Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/719A5036B89011F0982D1DE9DAE4EC9C.roa
File: 719A5036B89011F0982D1DE9DAE4EC9C.roa (raw, json)
Hash identifier: 5DNmkqdyfULW4CUQmuZmg8UeRoOH2GXxXfWm0VxdUX4=
Subject key identifier: 7B:35:72:FA:74:4E:F5:52:A0:78:66:AE:E6:9D:0B:D4:16:56:CD:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01846B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/719A5036B89011F0982D1DE9DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:38:17 +0000
ROA not before: Mon 03 Nov 2025 08:38:12 +0000
ROA not after: Tue 09 Dec 2025 08:38:12 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99435 (0x1846b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 08:38:12 2025 GMT
Not After : Dec 9 08:38:12 2025 GMT
Subject: CN=690869f9-bc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:fe:b4:80:f3:71:fa:6d:9b:04:6f:e8:09:
94:43:4b:6a:c8:08:47:b8:2e:ea:25:b1:1a:6e:15:
44:bd:7e:a6:0f:b9:47:e3:cf:e7:5a:b9:9c:bc:3e:
ad:b6:53:8a:e0:8b:c4:4c:16:1a:b4:69:2d:cd:1a:
d3:3f:bb:7b:15:c9:a1:51:f0:b5:7c:aa:1b:16:41:
d8:7e:8e:43:a3:11:fe:7f:10:21:47:0a:97:55:7d:
c7:90:8a:8a:94:d5:0c:85:24:4e:25:5a:c1:ce:c6:
6f:0c:fa:dc:42:5e:03:ba:fa:08:cb:1a:aa:bd:3f:
8c:7a:55:32:1c:c0:c4:e2:d0:63:35:76:00:9e:e5:
19:82:3f:3a:66:27:30:14:0b:80:3a:d1:02:99:2f:
65:90:e2:67:ee:7c:7e:47:fe:5f:87:bf:ef:96:62:
f6:78:0b:9c:aa:5b:01:b2:fb:5b:f4:f9:12:f3:d4:
5b:56:ee:12:56:9f:92:fa:2b:9b:65:3e:1a:fc:e0:
d4:ef:7a:1f:7e:07:79:9b:d4:57:96:5a:6d:a8:fb:
35:03:d9:21:99:2b:e4:74:63:46:bc:27:c6:b5:a8:
16:b2:f4:14:4f:b8:aa:99:d2:8f:bf:78:75:6c:ef:
7f:10:5d:f7:e0:fa:e5:36:df:64:28:5e:fd:16:89:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:72:FA:74:4E:F5:52:A0:78:66:AE:E6:9D:0B:D4:16:56:CD:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/719A5036B89011F0982D1DE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
45.195.133.0/24
Signature Algorithm: sha256WithRSAEncryption
11:79:d0:05:9d:cf:67:e3:14:97:7d:36:0e:07:b6:18:cd:03:
a2:f7:2a:2f:53:dd:6c:52:5c:35:9b:88:c1:5f:64:1a:9a:ac:
60:7f:d0:09:e3:ac:2d:d2:02:ab:d2:7d:67:44:96:45:ff:e8:
c3:24:8e:1a:8d:b2:75:31:44:92:17:58:2b:d9:26:47:a3:c0:
9e:86:de:cf:4d:21:3d:c2:1f:2b:84:23:23:5d:6f:cb:48:3d:
ac:6b:f0:47:44:63:8b:5a:78:e0:91:19:7c:94:4f:e7:dd:bc:
87:a6:ee:72:f2:58:ac:70:92:31:da:55:e6:7b:64:e2:c2:02:
3a:77:b6:c9:5c:59:65:e4:f1:06:e5:15:c4:3b:10:bc:18:b6:
a7:d3:56:18:c8:04:e6:a3:d8:4d:7b:9e:5c:d4:1d:03:cf:49:
bb:08:f8:4e:42:34:71:9c:83:2c:ce:ee:60:a2:fc:79:25:c5:
f2:c4:1a:95:c5:1a:1f:5f:66:ab:53:fc:c9:a1:93:99:2c:b2:
30:01:fc:7c:7b:89:8b:ec:39:55:f7:37:0b:b9:e2:ff:fd:d6:
72:b2:18:f7:1a:ba:d4:d0:9e:e2:45:80:26:df:c5:b8:7c:cd:
f3:24:a1:dc:45:48:de:3e:67:ea:ad:48:37:76:12:d8:2c:87:
7e:df:51:75
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYRrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMDgzODEyWhcNMjUxMjA5MDgzODEyWjAYMRYw
FAYDVQQDEw02OTA4NjlmOS1iYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuHP+tIDzcfptmwRv6AmUQ0tqyAhHuC7qJbEabhVEvX6mD7lH48/nWrmc
vD6ttlOK4IvETBYatGktzRrTP7t7FcmhUfC1fKobFkHYfo5DoxH+fxAhRwqXVX3H
kIqKlNUMhSROJVrBzsZvDPrcQl4DuvoIyxqqvT+MelUyHMDE4tBjNXYAnuUZgj86
ZicwFAuAOtECmS9lkOJn7nx+R/5fh7/vlmL2eAucqlsBsvtb9PkS89RbVu4SVp+S
+iubZT4a/ODU73offgd5m9RXllptqPs1A9khmSvkdGNGvCfGtagWsvQUT7iqmdKP
v3h1bO9/EF334PrlNt9kKF79FokfrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs1
cvp0TvVSoHhmruadC9QWVs2DMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MTlBNTAzNkI4OTAxMUYwOTgyRDFERTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcD0AwQALcOFMA0GCSqGSIb3
DQEBCwUAA4IBAQARedAFnc9n4xSXfTYOB7YYzQOi9yovU91sUlw1m4jBX2Qamqxg
f9AJ46wt0gKr0n1nRJZF/+jDJI4ajbJ1MUSSF1gr2SZHo8Ceht7PTSE9wh8rhCMj
XW/LSD2sa/BHRGOLWnjgkRl8lE/n3byHpu5y8liscJIx2lXme2TiwgI6d7bJXFll
5PEG5RXEOxC8GLan01YYyATmo9hNe55c1B0Dz0m7CPhOQjRxnIMszu5govx5JcXy
xBqVxRofX2arU/zJoZOZLLIwAfx8e4mL7DlV9zcLueL//dZyshj3GrrU0J7iRYAm
38W4fM3zJKHcRUjePmfqrUg3dhLYLId+31F1
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:37 2025 by rpki-client