Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47EEAB9A490211F0AD7D49A2DAE4EC9C.roa
File: 47EEAB9A490211F0AD7D49A2DAE4EC9C.roa (raw, json)
Hash identifier: NaqWGNGO88hZbiCSM1yIo8CEYnRBBfhXxCik++fsA7k=
Subject key identifier: F9:BA:AE:2F:60:99:0C:E2:A6:60:19:94:7B:05:AC:D0:34:E4:AD:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47EEAB9A490211F0AD7D49A2DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:31:00 +0000
ROA not before: Sat 14 Jun 2025 09:30:54 +0000
ROA not after: Fri 04 Jul 2025 09:30:54 +0000
asID: 399195
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89057 (0x15be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 09:30:54 2025 GMT
Not After : Jul 4 09:30:54 2025 GMT
Subject: CN=684d4154-db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:b6:c6:a8:12:a6:a0:67:32:e7:03:2e:69:
27:2d:42:fb:7a:7d:e7:6f:a6:50:d0:21:e5:17:92:
30:c5:1e:6f:83:48:83:c9:cd:56:a8:c1:6b:93:1e:
d4:52:80:68:4d:7f:61:57:32:fe:e3:ea:bb:31:f2:
97:3c:13:84:af:e6:50:bd:2b:ae:7d:22:f7:d8:14:
5b:af:b4:49:0a:9c:22:c0:9f:c1:e5:7a:35:1c:99:
17:0c:65:2d:18:93:51:59:f0:00:f0:42:bf:3b:19:
8d:86:62:77:b2:6f:62:8e:c7:da:5c:a6:9a:19:c6:
38:7b:ab:f6:de:b3:a5:53:9a:08:70:76:c4:99:61:
55:71:13:15:48:56:23:5e:80:17:5d:f4:c9:a5:6d:
76:c9:21:f7:f9:96:61:56:58:ba:44:da:a7:b0:6a:
9e:ea:bc:52:db:50:69:75:a4:54:81:af:4f:0d:ff:
7c:fb:96:d2:06:57:07:23:8f:64:3f:62:0b:cb:70:
65:07:35:42:0f:dc:49:85:c7:23:26:c3:d9:75:a5:
a1:a2:23:3e:b9:bf:e1:8d:7b:4a:0d:dd:3d:99:af:
17:e2:b0:da:4e:f7:91:53:b6:60:cb:e6:7d:6d:9b:
40:24:bf:30:2f:a5:de:10:d3:1b:c4:c7:3e:a0:cd:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BA:AE:2F:60:99:0C:E2:A6:60:19:94:7B:05:AC:D0:34:E4:AD:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47EEAB9A490211F0AD7D49A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:09:69:a7:6c:30:73:0f:19:0b:de:00:f3:c1:a4:3c:63:5d:
4f:68:fb:94:c0:84:41:04:d8:64:16:e4:25:4f:82:7f:77:b1:
06:a9:8b:fc:69:43:f1:51:0a:c7:fa:f5:f2:02:63:b2:fd:d2:
9f:57:13:f0:3f:01:b7:f1:ba:7f:b1:ca:0a:7d:37:22:c4:af:
ce:c9:9b:55:2d:b7:7c:44:bf:b9:14:a8:0b:25:4e:82:26:df:
5b:4e:07:a9:1e:c8:23:f3:6f:18:44:6f:82:17:05:3c:17:db:
39:19:5f:12:b7:d9:44:0e:43:45:94:9a:bc:cf:d1:27:20:3c:
70:31:1e:50:a7:16:a0:dc:20:56:36:03:97:32:1e:ce:f6:18:
0b:f9:d1:fd:a9:10:93:c3:76:24:aa:72:4d:14:c8:15:04:ee:
80:54:a4:60:59:af:82:e9:79:a5:6c:12:37:6f:31:ab:60:ff:
2d:44:5d:64:d7:37:48:49:af:a3:4f:50:22:30:dc:53:2b:04:
e1:40:12:2d:12:49:81:59:f6:28:a3:fc:18:1c:2a:14:83:3a:
58:60:ef:67:bf:25:8d:50:c1:22:83:5b:7a:07:47:23:5f:65:
09:8d:8f:fd:c8:90:0c:ea:dd:08:77:cf:60:91:12:95:ef:0f:
c9:3b:a6:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVvhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE0MDkzMDU0WhcNMjUwNzA0MDkzMDU0WjAYMRYw
FAYDVQQDEw02ODRkNDE1NC1kYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzRe2xqgSpqBnMucDLmknLUL7en3nb6ZQ0CHlF5IwxR5vg0iDyc1WqMFr
kx7UUoBoTX9hVzL+4+q7MfKXPBOEr+ZQvSuufSL32BRbr7RJCpwiwJ/B5Xo1HJkX
DGUtGJNRWfAA8EK/OxmNhmJ3sm9ijsfaXKaaGcY4e6v23rOlU5oIcHbEmWFVcRMV
SFYjXoAXXfTJpW12ySH3+ZZhVli6RNqnsGqe6rxS21BpdaRUga9PDf98+5bSBlcH
I49kP2ILy3BlBzVCD9xJhccjJsPZdaWhoiM+ub/hjXtKDd09ma8X4rDaTveRU7Zg
y+Z9bZtAJL8wL6XeENMbxMc+oM246wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPm6
ri9gmQzipmAZlHsFrNA05K15MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80N0VFQUI5QTQ5MDIxMUYwQUQ3RDQ5QTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcjAMA0GCSqGSIb3DQEBCwUA
A4IBAQAtCWmnbDBzDxkL3gDzwaQ8Y11PaPuUwIRBBNhkFuQlT4J/d7EGqYv8aUPx
UQrH+vXyAmOy/dKfVxPwPwG38bp/scoKfTcixK/OyZtVLbd8RL+5FKgLJU6CJt9b
TgepHsgj828YRG+CFwU8F9s5GV8St9lEDkNFlJq8z9EnIDxwMR5Qpxag3CBWNgOX
Mh7O9hgL+dH9qRCTw3YkqnJNFMgVBO6AVKRgWa+C6XmlbBI3bzGrYP8tRF1k1zdI
Sa+jT1AiMNxTKwThQBItEkmBWfYoo/wYHCoUgzpYYO9nvyWNUMEig1t6B0cjX2UJ
jY/9yJAM6t0Id89gkRKV7w/JO6aU
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:56:57 2025 by rpki-client