Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F40810B89411F091E15384DAE4EC9C.roa
File: 63F40810B89411F091E15384DAE4EC9C.roa (raw, json)
Hash identifier: 8P0R9qaJGK3tG36z8Dif7Af9XCfOggTDGw4TDuAJNds=
Subject key identifier: 93:CD:25:26:0D:54:ED:D6:70:E3:FC:ED:71:BA:5D:36:66:7A:79:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018477
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F40810B89411F091E15384DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 09:06:32 +0000
ROA not before: Mon 03 Nov 2025 09:06:28 +0000
ROA not after: Sun 09 Nov 2025 09:06:28 +0000
asID: 22773
IP address blocks: 45.196.32.0/22 maxlen: 24
45.196.40.0/22 maxlen: 24
45.196.48.0/22 maxlen: 24
45.196.52.0/22 maxlen: 24
45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99447 (0x18477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 09:06:28 2025 GMT
Not After : Nov 9 09:06:28 2025 GMT
Subject: CN=69087098-709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:94:09:ab:38:ea:2c:6b:2c:a8:55:7e:02:
8b:1e:77:cc:74:3a:2b:32:db:fb:ca:8a:3b:29:49:
d2:a4:cb:d9:dd:a0:a9:98:20:ae:be:40:c8:fa:d0:
e3:e0:e9:a9:dc:6c:82:f7:13:dd:ac:1e:32:8b:ce:
e7:2e:61:a5:2a:6c:c5:c5:f0:2e:c3:da:7f:73:7a:
1f:66:37:0a:0b:b5:76:49:13:ae:af:5a:05:10:a5:
cd:c3:05:41:07:c6:3c:7f:7b:e9:0a:d3:04:01:66:
a1:f6:f9:ac:e6:64:c3:75:fb:25:87:d1:b2:d8:df:
0b:d6:34:95:6f:ba:d9:68:9f:83:32:81:80:b7:c2:
d5:cb:90:31:39:12:8a:f6:3b:fa:c3:5a:b9:41:18:
a4:ad:d0:ab:1e:a7:e4:af:71:0b:d9:77:ef:0c:67:
2a:1d:37:06:0e:a5:4c:07:ed:61:83:7a:07:46:37:
43:7f:2e:95:eb:4a:7f:47:5c:e3:67:2c:6b:b1:88:
06:15:3f:02:c1:ff:88:13:02:4f:71:7d:b3:d0:ea:
5d:f9:8f:8b:a1:da:80:1b:ab:c9:2e:6b:ad:74:e0:
08:ff:19:ea:86:d4:19:dc:6d:48:a3:76:91:fa:cb:
19:bf:1b:c6:01:3d:46:d6:0a:44:2d:04:e3:fe:b6:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CD:25:26:0D:54:ED:D6:70:E3:FC:ED:71:BA:5D:36:66:7A:79:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F40810B89411F091E15384DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
45.196.40.0/22
45.196.48.0/21
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
43:d9:6a:66:40:e0:f7:43:1c:01:e3:5e:de:50:b4:b0:11:3e:
5d:78:59:70:03:6b:60:6c:3c:e9:c8:6b:1d:79:d0:1d:72:43:
ee:6e:25:c2:af:b0:35:4a:f3:6c:c0:f0:6d:b3:ec:37:46:a9:
19:17:ea:2d:09:d4:09:f4:ed:b0:c8:d9:65:62:de:27:78:2f:
c2:ec:7e:90:e4:4f:ed:53:e6:06:3f:77:88:a7:0d:a6:16:34:
bf:3f:17:dc:98:a1:3e:fb:de:69:1d:ac:03:77:fc:9c:bc:fe:
54:a6:6f:e2:0f:6d:ae:cb:7d:a1:20:19:dd:27:2c:3e:65:b7:
1b:2a:2f:df:23:43:30:01:91:8e:7d:cf:e2:1c:e6:da:07:6d:
0c:a7:38:b8:84:3e:d7:07:70:de:2b:01:4d:7b:8a:8f:09:fc:
f7:67:31:7a:34:42:86:65:27:bb:7a:c4:92:da:10:69:7a:e9:
f4:a9:9b:01:09:fa:be:bc:58:3f:30:c9:2a:d8:ba:92:3d:ac:
69:9e:43:3e:71:4d:eb:69:0e:a6:be:39:1f:15:c2:99:c9:af:
8f:d7:21:c4:3d:82:f4:3c:37:e9:ef:21:04:d6:ad:bf:a2:48:
b0:a3:05:66:fb:13:9d:78:cd:2b:a2:ec:7f:bc:13:c7:5f:35:
ca:5b:b0:da
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAYR3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMDkwNjI4WhcNMjUxMTA5MDkwNjI4WjAYMRYw
FAYDVQQDEw02OTA4NzA5OC03MDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxVeUCas46ixrLKhVfgKLHnfMdDorMtv7yoo7KUnSpMvZ3aCpmCCuvkDI
+tDj4Omp3GyC9xPdrB4yi87nLmGlKmzFxfAuw9p/c3ofZjcKC7V2SROur1oFEKXN
wwVBB8Y8f3vpCtMEAWah9vms5mTDdfslh9Gy2N8L1jSVb7rZaJ+DMoGAt8LVy5Ax
ORKK9jv6w1q5QRikrdCrHqfkr3EL2XfvDGcqHTcGDqVMB+1hg3oHRjdDfy6V60p/
R1zjZyxrsYgGFT8Cwf+IEwJPcX2z0Opd+Y+LodqAG6vJLmutdOAI/xnqhtQZ3G1I
o3aR+ssZvxvGAT1G1gpELQTj/rYPewIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJPN
JSYNVO3WcOP87XG6XTZmenlNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0Y0MDgxMEI4OTQxMUYwOTFFMTUzODREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLcQgAwQCLcQoAwQDLcQwAwQC
LcQ8MA0GCSqGSIb3DQEBCwUAA4IBAQBD2WpmQOD3QxwB417eULSwET5deFlwA2tg
bDzpyGsdedAdckPubiXCr7A1SvNswPBts+w3RqkZF+otCdQJ9O2wyNllYt4neC/C
7H6Q5E/tU+YGP3eIpw2mFjS/PxfcmKE++95pHawDd/ycvP5Upm/iD22uy32hIBnd
Jyw+ZbcbKi/fI0MwAZGOfc/iHObaB20Mpzi4hD7XB3DeKwFNe4qPCfz3ZzF6NEKG
ZSe7esSS2hBpeun0qZsBCfq+vFg/MMkq2LqSPaxpnkM+cU3raQ6mvjkfFcKZya+P
1yHEPYL0PDfp7yEE1q2/okiwowVm+xOdeM0roux/vBPHXzXKW7Da
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:19 2025 by rpki-client