
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/003EB4DE706C11F0AD73619FDAE4EC9C.roa
File: 003EB4DE706C11F0AD73619FDAE4EC9C.roa (raw, json)
Hash identifier: vXdyrpeXY73vaeolbWQgdwnsB/rTMguLhHUijI+b+g0=
Subject key identifier: 64:58:40:14:BF:90:44:26:B8:9C:65:D4:3F:FD:79:04:55:DD:40:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016919
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/003EB4DE706C11F0AD73619FDAE4EC9C.roa
Signing time: Sun 03 Aug 2025 13:16:01 +0000
ROA not before: Sun 03 Aug 2025 13:15:57 +0000
ROA not after: Tue 30 Sep 2025 13:15:57 +0000
asID: 398478
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92441 (0x16919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 13:15:57 2025 GMT
Not After : Sep 30 13:15:57 2025 GMT
Subject: CN=688f6111-5159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:37:94:b8:2a:5a:6f:c5:20:22:18:42:ee:
e5:f8:b1:37:ed:ec:b4:5b:2e:7c:a6:c2:3a:7b:bb:
98:8f:e2:28:71:df:1e:2e:e8:c9:0b:e7:cf:18:ab:
00:6e:49:f8:80:81:14:cc:da:52:97:41:31:0d:6e:
21:5a:02:ec:bb:64:4a:43:ea:f6:19:5d:81:e6:8e:
3a:f7:20:90:88:fd:a7:13:13:99:2d:81:7c:e0:50:
15:37:3d:88:48:49:eb:cc:2a:ab:37:4b:8c:00:a7:
a1:3f:d2:6f:53:d3:39:71:5d:a8:e7:9f:b6:c0:fe:
ed:d4:f0:a2:cc:b8:56:90:aa:fb:90:37:7f:79:26:
8f:e0:7c:80:ae:2c:5a:66:48:5a:b1:61:fe:ff:91:
0f:c3:b2:2a:d3:1e:f0:e8:25:14:98:94:b7:85:a3:
c5:ab:69:40:a1:2b:7b:bd:b7:fe:af:cc:d9:d7:c6:
b2:06:82:72:ce:78:32:9a:77:a9:9f:37:f4:66:fb:
97:5f:e7:94:5e:74:13:42:10:cf:c6:f8:1f:a4:d0:
df:d1:ba:49:a5:15:1d:f5:a4:21:82:97:0b:f1:1e:
aa:f4:a4:de:55:07:be:0c:37:19:2a:a2:2b:4c:32:
13:e0:ef:32:cd:01:6d:51:00:08:1d:dd:c7:47:63:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:40:14:BF:90:44:26:B8:9C:65:D4:3F:FD:79:04:55:DD:40:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/003EB4DE706C11F0AD73619FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:6e:4f:a5:d9:70:76:39:53:e1:8b:8a:50:63:ac:d1:43:e3:
f5:fb:6b:3b:72:63:cb:e9:28:0a:1d:28:f3:de:5c:fb:f6:89:
6f:b7:a3:32:0f:86:13:d8:70:1b:6f:3a:c7:1a:f2:ec:33:5b:
85:81:60:76:b5:59:9a:c7:74:90:63:0f:8b:af:50:0e:d5:fa:
c1:22:07:de:fb:8b:0e:65:e9:0f:73:ed:5b:fd:18:c0:62:db:
94:4f:4e:dd:ce:bd:50:ab:d4:a4:3a:93:25:4c:43:9c:d6:0a:
64:1a:64:2f:7f:c8:6b:5c:a9:b6:96:c1:b9:d0:35:de:1b:7a:
46:a8:8c:e8:11:d1:e9:4a:9e:d1:57:4b:d9:e2:68:d7:13:56:
a7:a9:e6:1e:a2:ab:24:f7:f0:45:36:ce:b4:6d:ad:b8:d0:cb:
42:3f:6c:34:93:70:5c:7c:66:79:86:75:6c:48:e4:4f:6f:61:
7d:c1:df:b6:5f:21:e5:c9:ee:14:91:d9:f5:14:50:e3:80:98:
c1:1b:45:8e:1c:f3:c2:85:d4:0a:95:43:ef:dc:bc:cc:cb:f9:
ff:10:63:36:e8:82:3c:93:33:40:65:4d:ff:20:6e:de:ee:a6:
67:73:04:d0:ad:8b:47:76:28:7f:f0:ec:ad:02:50:56:8f:3c:
cd:d9:7b:22
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWkZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODAzMTMxNTU3WhcNMjUwOTMwMTMxNTU3WjAYMRYw
FAYDVQQDEw02ODhmNjExMS01MTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt943lLgqWm/FICIYQu7l+LE37ey0Wy58psI6e7uYj+Iocd8eLujJC+fP
GKsAbkn4gIEUzNpSl0ExDW4hWgLsu2RKQ+r2GV2B5o469yCQiP2nExOZLYF84FAV
Nz2ISEnrzCqrN0uMAKehP9JvU9M5cV2o55+2wP7t1PCizLhWkKr7kDd/eSaP4HyA
rixaZkhasWH+/5EPw7Iq0x7w6CUUmJS3haPFq2lAoSt7vbf+r8zZ18ayBoJyzngy
mnepnzf0ZvuXX+eUXnQTQhDPxvgfpNDf0bpJpRUd9aQhgpcL8R6q9KTeVQe+DDcZ
KqIrTDIT4O8yzQFtUQAIHd3HR2PKXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGRY
QBS/kEQmuJxl1D/9eQRV3UC7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDNFQjRERTcwNkMxMUYwQUQ3MzYxOUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCwbk+l2XB2OVPhi4pQY6zRQ+P1+2s7cmPL6SgKHSjz3lz79olvt6MyD4YT
2HAbbzrHGvLsM1uFgWB2tVmax3SQYw+Lr1AO1frBIgfe+4sOZekPc+1b/RjAYtuU
T07dzr1Qq9SkOpMlTEOc1gpkGmQvf8hrXKm2lsG50DXeG3pGqIzoEdHpSp7RV0vZ
4mjXE1anqeYeoqsk9/BFNs60ba240MtCP2w0k3BcfGZ5hnVsSORPb2F9wd+2XyHl
ye4Ukdn1FFDjgJjBG0WOHPPChdQKlUPv3LzMy/n/EGM26II8kzNAZU3/IG7e7qZn
cwTQrYtHdih/8OytAlBWjzzN2Xsi
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:50 2025 by rpki-client