Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC2E758478E11F0A119199ADAE4EC9C.roa
File: 3AC2E758478E11F0A119199ADAE4EC9C.roa (raw, json)
Hash identifier: nkF7tSXXpo5wIGmNKTlej+A2k4PhYu/dokoOKxgqytM=
Subject key identifier: 7D:7A:C2:89:59:10:2F:2F:91:5F:04:54:30:83:11:CE:75:98:C5:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC2E758478E11F0A119199ADAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:07:45 +0000
ROA not before: Thu 12 Jun 2025 13:07:40 +0000
ROA not after: Tue 22 Jul 2025 13:07:40 +0000
asID: 401701
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88963 (0x15b83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 13:07:40 2025 GMT
Not After : Jul 22 13:07:40 2025 GMT
Subject: CN=684ad121-b935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:ef:36:08:0a:52:f3:50:9c:51:89:8f:c8:
b4:fc:9c:47:d3:a7:04:10:dc:9c:c8:d7:a3:6b:bf:
76:41:26:7c:c2:26:e6:f8:53:a2:0c:38:96:c0:11:
10:00:e2:00:4c:e2:e9:1c:d5:df:fd:e5:c4:c3:79:
fb:ed:5b:f4:f1:e3:f3:49:fd:cb:d2:b7:10:9d:7b:
17:c9:41:d6:5b:28:e3:e0:a7:81:94:87:f6:50:d2:
0d:fa:e4:dd:5f:50:04:00:8a:95:15:24:fd:f7:94:
ac:da:e9:c3:09:cc:84:8c:88:c2:4a:c1:af:8d:ac:
f7:ac:b3:16:3f:51:d8:c9:ad:76:cf:f8:ca:90:43:
d7:0a:cf:5e:2b:5c:6a:c5:fe:47:f8:04:f9:1b:de:
49:42:63:c0:17:a4:59:ad:5c:4c:52:fd:f7:be:1a:
b6:60:3a:48:a7:23:99:68:de:c2:4b:07:cd:cc:6f:
6e:a0:fb:3d:b4:8e:15:66:35:8a:38:55:e7:e3:c6:
0b:83:30:aa:75:cb:42:3e:d5:04:a4:23:55:38:8f:
23:64:52:62:2f:e1:74:fc:c6:97:88:5f:fa:91:af:
6a:7c:19:a3:4a:c4:49:a5:c5:0c:bc:ef:8c:46:32:
d3:f1:40:dd:20:79:e9:57:fd:c4:91:4f:69:4f:5e:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:C2:89:59:10:2F:2F:91:5F:04:54:30:83:11:CE:75:98:C5:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC2E758478E11F0A119199ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
69:08:0c:52:96:9a:b9:e3:0c:bb:33:0a:71:74:14:5b:33:34:
ae:32:02:39:f2:11:86:a1:25:71:ea:3f:79:58:e6:7d:ca:f8:
24:39:44:d0:d4:b2:f2:e2:a2:b9:96:54:57:f8:47:14:03:2d:
ce:49:af:df:15:23:0e:2e:35:bd:eb:08:21:31:96:4e:8d:0f:
06:7b:d1:d8:61:4d:f3:84:24:a6:35:b1:a1:5d:e4:31:34:99:
a9:5f:84:83:2a:92:7f:91:32:a5:99:2e:56:dd:61:be:b4:ab:
da:32:63:2c:29:b6:4c:d5:fe:2b:9c:79:b8:95:e0:65:31:2e:
0b:ed:4a:dd:41:7f:91:b7:09:01:b3:2a:69:95:c3:e1:ab:ab:
3a:32:8c:b8:b3:57:b1:51:17:17:5c:b2:2c:a6:49:97:64:19:
b6:d6:e1:db:7f:f5:70:00:a5:2b:8e:94:db:e7:74:53:cf:c6:
29:0f:29:3b:1b:48:5a:3f:86:a3:08:07:fb:a4:cc:13:7b:c0:
8c:3f:3a:1d:f7:15:1d:76:6d:ce:f5:15:c0:65:34:e7:27:1f:
ea:d5:13:34:2a:5e:26:58:61:d7:84:b7:b4:85:0f:9a:8e:51:
6d:a3:fc:fb:b3:27:81:5b:df:3a:c5:0f:27:05:18:45:f2:e0:
36:8e:d1:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVuDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEyMTMwNzQwWhcNMjUwNzIyMTMwNzQwWjAYMRYw
FAYDVQQDEw02ODRhZDEyMS1iOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2j/vNggKUvNQnFGJj8i0/JxH06cEENycyNeja792QSZ8wibm+FOiDDiW
wBEQAOIATOLpHNXf/eXEw3n77Vv08ePzSf3L0rcQnXsXyUHWWyjj4KeBlIf2UNIN
+uTdX1AEAIqVFST995Ss2unDCcyEjIjCSsGvjaz3rLMWP1HYya12z/jKkEPXCs9e
K1xqxf5H+AT5G95JQmPAF6RZrVxMUv33vhq2YDpIpyOZaN7CSwfNzG9uoPs9tI4V
ZjWKOFXn48YLgzCqdctCPtUEpCNVOI8jZFJiL+F0/MaXiF/6ka9qfBmjSsRJpcUM
vO+MRjLT8UDdIHnpV/3EkU9pT16KgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH16
wolZEC8vkV8EVDCDEc51mMWKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQUMyRTc1ODQ3OEUxMUYwQTExOTE5OUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQBpCAxSlpq54wy7MwpxdBRbMzSuMgI58hGGoSVx6j95WOZ9yvgkOUTQ1LLy
4qK5llRX+EcUAy3OSa/fFSMOLjW96wghMZZOjQ8Ge9HYYU3zhCSmNbGhXeQxNJmp
X4SDKpJ/kTKlmS5W3WG+tKvaMmMsKbZM1f4rnHm4leBlMS4L7UrdQX+RtwkBsypp
lcPhq6s6Moy4s1exURcXXLIspkmXZBm21uHbf/VwAKUrjpTb53RTz8YpDyk7G0ha
P4ajCAf7pMwTe8CMPzod9xUddm3O9RXAZTTnJx/q1RM0Kl4mWGHXhLe0hQ+ajlFt
o/z7syeBW986xQ8nBRhF8uA2jtG2
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:34:40 2025 by rpki-client