Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4A3CD6A72AC11F0A12714CFDAE4EC9C.roa
File: F4A3CD6A72AC11F0A12714CFDAE4EC9C.roa (raw, json)
Hash identifier: V1hzIvYvnaY4WB55lIAeSFAQycuFUfx+zUnrm5iNMcs=
Subject key identifier: 53:11:F6:9A:0A:E8:9F:49:14:9A:D8:1F:DF:C9:4D:A3:32:BC:F1:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01694E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4A3CD6A72AC11F0A12714CFDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 10:06:02 +0000
ROA not before: Wed 06 Aug 2025 10:05:56 +0000
ROA not after: Fri 12 Sep 2025 10:05:56 +0000
asID: 40779
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92494 (0x1694e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 10:05:56 2025 GMT
Not After : Sep 12 10:05:56 2025 GMT
Subject: CN=6893290a-4ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:f2:c3:e2:5c:66:8f:b2:01:c1:9c:15:5c:
32:ef:29:72:b0:90:fa:49:f3:eb:0c:2a:0a:1d:12:
c3:fb:84:38:b8:20:c2:45:c9:b7:2a:ff:82:83:db:
d1:3e:0a:42:c4:7c:3f:43:ad:ce:7b:37:7a:9d:32:
8b:9c:4c:8b:c0:1f:0b:4a:10:93:27:dd:6e:01:da:
a3:99:b7:c8:62:8a:62:e1:03:73:b0:cb:13:56:54:
44:ca:11:4c:02:3e:ce:ac:9e:91:2e:6a:87:a1:ee:
7d:a4:98:64:f1:25:40:9a:c3:e7:06:67:fb:72:18:
a5:1f:dd:4f:fc:58:c4:cd:48:77:e8:34:e1:18:fb:
42:0d:51:fd:57:11:5b:23:a0:7e:23:2f:12:be:ae:
ba:2f:00:cd:1c:fd:0b:ed:60:0b:8a:b3:48:9f:37:
14:02:37:9a:ef:0c:c2:f7:92:e1:52:2a:0b:32:c1:
e8:73:38:d5:85:0a:bd:58:d3:42:c1:a0:ed:42:57:
37:5d:70:84:15:dc:a9:45:67:fc:a9:0e:74:a2:7c:
ba:ae:bd:83:25:51:e9:6a:e5:9a:41:15:a2:98:73:
e9:40:75:4a:6e:fb:29:d2:07:76:fd:f3:be:62:52:
96:01:de:f4:13:ad:9d:e1:64:6c:11:d2:e2:e4:0c:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:F6:9A:0A:E8:9F:49:14:9A:D8:1F:DF:C9:4D:A3:32:BC:F1:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4A3CD6A72AC11F0A12714CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:9d:12:f3:5d:0d:6a:83:f5:a0:ed:87:b6:a8:66:c0:58:5e:
e0:3a:8f:cf:e2:a2:02:32:1a:f2:33:6e:62:66:90:5f:6f:18:
f6:6f:3f:0c:8c:fd:dd:0a:71:b5:43:97:cc:68:a3:45:98:7d:
1f:f5:28:71:a1:ba:a6:73:f8:c1:16:64:85:1f:28:54:e1:34:
34:e7:34:32:ae:f0:31:47:15:3f:30:98:ec:6a:26:ef:10:87:
fb:fa:e0:0d:fd:5d:ae:e3:54:61:39:a1:45:a5:f1:6b:9c:32:
38:85:c9:57:ac:44:16:15:3c:10:60:93:59:db:40:dc:29:be:
20:db:b8:41:d8:c4:24:80:08:46:18:fc:51:8b:05:71:a8:b2:
f6:fe:50:f6:21:77:1f:0a:4d:4f:6f:3a:de:f1:ef:0e:f9:e3:
7a:46:18:c3:2b:65:23:c6:59:c7:88:cb:68:49:0e:69:02:6c:
19:9c:53:a4:ed:60:f8:83:05:4b:1d:d8:5f:3f:6a:9e:76:d5:
1e:82:78:ff:ac:7b:5d:57:c2:48:f2:0d:36:2f:6e:3b:46:06:
25:4c:65:bf:fd:57:90:60:3c:c2:fe:61:82:9c:99:87:31:7d:
b3:ab:48:0f:fc:ea:4c:57:48:c2:94:b8:37:ed:d8:f7:1a:31:
1e:72:6a:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWlOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA2MTAwNTU2WhcNMjUwOTEyMTAwNTU2WjAYMRYw
FAYDVQQDEw02ODkzMjkwYS00ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA19fyw+JcZo+yAcGcFVwy7ylysJD6SfPrDCoKHRLD+4Q4uCDCRcm3Kv+C
g9vRPgpCxHw/Q63Oezd6nTKLnEyLwB8LShCTJ91uAdqjmbfIYopi4QNzsMsTVlRE
yhFMAj7OrJ6RLmqHoe59pJhk8SVAmsPnBmf7chilH91P/FjEzUh36DThGPtCDVH9
VxFbI6B+Iy8Svq66LwDNHP0L7WALirNInzcUAjea7wzC95LhUioLMsHoczjVhQq9
WNNCwaDtQlc3XXCEFdypRWf8qQ50ony6rr2DJVHpauWaQRWimHPpQHVKbvsp0gd2
/fO+YlKWAd70E62d4WRsEdLi5AxHewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFMR
9poK6J9JFJrYH9/JTaMyvPF4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNEEzQ0Q2QTcyQUMxMUYwQTEyNzE0Q0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQAOnRLzXQ1qg/Wg7Ye2qGbAWF7gOo/P4qICMhryM25iZpBfbxj2bz8MjP3d
CnG1Q5fMaKNFmH0f9Shxobqmc/jBFmSFHyhU4TQ05zQyrvAxRxU/MJjsaibvEIf7
+uAN/V2u41RhOaFFpfFrnDI4hclXrEQWFTwQYJNZ20DcKb4g27hB2MQkgAhGGPxR
iwVxqLL2/lD2IXcfCk1Pbzre8e8O+eN6RhjDK2UjxlnHiMtoSQ5pAmwZnFOk7WD4
gwVLHdhfP2qedtUegnj/rHtdV8JI8g02L247RgYlTGW//VeQYDzC/mGCnJmHMX2z
q0gP/OpMV0jClLg37dj3GjEecmr0
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:31:11 2025 by rpki-client