Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720455BC67A011F08FA196DADAE4EC9C.roa
File: 720455BC67A011F08FA196DADAE4EC9C.roa (raw, json)
Hash identifier: Aob8xRKMN4+KrrZVQ0ZmNxjkllJ0zw+uu2dpu02b19c=
Subject key identifier: 76:50:47:6C:AB:C8:78:7F:C9:AB:73:9B:02:DA:FF:78:C3:6A:8C:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0166AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720455BC67A011F08FA196DADAE4EC9C.roa
Signing time: Wed 23 Jul 2025 08:38:46 +0000
ROA not before: Wed 23 Jul 2025 08:38:41 +0000
ROA not after: Tue 16 Sep 2025 08:38:41 +0000
asID: 142002
IP address blocks: 45.195.8.0/24 maxlen: 24
45.195.9.0/24 maxlen: 24
45.195.10.0/24 maxlen: 24
45.195.11.0/24 maxlen: 24
45.197.12.0/24 maxlen: 24
45.197.13.0/24 maxlen: 24
45.197.14.0/24 maxlen: 24
45.197.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91818 (0x166aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 08:38:41 2025 GMT
Not After : Sep 16 08:38:41 2025 GMT
Subject: CN=68809f96-f4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:e2:ec:87:ca:1b:e3:7a:83:16:41:86:5e:
aa:26:13:c3:28:81:02:f5:d8:96:98:75:b1:3f:3f:
35:17:5d:f9:bc:55:84:73:db:13:01:de:f4:13:10:
0f:db:02:da:34:e2:ab:25:4e:a9:ea:a8:2e:33:49:
6c:70:50:90:1c:70:4e:40:23:1d:0a:1c:76:c9:b1:
b5:ea:0c:93:a4:d2:2c:ca:4e:7b:fe:4b:93:70:0d:
f0:6b:88:e2:4e:de:32:01:58:73:15:4d:9d:da:f4:
fc:d4:03:73:11:d6:95:4d:ff:df:a2:68:d9:9d:a3:
c2:d9:b3:c1:6e:27:04:51:ef:55:f7:98:b8:f7:2e:
14:d1:41:db:26:73:74:e8:24:49:fb:73:21:61:6f:
cf:8c:25:77:e8:c7:6d:27:d3:5f:11:b0:01:11:9a:
6c:5d:f1:7e:83:85:3e:1c:68:57:2a:ff:9e:ac:ae:
46:e7:eb:2c:e7:a9:c3:d1:37:bf:03:a7:f5:33:47:
78:5b:fe:32:79:1d:d2:98:b0:09:22:a5:d9:93:a5:
ca:09:49:1f:c8:be:e1:48:e4:46:96:19:91:0a:c5:
6d:04:e7:52:ae:23:db:31:3d:68:40:00:a9:52:38:
8a:b5:68:49:9f:ef:8f:fc:d8:4d:10:89:29:84:6c:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:50:47:6C:AB:C8:78:7F:C9:AB:73:9B:02:DA:FF:78:C3:6A:8C:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/720455BC67A011F08FA196DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.8.0/22
45.197.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:af:13:85:1c:4b:0d:36:db:bc:20:5d:c8:6e:3e:4b:81:85:
65:1a:b8:f8:99:6d:45:16:51:cd:0f:72:e4:68:d2:3c:f5:81:
b1:b6:20:76:4e:f1:c1:ce:de:cd:c0:6b:9b:6d:f2:6b:91:88:
94:03:c1:00:15:41:91:b6:fa:2d:89:0a:1d:11:c7:ce:c5:db:
45:2d:10:63:7e:7b:69:3c:29:bb:05:0e:58:95:37:0f:ec:4a:
1e:75:f5:01:51:5f:00:3d:67:b6:ed:e7:b9:72:b4:49:36:4d:
95:bd:42:5f:1a:41:0c:4a:72:00:ca:1c:c5:1a:ee:37:10:b9:
63:62:bb:50:72:ed:f6:ac:75:cf:24:1f:74:2f:a1:f5:64:c2:
f0:ed:55:a9:ec:7a:66:b2:84:14:65:6a:be:a2:45:d1:00:3d:
04:7c:1d:c8:99:b0:d9:0c:09:fe:32:72:bf:83:b6:58:f4:0a:
f0:86:ee:22:58:8f:a1:b0:65:98:a5:2c:22:b5:54:29:17:4f:
14:93:1b:b7:c6:61:75:6b:40:18:b4:bd:8c:2e:74:99:ee:2c:
96:36:86:c0:76:9d:f4:c3:e8:10:c7:36:44:2e:13:27:40:02:
e2:71:aa:27:c0:b2:4f:7a:39:28:e1:0c:c0:46:c2:8b:0f:c1:
ee:b7:86:8c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWaqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzIzMDgzODQxWhcNMjUwOTE2MDgzODQxWjAYMRYw
FAYDVQQDEw02ODgwOWY5Ni1mNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwD/i7IfKG+N6gxZBhl6qJhPDKIEC9diWmHWxPz81F135vFWEc9sTAd70
ExAP2wLaNOKrJU6p6qguM0lscFCQHHBOQCMdChx2ybG16gyTpNIsyk57/kuTcA3w
a4jiTt4yAVhzFU2d2vT81ANzEdaVTf/fomjZnaPC2bPBbicEUe9V95i49y4U0UHb
JnN06CRJ+3MhYW/PjCV36MdtJ9NfEbABEZpsXfF+g4U+HGhXKv+erK5G5+ss56nD
0Te/A6f1M0d4W/4yeR3SmLAJIqXZk6XKCUkfyL7hSORGlhmRCsVtBOdSriPbMT1o
QACpUjiKtWhJn++P/NhNEIkphGyu3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZQ
R2yryHh/yatzmwLa/3jDaozZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MjA0NTVCQzY3QTAxMUYwOEZBMTk2REFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLcMIAwQCLcUMMA0GCSqGSIb3
DQEBCwUAA4IBAQCPrxOFHEsNNtu8IF3Ibj5LgYVlGrj4mW1FFlHND3LkaNI89YGx
tiB2TvHBzt7NwGubbfJrkYiUA8EAFUGRtvotiQodEcfOxdtFLRBjfntpPCm7BQ5Y
lTcP7EoedfUBUV8APWe27ee5crRJNk2VvUJfGkEMSnIAyhzFGu43ELljYrtQcu32
rHXPJB90L6H1ZMLw7VWp7HpmsoQUZWq+okXRAD0EfB3ImbDZDAn+MnK/g7ZY9Arw
hu4iWI+hsGWYpSwitVQpF08Ukxu3xmF1a0AYtL2MLnSZ7iyWNobAdp30w+gQxzZE
LhMnQALicaonwLJPejko4QzARsKLD8Hut4aM
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:24 2025 by rpki-client