Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA22AF4AD8911F09B2FF7AFDAE4EC9C.roa
File: 5BA22AF4AD8911F09B2FF7AFDAE4EC9C.roa (raw, json)
Hash identifier: Yr+/BrZWNRqSfEWLueCBdrpDJqPhVDOozKxBvVUwpGc=
Subject key identifier: DE:39:36:77:E5:C9:C9:44:F5:6B:B7:D6:2F:14:BE:50:38:61:4F:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018185
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA22AF4AD8911F09B2FF7AFDAE4EC9C.roa
Signing time: Mon 20 Oct 2025 07:49:51 +0000
ROA not before: Mon 20 Oct 2025 07:49:46 +0000
ROA not after: Tue 25 Nov 2025 07:49:46 +0000
asID: 401783
IP address blocks: 45.195.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98693 (0x18185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 07:49:46 2025 GMT
Not After : Nov 25 07:49:46 2025 GMT
Subject: CN=68f5e99f-daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:30:f6:c9:78:f0:7a:ad:9e:92:2c:56:07:
8e:23:56:5f:7f:68:ef:32:01:91:d5:26:ee:09:f7:
37:09:4f:ed:58:fd:e5:20:61:21:8f:99:db:89:70:
38:f8:a1:4b:0c:35:57:55:89:dd:df:1c:8d:c2:8a:
57:8b:aa:37:fe:c5:39:3a:e2:4d:5f:15:ac:58:5b:
a5:9b:16:e6:12:10:ee:a2:75:af:1c:ef:74:7a:de:
b1:ef:d0:40:c4:01:25:dc:12:56:ae:f0:ef:41:be:
18:8c:fb:d9:6f:05:c1:c0:30:51:9a:a2:89:91:26:
42:36:78:10:ca:4a:04:6f:a0:6f:11:47:46:0f:fe:
c6:cd:17:0a:04:cd:17:3b:9b:6f:4e:4a:6d:1f:03:
39:20:39:5b:c2:06:9f:1c:5e:74:9d:0d:e4:9c:4a:
d5:5a:c9:ae:9b:94:84:f2:42:0c:e1:17:a0:fe:a4:
75:7b:f3:d6:a3:e5:8c:c2:4d:33:f5:c8:37:9e:7f:
27:75:ed:18:f9:dd:38:80:6f:a9:bd:64:ac:a4:0c:
4f:1a:35:30:16:0a:fa:d2:3b:43:67:b2:dd:0f:53:
74:47:cd:c9:93:d9:61:60:61:4d:99:7c:88:1b:fd:
f8:6b:82:73:b5:3f:32:13:69:67:bc:6b:b6:78:94:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:36:77:E5:C9:C9:44:F5:6B:B7:D6:2F:14:BE:50:38:61:4F:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA22AF4AD8911F09B2FF7AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.255.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9e:a9:ae:d6:42:64:6e:c4:f5:1b:03:be:02:40:49:4c:f9:
e9:eb:55:82:a5:ae:a2:0b:74:33:fa:a8:8b:6c:9e:ee:49:30:
55:9c:30:09:df:c4:0a:23:7a:3e:4e:54:bf:cd:97:81:de:b8:
0e:6a:82:f3:a8:e7:98:1c:93:1c:d8:7e:09:5a:ed:49:7b:6a:
ee:a7:d3:70:3c:91:45:39:e3:dc:6c:c8:5a:0f:0f:8e:71:48:
17:63:34:27:7e:82:f4:39:d3:2e:ac:c7:58:82:7d:95:e5:00:
5d:71:32:c2:ec:9b:93:e4:9a:6d:11:9b:72:b5:36:7d:86:43:
dc:c7:ba:20:af:c9:68:c6:36:22:c8:55:49:14:a7:e4:b9:72:
16:53:5b:22:ac:00:db:eb:d8:43:af:3d:29:18:d7:e8:50:c9:
af:6f:d0:f2:d2:9c:fb:56:b5:eb:c8:05:22:3c:e1:69:d7:e8:
cf:b2:58:bd:e5:2f:b8:9c:96:ec:0e:fb:ed:66:14:b5:1b:c3:
12:6d:6e:6b:f4:07:4e:2f:b2:be:7b:89:ad:33:1d:67:80:2e:
22:bf:17:53:d4:ff:95:08:6d:12:87:92:6e:57:01:ae:72:89:
cf:68:86:b3:be:33:14:2c:2c:04:93:39:be:3d:fb:15:c4:ee:
b0:f3:77:ee
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYGFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDIwMDc0OTQ2WhcNMjUxMTI1MDc0OTQ2WjAYMRYw
FAYDVQQDEw02OGY1ZTk5Zi1kYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnGMw9sl48HqtnpIsVgeOI1Zff2jvMgGR1SbuCfc3CU/tWP3lIGEhj5nb
iXA4+KFLDDVXVYnd3xyNwopXi6o3/sU5OuJNXxWsWFulmxbmEhDuonWvHO90et6x
79BAxAEl3BJWrvDvQb4YjPvZbwXBwDBRmqKJkSZCNngQykoEb6BvEUdGD/7GzRcK
BM0XO5tvTkptHwM5IDlbwgafHF50nQ3knErVWsmum5SE8kIM4Reg/qR1e/PWo+WM
wk0z9cg3nn8nde0Y+d04gG+pvWSspAxPGjUwFgr60jtDZ7LdD1N0R83Jk9lhYGFN
mXyIG/34a4JztT8yE2lnvGu2eJTdRQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN45
NnflyclE9Wu31i8UvlA4YU/nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QkEyMkFGNEFEODkxMUYwOUIyRkY3QUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcP/MA0GCSqGSIb3DQEBCwUA
A4IBAQBRnqmu1kJkbsT1GwO+AkBJTPnp61WCpa6iC3Qz+qiLbJ7uSTBVnDAJ38QK
I3o+TlS/zZeB3rgOaoLzqOeYHJMc2H4JWu1Je2rup9NwPJFFOePcbMhaDw+OcUgX
YzQnfoL0OdMurMdYgn2V5QBdcTLC7JuT5JptEZtytTZ9hkPcx7ogr8loxjYiyFVJ
FKfkuXIWU1sirADb69hDrz0pGNfoUMmvb9Dy0pz7VrXryAUiPOFp1+jPsli95S+4
nJbsDvvtZhS1G8MSbW5r9AdOL7K+e4mtMx1ngC4ivxdT1P+VCG0Sh5JuVwGuconP
aIazvjMULCwEkzm+PfsVxO6w83fu
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:41 2025 by rpki-client