Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C1B9B042D811F0AA2CDB7BDAE4EC9C.roa
File: D0C1B9B042D811F0AA2CDB7BDAE4EC9C.roa (raw, json)
Hash identifier: CkzNNhvavkAe9Ny8U1IkHArhgdf05hprHvxsIR7flFY=
Subject key identifier: 51:9E:7F:FF:C7:20:3A:D3:2B:23:E5:4A:D7:6C:85:73:E3:40:50:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C1B9B042D811F0AA2CDB7BDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:19:03 +0000
ROA not before: Fri 06 Jun 2025 13:18:58 +0000
ROA not after: Sun 13 Jul 2025 13:18:58 +0000
asID: 272854
IP address blocks: 45.195.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88586 (0x15a0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 13:18:58 2025 GMT
Not After : Jul 13 13:18:58 2025 GMT
Subject: CN=6842eac7-be4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:ca:98:4e:56:8e:73:8b:4f:0e:39:1b:ee:
bb:b5:9f:2b:2e:73:9c:e4:5f:55:82:2a:d4:06:87:
8d:00:8f:ee:27:1d:29:b3:13:6d:41:55:71:ac:ab:
3f:83:e4:7b:19:c0:f6:66:0d:bf:1e:df:da:f9:dc:
2a:51:52:af:fb:85:be:a1:f1:24:cd:78:31:2b:17:
fa:ef:a9:74:b6:65:34:cf:48:a8:42:94:89:21:10:
dc:ff:97:fd:ce:9d:fb:a7:bc:b0:97:b6:bf:71:98:
94:4c:23:71:fa:f6:af:3d:5f:ab:b7:7f:02:0d:f1:
be:a3:98:9d:53:49:d8:1b:3c:b7:dd:03:45:c5:97:
33:45:b4:3b:e6:8b:e2:8e:62:fd:c5:a6:13:3d:c0:
a2:ca:8d:42:60:a1:a6:d2:4c:38:4e:97:a9:0c:fb:
7e:cc:b9:f8:24:88:24:5b:9a:96:cb:d8:7a:05:45:
ad:01:8f:1a:60:77:04:96:f9:7f:e5:c9:59:f5:f5:
97:c7:2f:8b:34:da:dd:d1:b7:31:6b:fa:3c:c6:19:
01:4e:c9:b9:b3:02:c2:68:f1:b8:9c:07:26:02:4c:
7b:c3:6a:75:d8:f0:5f:c8:a6:96:8c:f9:e9:bb:b4:
0e:4d:f0:54:a4:26:80:cf:1c:c6:39:02:e2:45:4f:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:7F:FF:C7:20:3A:D3:2B:23:E5:4A:D7:6C:85:73:E3:40:50:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C1B9B042D811F0AA2CDB7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.12.0/23
Signature Algorithm: sha256WithRSAEncryption
83:45:a8:b3:7d:7a:9c:52:bd:5b:67:3c:de:b9:1f:b5:63:23:
7d:ec:ad:06:46:ee:29:ac:ed:f7:62:41:67:98:4d:5b:45:af:
17:4f:db:8a:01:23:31:7b:97:f4:3e:56:38:6a:bd:e5:9c:dd:
60:a1:96:75:f1:30:a0:3a:77:b7:46:18:0f:4d:c4:13:3d:82:
b6:d8:30:46:39:36:66:71:d4:6c:05:e5:d2:54:3d:68:56:98:
46:f7:42:2c:b9:6a:16:dd:b9:33:3a:31:34:44:e2:63:4d:8e:
fe:53:2b:da:6c:fb:4e:e6:a4:8d:fb:bd:76:cd:f6:3c:75:1c:
56:56:df:77:9a:03:ad:8e:86:12:6b:17:fc:0d:5d:5a:08:04:
6d:f6:45:b2:5f:69:e9:e8:20:f9:2a:04:fa:0a:59:c0:68:b5:
28:7d:c3:0c:8c:de:8b:5a:d3:fc:38:91:02:31:10:cf:0f:9d:
60:16:16:7b:1c:27:60:bf:f2:8a:15:3e:38:88:4c:aa:fa:64:
4b:4a:ee:22:91:c8:99:ba:5f:76:2b:ec:d5:fd:12:b8:10:55:
df:8d:f0:b0:3b:c7:57:36:7d:6b:9a:83:f6:04:ad:76:30:57:
46:fd:2d:1b:06:e9:df:ae:9e:8e:43:1c:14:58:ed:a9:5c:97:
51:0d:da:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVoKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjA2MTMxODU4WhcNMjUwNzEzMTMxODU4WjAYMRYw
FAYDVQQDEw02ODQyZWFjNy1iZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyCPKmE5WjnOLTw45G+67tZ8rLnOc5F9VgirUBoeNAI/uJx0psxNtQVVx
rKs/g+R7GcD2Zg2/Ht/a+dwqUVKv+4W+ofEkzXgxKxf676l0tmU0z0ioQpSJIRDc
/5f9zp37p7ywl7a/cZiUTCNx+vavPV+rt38CDfG+o5idU0nYGzy33QNFxZczRbQ7
5ovijmL9xaYTPcCiyo1CYKGm0kw4TpepDPt+zLn4JIgkW5qWy9h6BUWtAY8aYHcE
lvl/5clZ9fWXxy+LNNrd0bcxa/o8xhkBTsm5swLCaPG4nAcmAkx7w2p12PBfyKaW
jPnpu7QOTfBUpCaAzxzGOQLiRU9jLwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFGe
f//HIDrTKyPlStdshXPjQFDzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMEMxQjlCMDQyRDgxMUYwQUEyQ0RCN0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcMMMA0GCSqGSIb3DQEBCwUA
A4IBAQCDRaizfXqcUr1bZzzeuR+1YyN97K0GRu4prO33YkFnmE1bRa8XT9uKASMx
e5f0PlY4ar3lnN1goZZ18TCgOne3RhgPTcQTPYK22DBGOTZmcdRsBeXSVD1oVphG
90IsuWoW3bkzOjE0ROJjTY7+UyvabPtO5qSN+712zfY8dRxWVt93mgOtjoYSaxf8
DV1aCARt9kWyX2np6CD5KgT6ClnAaLUofcMMjN6LWtP8OJECMRDPD51gFhZ7HCdg
v/KKFT44iEyq+mRLSu4ikciZul92K+zV/RK4EFXfjfCwO8dXNn1rmoP2BK12MFdG
/S0bBunfrp6OQxwUWO2pXJdRDdpC
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:55 2025 by rpki-client