Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1BC0D8E76DA11F0B3E98B83DAE4EC9C.roa
File: E1BC0D8E76DA11F0B3E98B83DAE4EC9C.roa (raw, json)
Hash identifier: 5RkG0R6NRKx57aZ7mo8icstM+wEmoFZiRgCil1o3Jb4=
Subject key identifier: C4:6C:FD:62:9E:CA:8C:8D:64:14:7F:65:2B:15:52:10:95:A6:5E:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1BC0D8E76DA11F0B3E98B83DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 17:44:51 +0000
ROA not before: Mon 11 Aug 2025 17:44:46 +0000
ROA not after: Sat 20 Sep 2025 17:44:46 +0000
asID: 401615
IP address blocks: 45.196.234.0/23 maxlen: 24
45.196.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92765 (0x16a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 17:44:46 2025 GMT
Not After : Sep 20 17:44:46 2025 GMT
Subject: CN=689a2c13-dbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:40:29:10:37:76:e5:a0:03:04:31:bd:4e:
07:c6:ca:36:eb:4e:5a:60:82:47:f6:e6:29:58:1c:
cc:da:96:a5:89:bb:b8:74:a0:ce:1b:14:d4:dd:dd:
18:57:5c:87:e3:9c:02:eb:8b:02:cf:75:e0:af:60:
b9:be:34:4e:5d:f6:21:90:e4:b4:d5:f1:04:bc:16:
5f:94:d1:da:40:ab:1c:b0:d0:38:49:23:64:b0:c7:
c1:c2:21:64:2e:38:a7:85:a0:b8:6e:a9:50:1c:a0:
12:45:63:39:45:2e:c3:8a:75:61:21:7f:68:b3:b5:
cd:c2:b2:31:7a:f4:a1:7b:1a:a2:35:c9:21:aa:c0:
54:fe:8e:ba:1b:12:88:b1:7f:97:2c:b4:d8:0b:0a:
a5:5b:b4:42:af:89:8b:ea:26:b4:80:57:7b:96:2e:
80:60:80:5a:f2:ec:d8:25:6c:8d:2a:88:fd:20:97:
8b:bc:41:20:cc:2f:d1:f6:a1:91:f6:4c:25:a3:aa:
37:f2:c0:a0:66:c1:0d:a7:ce:d4:63:1c:b5:33:91:
dc:0e:a8:55:e1:5a:68:7e:fd:0c:a5:4d:da:37:b5:
fb:ce:50:e6:1a:6a:8e:35:04:04:69:67:2e:cc:3c:
dc:f4:9c:31:40:95:a9:95:9f:0d:c7:81:f1:13:1f:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6C:FD:62:9E:CA:8C:8D:64:14:7F:65:2B:15:52:10:95:A6:5E:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1BC0D8E76DA11F0B3E98B83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.234.0/23
45.196.238.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b6:37:0d:61:1d:20:4c:c7:1e:34:67:82:17:0d:6d:d3:f1:
76:21:fc:3d:e0:62:ff:30:f7:60:d9:ab:08:81:35:69:ed:22:
48:63:b3:b9:47:17:6f:eb:07:ef:c8:78:24:95:f8:3a:b1:17:
d3:d3:86:94:52:85:6b:67:c8:0b:0c:a2:e4:b7:cf:54:ec:31:
0f:59:27:e4:e5:e7:90:d4:b9:d2:70:96:28:62:2d:50:27:54:
ec:4e:25:89:b4:39:c5:76:d7:fd:4b:46:37:06:7e:fd:3c:d4:
57:86:23:b5:87:de:33:b6:e9:88:82:06:af:ae:1e:96:97:7a:
8a:82:0f:d0:29:b4:c3:f2:74:48:52:16:92:39:6d:b2:18:c7:
8f:b7:ad:32:ec:03:d7:86:c8:01:69:70:1b:59:83:2e:30:2a:
34:70:3d:4c:8a:09:1e:ad:ef:81:b2:09:cf:47:5c:83:4d:da:
4b:5c:b8:4b:43:ab:9a:d9:72:ee:bc:c4:5f:d7:71:42:d5:ce:
f6:54:c8:bc:c0:6f:ee:36:1e:0b:11:c6:87:cc:f6:ff:e1:df:
a8:e9:a6:80:22:54:cc:74:32:e4:dc:4e:bf:73:0f:78:e4:75:
9e:4a:7e:c6:1f:f3:11:0d:34:c8:6b:85:9a:ab:80:fa:c7:7a:
d3:78:f7:39
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWpdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODExMTc0NDQ2WhcNMjUwOTIwMTc0NDQ2WjAYMRYw
FAYDVQQDEw02ODlhMmMxMy1kYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq+NAKRA3duWgAwQxvU4Hxso2605aYIJH9uYpWBzM2palibu4dKDOGxTU
3d0YV1yH45wC64sCz3Xgr2C5vjROXfYhkOS01fEEvBZflNHaQKscsNA4SSNksMfB
wiFkLjinhaC4bqlQHKASRWM5RS7DinVhIX9os7XNwrIxevShexqiNckhqsBU/o66
GxKIsX+XLLTYCwqlW7RCr4mL6ia0gFd7li6AYIBa8uzYJWyNKoj9IJeLvEEgzC/R
9qGR9kwlo6o38sCgZsENp87UYxy1M5HcDqhV4Vpofv0MpU3aN7X7zlDmGmqONQQE
aWcuzDzc9JwxQJWplZ8Nx4HxEx+HAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRs
/WKeyoyNZBR/ZSsVUhCVpl4NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMUJDMEQ4RTc2REExMUYwQjNFOThCODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLcTqAwQBLcTuMA0GCSqGSIb3
DQEBCwUAA4IBAQCFtjcNYR0gTMceNGeCFw1t0/F2Ifw94GL/MPdg2asIgTVp7SJI
Y7O5Rxdv6wfvyHgklfg6sRfT04aUUoVrZ8gLDKLkt89U7DEPWSfk5eeQ1LnScJYo
Yi1QJ1TsTiWJtDnFdtf9S0Y3Bn79PNRXhiO1h94ztumIggavrh6Wl3qKgg/QKbTD
8nRIUhaSOW2yGMePt60y7APXhsgBaXAbWYMuMCo0cD1Migkere+BsgnPR1yDTdpL
XLhLQ6ua2XLuvMRf13FC1c72VMi8wG/uNh4LEcaHzPb/4d+o6aaAIlTMdDLk3E6/
cw945HWeSn7GH/MRDTTIa4Waq4D6x3rTePc5
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:20:36 2025 by rpki-client