Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/515486926D2311F0AFA92FBDDAE4EC9C.roa
File: 515486926D2311F0AFA92FBDDAE4EC9C.roa (raw, json)
Hash identifier: i5ODPWFEkWFqptrkkk3Q/BVfL0MZ/BPd/4KSa4w6/pE=
Subject key identifier: 5A:EF:80:09:58:BB:B2:33:7B:9B:F1:28:07:B4:4F:26:CA:D6:83:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01683C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/515486926D2311F0AFA92FBDDAE4EC9C.roa
Signing time: Wed 30 Jul 2025 08:58:11 +0000
ROA not before: Wed 30 Jul 2025 08:58:06 +0000
ROA not after: Wed 03 Sep 2025 08:58:06 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92220 (0x1683c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 08:58:06 2025 GMT
Not After : Sep 3 08:58:06 2025 GMT
Subject: CN=6889dea3-d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:c9:7f:fe:6c:25:ce:10:c5:3f:89:64:77:
54:70:f5:cf:de:25:9b:f4:a5:a7:31:df:59:37:cd:
00:57:ea:42:7c:cf:bc:b7:c0:b9:fa:5e:6b:c3:d3:
ab:16:64:36:a2:ab:16:75:41:b6:85:25:22:5a:ba:
87:9c:58:57:05:2f:8d:fd:ae:21:db:f4:91:d0:dd:
ee:89:dc:d7:ad:6b:c5:24:8d:ca:b2:fb:bd:86:f4:
aa:ff:6e:8d:e0:86:f1:9b:1a:e5:39:32:26:55:bd:
1a:fc:16:91:a7:6b:6a:d2:35:25:96:76:a1:c6:47:
bb:74:55:58:6f:89:95:fc:ad:63:ae:63:dd:a0:e4:
4f:75:8a:85:01:7d:37:3f:c9:a8:f4:cc:8f:24:a1:
7c:cb:d5:f4:25:f8:4f:3d:27:98:21:90:8a:0b:48:
64:14:26:79:06:5a:12:fc:86:0b:7d:89:97:c6:33:
02:23:28:c9:b4:79:8b:10:22:27:cc:0b:c5:44:1a:
68:89:76:06:b8:bd:d7:76:d4:8f:22:fb:b5:b4:93:
83:a3:f1:2c:46:5b:96:14:5d:32:1c:c8:17:1c:f0:
18:91:8c:95:44:6b:93:14:2f:e8:2e:d7:5c:e4:71:
8c:9c:a5:75:e1:d8:0b:0f:84:80:49:79:0b:ba:1a:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EF:80:09:58:BB:B2:33:7B:9B:F1:28:07:B4:4F:26:CA:D6:83:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/515486926D2311F0AFA92FBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:55:6b:73:9d:b9:2d:2b:79:8b:12:e3:c1:5d:bb:eb:35:92:
fe:b1:70:3a:1c:aa:4e:36:75:da:55:6f:1c:21:6c:6f:85:18:
1e:21:ad:2f:dc:d2:ab:3a:9a:79:67:89:c1:b0:58:c5:34:0c:
cc:da:af:b2:ce:d1:61:bb:e8:d3:d6:a1:8e:4a:a4:fe:16:94:
8e:69:79:1d:04:0c:1b:04:43:b4:a7:ca:d9:07:3f:5a:8c:b2:
6f:a4:9a:ef:53:a7:88:85:77:e7:c6:45:4d:89:8b:f2:71:00:
d5:23:53:8c:2c:06:9b:47:ab:74:33:9e:ed:47:09:02:c7:0b:
07:28:67:b9:e3:31:8b:15:87:75:3b:fb:80:37:d7:d3:92:77:
a3:b8:e2:92:86:3c:a6:66:a0:ec:7d:94:5a:d6:40:a6:2b:80:
3d:05:ab:5c:c0:bf:5c:d3:e4:94:4f:6f:cf:70:d2:11:75:de:
b1:54:28:ae:5b:01:bc:61:58:dd:8e:59:04:cb:2c:c9:e4:45:
db:1c:1c:86:a6:98:75:d6:23:ff:56:38:65:e0:35:5d:02:db:
34:46:20:88:c5:f4:d0:fc:f2:28:71:9c:95:95:7c:d7:a7:78:
63:ab:35:4b:f2:44:37:ca:39:9b:64:8f:91:a9:62:41:95:53:
ef:24:35:ed
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWg8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzMwMDg1ODA2WhcNMjUwOTAzMDg1ODA2WjAYMRYw
FAYDVQQDEw02ODg5ZGVhMy1kODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqqLJf/5sJc4QxT+JZHdUcPXP3iWb9KWnMd9ZN80AV+pCfM+8t8C5+l5r
w9OrFmQ2oqsWdUG2hSUiWrqHnFhXBS+N/a4h2/SR0N3uidzXrWvFJI3Ksvu9hvSq
/26N4IbxmxrlOTImVb0a/BaRp2tq0jUllnahxke7dFVYb4mV/K1jrmPdoORPdYqF
AX03P8mo9MyPJKF8y9X0JfhPPSeYIZCKC0hkFCZ5BloS/IYLfYmXxjMCIyjJtHmL
ECInzAvFRBpoiXYGuL3XdtSPIvu1tJODo/EsRluWFF0yHMgXHPAYkYyVRGuTFC/o
Ltdc5HGMnKV14dgLD4SASXkLuhod3QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFrv
gAlYu7Ize5vxKAe0TybK1oN/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MTU0ODY5MjZEMjMxMUYwQUZBOTJGQkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDoMA0GCSqGSIb3DQEBCwUA
A4IBAQB7VWtznbktK3mLEuPBXbvrNZL+sXA6HKpONnXaVW8cIWxvhRgeIa0v3NKr
Opp5Z4nBsFjFNAzM2q+yztFhu+jT1qGOSqT+FpSOaXkdBAwbBEO0p8rZBz9ajLJv
pJrvU6eIhXfnxkVNiYvycQDVI1OMLAabR6t0M57tRwkCxwsHKGe54zGLFYd1O/uA
N9fTknejuOKShjymZqDsfZRa1kCmK4A9BatcwL9c0+SUT2/PcNIRdd6xVCiuWwG8
YVjdjlkEyyzJ5EXbHByGpph11iP/Vjhl4DVdAts0RiCIxfTQ/PIocZyVlXzXp3hj
qzVL8kQ3yjmbZI+RqWJBlVPvJDXt
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:15 2025 by rpki-client