Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D529761C8E2011F0B2B0C2F6DAE4EC9C.roa
File: D529761C8E2011F0B2B0C2F6DAE4EC9C.roa (raw, json)
Hash identifier: vYzwde8ntodWcqDgjatwPwJxIMuVLAdy+OWBsYjcL6k=
Subject key identifier: 3A:93:67:AA:01:22:0A:EA:77:AC:2A:B9:53:37:69:5E:17:7E:78:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D529761C8E2011F0B2B0C2F6DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 08:33:32 +0000
ROA not before: Wed 10 Sep 2025 08:33:27 +0000
ROA not after: Tue 17 Mar 2026 08:33:27 +0000
asID: 42831
IP address blocks: 45.207.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96852 (0x17a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 10 08:33:27 2025 GMT
Not After : Mar 17 08:33:27 2026 GMT
Subject: CN=68c137dc-a482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:9d:a3:20:0e:a1:0e:89:4e:76:cf:c3:bf:
fe:b5:d6:9f:c2:60:4a:ec:f3:88:6a:a5:c5:68:74:
ba:11:02:e3:20:a0:f6:7d:b6:2c:a0:9f:5b:57:5d:
fe:d2:a8:c4:44:87:0b:3a:c3:49:c9:cd:89:0e:83:
0c:68:a7:d6:11:9d:b7:5b:7b:3b:ff:33:90:fe:90:
c6:e8:38:af:7a:b2:cb:8b:3f:14:7d:da:79:f8:51:
fc:a2:94:ee:da:67:f8:0f:1b:c6:45:dc:37:81:6c:
3a:6e:bc:34:f3:e6:13:eb:68:71:8d:23:0a:0d:ff:
ce:ac:7c:ea:c5:7c:e0:81:33:d9:46:8b:0e:3d:c7:
e9:c5:8d:8f:b5:43:c4:78:c4:63:b0:00:ea:a3:f8:
a1:6d:1a:5a:4c:c1:78:3d:d2:67:f8:8a:62:81:5a:
1d:b5:07:d1:75:86:4d:80:ce:b4:84:58:14:2b:7e:
c8:b0:32:b6:06:6d:f9:94:92:c4:1e:f9:95:75:13:
a0:64:52:9e:9d:af:61:ce:1e:ff:05:ef:55:5f:3e:
f1:be:7b:f9:f8:70:3b:3c:79:d9:ac:e5:97:37:9d:
09:90:f6:82:3c:be:54:75:e9:2a:c1:1a:5e:0d:a0:
99:42:aa:49:a5:9c:3c:d2:ef:ed:b0:f2:3e:25:40:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:67:AA:01:22:0A:EA:77:AC:2A:B9:53:37:69:5E:17:7E:78:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D529761C8E2011F0B2B0C2F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.20.0/24
Signature Algorithm: sha256WithRSAEncryption
37:66:48:6d:a5:bb:25:9f:a3:4a:b3:21:1c:09:63:bc:d9:fb:
9e:06:63:6c:40:cd:e4:5f:7b:a8:87:15:6b:db:38:5f:01:4b:
59:fb:55:53:38:c7:d0:2b:79:ad:46:f3:5f:7d:58:90:6a:38:
4f:e8:3b:1c:7f:57:5e:25:ea:24:6a:ec:78:c6:73:1f:d1:27:
5b:e7:f7:b0:2b:8b:be:d0:a4:43:52:73:a1:db:cd:a0:fb:6c:
4f:cf:9e:d6:6b:0c:96:fb:47:55:2c:6f:3c:47:5a:47:ba:14:
d2:6a:18:a7:e2:46:0f:fa:35:f6:fa:01:0a:7e:ef:4d:52:d7:
51:32:37:a7:1e:a1:a2:3f:80:e7:8b:37:02:2c:db:3f:48:c6:
f5:05:4b:b4:62:12:54:04:4e:80:3d:7c:8c:d7:e5:32:50:e8:
0d:08:3d:c2:c6:d5:dd:57:5d:ab:b2:b6:0d:df:6f:bb:e6:2c:
00:38:1f:0e:66:f1:dc:a2:45:10:37:6d:0e:53:63:5a:bd:69:
14:70:d3:9e:4d:f5:30:6f:3f:1b:13:bc:02:a2:9e:1a:d2:08:
81:a6:92:dd:11:0e:92:75:1a:8a:26:f2:26:c6:1a:9f:54:3d:
0c:f7:1a:26:fb:a9:01:b7:2f:92:0f:19:8f:5a:e6:7b:c1:53:
0c:d7:e1:0b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXpUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTEwMDgzMzI3WhcNMjYwMzE3MDgzMzI3WjAYMRYw
FAYDVQQDEw02OGMxMzdkYy1hNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsEidoyAOoQ6JTnbPw7/+tdafwmBK7POIaqXFaHS6EQLjIKD2fbYsoJ9b
V13+0qjERIcLOsNJyc2JDoMMaKfWEZ23W3s7/zOQ/pDG6DiverLLiz8Ufdp5+FH8
opTu2mf4DxvGRdw3gWw6brw08+YT62hxjSMKDf/OrHzqxXzggTPZRosOPcfpxY2P
tUPEeMRjsADqo/ihbRpaTMF4PdJn+IpigVodtQfRdYZNgM60hFgUK37IsDK2Bm35
lJLEHvmVdROgZFKena9hzh7/Be9VXz7xvnv5+HA7PHnZrOWXN50JkPaCPL5Udekq
wRpeDaCZQqpJpZw80u/tsPI+JUCWhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDqT
Z6oBIgrqd6wquVM3aV4XfnhIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENTI5NzYxQzhFMjAxMUYwQjJCMEMyRjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8UMA0GCSqGSIb3DQEBCwUA
A4IBAQA3Zkhtpbsln6NKsyEcCWO82fueBmNsQM3kX3uohxVr2zhfAUtZ+1VTOMfQ
K3mtRvNffViQajhP6Dscf1deJeokaux4xnMf0Sdb5/ewK4u+0KRDUnOh282g+2xP
z57WawyW+0dVLG88R1pHuhTSahin4kYP+jX2+gEKfu9NUtdRMjenHqGiP4DnizcC
LNs/SMb1BUu0YhJUBE6APXyM1+UyUOgNCD3CxtXdV12rsrYN32+75iwAOB8OZvHc
okUQN20OU2NavWkUcNOeTfUwbz8bE7wCop4a0giBppLdEQ6SdRqKJvImxhqfVD0M
9xom+6kBty+SDxmPWuZ7wVMM1+EL
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:38 2025 by rpki-client