
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCB3BD82775011F08C5DEF8FDAE4EC9C.roa
File: FCB3BD82775011F08C5DEF8FDAE4EC9C.roa (raw, json)
Hash identifier: VbLajMc3L7jtEkC79VofRJQYnX7CW5jnqiUpWrsN60M=
Subject key identifier: 69:07:DB:2C:5F:10:58:A5:59:7E:88:3A:96:1E:46:97:F0:15:87:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCB3BD82775011F08C5DEF8FDAE4EC9C.roa
Signing time: Tue 12 Aug 2025 07:50:17 +0000
ROA not before: Tue 12 Aug 2025 07:50:12 +0000
ROA not after: Wed 05 Nov 2025 07:50:12 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92804 (0x16a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 07:50:12 2025 GMT
Not After : Nov 5 07:50:12 2025 GMT
Subject: CN=689af239-8579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:91:e4:ce:ca:1d:5f:08:0f:98:d1:c6:ff:
4c:d5:31:02:8f:d1:6f:6a:a1:ab:cc:f8:44:e1:99:
3d:bf:7b:53:13:bd:59:f1:2e:f4:ce:60:e6:9e:14:
f5:c3:f6:4b:e7:6a:27:16:71:35:0b:18:57:a1:bc:
eb:28:9d:d0:32:ff:67:76:34:79:ad:e7:6d:ae:28:
0e:72:b7:c4:fc:8e:1c:5b:f9:ec:ba:56:ca:a7:ce:
a2:8c:3b:a0:48:9a:41:4c:eb:18:45:e1:10:c4:73:
bd:48:9a:44:dc:fc:a1:c1:b2:96:57:84:3e:6f:6e:
bb:57:bf:dd:1e:59:91:3c:52:5d:96:98:7b:50:82:
55:4e:18:c2:e0:d4:1b:53:bf:5b:a0:0d:63:97:91:
81:79:2a:30:28:5b:4c:c7:04:c9:6b:ca:6c:76:b1:
73:8d:61:0e:89:15:7a:f6:c2:9b:94:90:be:66:0d:
35:d0:6b:b8:0f:db:48:6a:e3:5d:e9:64:ce:4b:17:
73:c3:bc:8a:a1:6a:2e:a6:b0:5b:e5:c3:ce:56:4f:
85:05:25:37:2c:32:92:b5:1a:81:3c:7e:06:1d:a9:
c2:fe:e2:de:bc:9c:63:40:d9:6c:46:d6:46:c8:6a:
35:f5:30:b1:e2:c2:be:de:59:b6:5c:10:2e:1d:28:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:DB:2C:5F:10:58:A5:59:7E:88:3A:96:1E:46:97:F0:15:87:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCB3BD82775011F08C5DEF8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9d:3f:12:88:a3:72:66:6a:07:89:1a:8b:32:d0:2f:80:20:
92:a6:9a:88:05:0c:b0:e8:c7:72:7e:ad:db:72:ea:69:0e:be:
b9:23:4d:63:3d:95:a7:c8:7b:d1:4b:ca:6d:92:2e:d5:e6:ea:
0a:bf:1c:ad:02:2c:fe:87:7c:13:ba:83:c7:3a:05:fd:d1:9c:
08:a7:da:36:44:8e:0d:99:05:f4:c5:87:bf:10:2a:71:47:b5:
10:17:6f:b1:4a:94:79:00:a8:b3:ec:21:1b:12:c0:0b:32:1b:
22:f4:01:23:7f:c4:f4:7b:85:6c:35:12:72:69:34:79:c8:d3:
59:d3:69:3f:4c:e7:7d:06:ba:bd:51:6a:fd:59:00:00:a2:9c:
a2:c8:8a:85:9a:b1:7e:6b:08:e3:2d:bd:d8:45:3c:1e:cf:34:
1b:f2:c9:44:18:c6:ac:e1:7f:73:a9:cd:0c:11:68:ab:c1:78:
f4:a5:59:78:68:8b:26:ed:65:2c:05:a5:2e:9c:71:ca:e8:b0:
b7:55:60:14:13:db:0f:10:ac:e8:ce:f4:d8:7d:25:73:e1:9b:
5f:df:ea:98:4f:a2:1a:28:84:6d:48:18:1a:c0:6a:88:c0:33:
87:4d:00:9f:44:ce:25:83:87:2d:e7:89:91:7b:ef:a6:8a:b3:
60:c9:08:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWqEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODEyMDc1MDEyWhcNMjUxMTA1MDc1MDEyWjAYMRYw
FAYDVQQDEw02ODlhZjIzOS04NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu4mR5M7KHV8ID5jRxv9M1TECj9FvaqGrzPhE4Zk9v3tTE71Z8S70zmDm
nhT1w/ZL52onFnE1CxhXobzrKJ3QMv9ndjR5redtrigOcrfE/I4cW/nsulbKp86i
jDugSJpBTOsYReEQxHO9SJpE3PyhwbKWV4Q+b267V7/dHlmRPFJdlph7UIJVThjC
4NQbU79boA1jl5GBeSowKFtMxwTJa8psdrFzjWEOiRV69sKblJC+Zg010Gu4D9tI
auNd6WTOSxdzw7yKoWouprBb5cPOVk+FBSU3LDKStRqBPH4GHanC/uLevJxjQNls
RtZGyGo19TCx4sK+3lm2XBAuHShe4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGkH
2yxfEFilWX6IOpYeRpfwFYd/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQ0IzQkQ4Mjc3NTAxMUYwOEM1REVGOEZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIbMA0GCSqGSIb3DQEBCwUA
A4IBAQBKnT8SiKNyZmoHiRqLMtAvgCCSppqIBQyw6Mdyfq3bcuppDr65I01jPZWn
yHvRS8ptki7V5uoKvxytAiz+h3wTuoPHOgX90ZwIp9o2RI4NmQX0xYe/ECpxR7UQ
F2+xSpR5AKiz7CEbEsALMhsi9AEjf8T0e4VsNRJyaTR5yNNZ02k/TOd9Brq9UWr9
WQAAopyiyIqFmrF+awjjLb3YRTwezzQb8slEGMas4X9zqc0MEWirwXj0pVl4aIsm
7WUsBaUunHHK6LC3VWAUE9sPEKzozvTYfSVz4Ztf3+qYT6IaKIRtSBgawGqIwDOH
TQCfRM4lg4ct54mRe++mirNgyQgQ
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:24:39 2025 by rpki-client