Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E139BE0449DC11F096442FAEDAE4EC9C.roa
File: E139BE0449DC11F096442FAEDAE4EC9C.roa (raw, json)
Hash identifier: fQMt94eY4dVEYPZc1KVzj5XzNbIsNbaPOw8IhP+8R5o=
Subject key identifier: E7:58:56:26:94:7E:2F:90:4E:78:6E:42:74:4D:B2:64:CB:78:6A:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E139BE0449DC11F096442FAEDAE4EC9C.roa
Signing time: Sun 15 Jun 2025 11:35:47 +0000
ROA not before: Sun 15 Jun 2025 11:35:42 +0000
ROA not after: Mon 21 Jul 2025 11:35:42 +0000
asID: 135377
IP address blocks: 45.195.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89186 (0x15c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 11:35:42 2025 GMT
Not After : Jul 21 11:35:42 2025 GMT
Subject: CN=684eb013-9539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:89:af:5c:b3:d9:6f:16:ca:b7:7d:11:55:
9b:f8:20:75:c9:bf:ed:51:80:84:f8:c9:e6:96:37:
03:c1:80:10:50:4c:85:cb:34:50:01:ee:08:35:35:
05:96:71:14:54:97:37:ab:bc:14:d8:95:90:03:12:
31:33:26:8a:65:23:99:32:4d:31:da:c8:45:1c:8b:
fc:a3:da:c1:98:eb:3a:fc:ba:2f:35:a7:3b:68:24:
ac:54:5c:51:bb:eb:68:14:39:76:df:13:c3:9f:bf:
fe:d7:82:94:cf:4f:34:d4:b2:61:9c:25:c8:80:45:
d5:dd:cb:eb:71:52:3c:07:df:a4:ba:a4:25:60:40:
b6:fc:bd:5b:a9:1b:66:24:c8:e3:85:72:0d:95:64:
a0:1b:69:e6:e0:c3:d7:cb:30:0d:34:50:c5:c7:d3:
30:18:10:d0:41:ab:dd:69:e3:0f:21:4c:52:db:81:
41:d0:be:83:53:c2:e2:cd:e0:8c:60:05:7a:cd:85:
3a:f7:b1:36:46:ef:1d:7b:c2:e7:0f:99:3e:c8:cc:
21:08:51:c8:67:61:50:66:0f:44:bb:84:b9:ff:1f:
b8:ef:d8:dc:45:b0:ae:27:b3:e3:cf:ce:75:72:3a:
5f:25:fe:f2:ca:9a:aa:18:26:0c:5f:fa:3e:c1:82:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:58:56:26:94:7E:2F:90:4E:78:6E:42:74:4D:B2:64:CB:78:6A:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E139BE0449DC11F096442FAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c9:6d:6d:3c:0e:d5:4b:42:c7:a0:33:2c:52:3a:49:fb:0e:
a7:94:d2:b6:81:a0:0c:73:3f:a9:bf:12:99:fa:32:60:cb:11:
e9:bd:0f:ca:b0:d8:66:bf:64:7d:3b:07:21:fd:fb:f3:30:7c:
6c:89:38:5e:73:3d:3e:bc:cc:5f:f8:c5:c5:c2:df:79:e6:3c:
de:bb:8f:5d:c4:f5:91:50:5c:73:c7:59:4f:cd:e3:c9:0f:47:
dd:e0:83:3f:bd:89:a3:5e:b5:d0:ef:7b:4f:3b:ae:91:64:e9:
c5:62:d2:a5:3a:00:ec:c0:5b:b0:ee:0b:28:9d:56:cd:a0:1f:
ee:e4:e1:9c:cf:17:9f:fc:07:eb:0b:86:c1:39:26:ea:c8:c4:
d6:8d:3a:fa:b9:8a:e1:b5:71:57:4b:28:29:1d:d4:45:57:6c:
da:8a:8a:93:7e:b1:eb:4f:ae:0a:28:a2:41:fe:d7:e2:ea:f5:
4c:be:17:be:42:4f:40:79:ef:64:9c:8b:53:4e:50:a2:2a:3b:
4e:0b:1d:48:31:e1:62:d7:7d:00:f1:9a:3d:91:92:71:23:68:
c6:48:03:ef:71:c1:00:90:55:12:21:49:08:cd:bd:0a:db:89:
0e:0e:0b:59:46:20:63:2b:c3:46:bc:12:cf:3c:d8:56:37:8e:
c4:57:1a:e8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVxiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE1MTEzNTQyWhcNMjUwNzIxMTEzNTQyWjAYMRYw
FAYDVQQDEw02ODRlYjAxMy05NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2ZaJr1yz2W8Wyrd9EVWb+CB1yb/tUYCE+MnmljcDwYAQUEyFyzRQAe4I
NTUFlnEUVJc3q7wU2JWQAxIxMyaKZSOZMk0x2shFHIv8o9rBmOs6/LovNac7aCSs
VFxRu+toFDl23xPDn7/+14KUz0801LJhnCXIgEXV3cvrcVI8B9+kuqQlYEC2/L1b
qRtmJMjjhXINlWSgG2nm4MPXyzANNFDFx9MwGBDQQavdaeMPIUxS24FB0L6DU8Li
zeCMYAV6zYU697E2Ru8de8LnD5k+yMwhCFHIZ2FQZg9Eu4S5/x+479jcRbCuJ7Pj
z851cjpfJf7yypqqGCYMX/o+wYItOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOdY
ViaUfi+QTnhuQnRNsmTLeGqZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMTM5QkUwNDQ5REMxMUYwOTY0NDJGQUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPfMA0GCSqGSIb3DQEBCwUA
A4IBAQBuyW1tPA7VS0LHoDMsUjpJ+w6nlNK2gaAMcz+pvxKZ+jJgyxHpvQ/KsNhm
v2R9Owch/fvzMHxsiThecz0+vMxf+MXFwt955jzeu49dxPWRUFxzx1lPzePJD0fd
4IM/vYmjXrXQ73tPO66RZOnFYtKlOgDswFuw7gsonVbNoB/u5OGczxef/AfrC4bB
OSbqyMTWjTr6uYrhtXFXSygpHdRFV2zaioqTfrHrT64KKKJB/tfi6vVMvhe+Qk9A
ee9knItTTlCiKjtOCx1IMeFi130A8Zo9kZJxI2jGSAPvccEAkFUSIUkIzb0K24kO
DgtZRiBjK8NGvBLPPNhWN47EVxro
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:09:48 2025 by rpki-client