:5b:87:01:01:13:d7:
6d:4c:ac:08:eb:32:05:14:0f:9f:e9:b5:95:92:f4:0f:af:bc:
d8:d5:dd:10:4b:ea:d0:2e:60:b9:e5:35:0d:97:c1:1f:85:e2:
0a:30:63:c3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWIQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MTM0NzQ5WhcNMjUwODA3MTM0NzQ5WjAYMRYw
FAYDVQQDEw02ODZhN2U4YS00YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuEU/8YEAgjBBFxD4eFo8pXjbMpQ7ZpICSr1JHeIAyy+p6QotzxUfUiV/
GkynAEvaG3d7sUx6LC9ljHlnJAJjRxt4V+LPxFnUkxDVgP6cVGMzctwIhTmgRug5
H3PkUhBTYXAcIS40ViHXpnX8VkjABCfPuKjBMyuACZ9quFVlj9exBJH4WXg1OFHw
u8fpDde7tM7bIr1rAuqeJpY1aCoJH/xASuMyxAmqOLO/Ur3s3ruJ59y4x2IfyRHO
hotSC8PLXlyBQDB7EMaNQEnipzCwewqsSzvy9gtG1eAQyFdqLbv4Zmmez+EdxQTH
f+he9Y/Moda55YM9Ea1RsbFkOg2HtQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI8y
eKxMSKJ1bFieSI03rQDsD2d6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMDdERjc0NDVBNkYxMUYwOTgxRjNBOEFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcPkMA0GCSqGSIb3DQEBCwUA
A4IBAQCeoOzPayfeD2AzhUgfoWGG7lwY8WCzBuPTHq9DZzq8CLLl13jsn1dOP2Lj
3F6TqEpFn3qUIwfO+QIkAjnoyjf6RBNzXFxB4yCvwimD06poclPQDhqwPaYpwN3/
T+DtB7MNZzD+2l953QgTyWblpsyi6lkTtVU9hwKd2Eieae/UVfcMHhZXzNxmCY3G
I7JbEHrAXlwJkPxTV906mo+jOl2iIfujRxd3z6GOkFOpr/DCh907mSH0UInN7SZk
ukNL4Qg9CxtRR4u8HpcnMyCjmS5qSKRbhwEBE9dtTKwI6zIFFA+f6bWVkvQPr7zY
1d0QS+rQLmC55TUNl8EfheIKMGPD
-----END CERTIFICATE-----
Generated at Thu Jul 17 11:55:02 2025 by rpki-client