Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/777A242666CA11F0820D17E8DAE4EC9C.roa
File: 777A242666CA11F0820D17E8DAE4EC9C.roa (raw, json)
Hash identifier: v0BJqmOuUfFwEbu+Cp9UbqzHz/zNO8hvQBjMTPuXIjY=
Subject key identifier: 33:F5:EF:32:6D:81:C8:72:B1:4D:06:CD:12:22:BE:A9:4C:B5:D8:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01667D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/777A242666CA11F0820D17E8DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 07:07:03 +0000
ROA not before: Tue 22 Jul 2025 07:06:57 +0000
ROA not after: Wed 27 Aug 2025 07:06:57 +0000
asID: 27951
IP address blocks: 45.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91773 (0x1667d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 07:06:57 2025 GMT
Not After : Aug 27 07:06:57 2025 GMT
Subject: CN=687f3896-e437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:e0:78:74:cf:6c:2f:ca:f5:b9:26:9d:81:
93:23:e6:8d:e3:6b:12:ca:25:8d:78:9a:9f:69:29:
4c:17:93:ee:8e:ad:29:2c:20:fc:26:68:da:4d:dd:
88:0d:06:77:ba:ad:8e:72:09:28:13:46:4f:63:d0:
dc:c5:86:74:08:86:da:67:20:32:51:8a:fd:df:af:
92:9c:db:b3:52:bc:98:3f:be:d6:67:11:db:4e:22:
39:5b:d4:34:bd:cc:20:ec:f0:b0:88:a7:0d:7e:24:
e9:e4:4d:2f:b2:b9:29:a3:32:0d:68:0d:d7:cb:48:
3b:7d:26:0e:62:59:e1:82:d5:c2:ac:46:77:be:cd:
4e:88:2f:f5:92:36:aa:ed:31:0f:6c:1e:e7:2a:4e:
19:d9:b0:45:0d:e3:61:79:38:9f:5b:0b:85:d5:0e:
85:a1:f9:a8:d4:fd:7a:71:1a:aa:44:0b:4d:e0:cd:
77:e8:44:bd:3e:f2:9f:bb:e1:3f:5c:29:cb:8e:a4:
33:6f:12:a2:7d:22:0e:e4:93:d1:58:d2:d3:3d:b2:
44:f4:05:d4:44:67:7b:3f:46:d4:b4:a5:21:85:77:
d1:c2:38:b1:14:9b:70:e0:a6:53:4b:1c:08:ac:ff:
92:15:74:b0:bf:be:23:58:5a:fd:e5:69:b3:52:fb:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:EF:32:6D:81:C8:72:B1:4D:06:CD:12:22:BE:A9:4C:B5:D8:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/777A242666CA11F0820D17E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
20:82:12:d4:ae:d7:70:36:0a:59:04:07:60:3e:2b:4d:9f:11:
0a:9d:fa:38:a7:d5:f9:b9:01:7f:d9:50:0e:7c:3a:ef:27:08:
c9:ff:a5:b8:43:d6:4f:cb:f5:51:2f:ff:2f:5a:39:5e:42:59:
34:a7:03:5d:a0:53:fc:c8:1d:41:ae:0c:b7:17:17:1a:5f:44:
0a:02:98:63:0c:a1:a5:09:4b:13:4c:75:2a:d7:13:33:f0:73:
09:57:1a:c9:12:f9:d4:c1:83:97:72:a8:1a:4b:f0:9a:dc:e9:
fa:c5:62:ef:16:04:2a:f1:a9:fe:61:32:a1:32:b4:8f:a2:64:
28:2b:3f:ba:27:32:b0:c8:b9:81:89:38:08:eb:e1:1f:f0:01:
1f:31:f5:94:61:65:40:00:7f:7e:6f:87:67:3c:94:4c:0d:30:
7c:60:95:bd:24:ae:12:58:0a:5c:9a:34:9d:27:9d:e9:d5:51:
9d:a5:a0:62:ea:8f:28:f2:ad:d9:53:01:b9:ad:4e:b5:30:54:
d9:cd:0d:12:07:92:f9:54:a4:71:a9:13:82:f5:a6:6e:e2:c9:
d8:a6:6b:11:e9:66:e3:53:f8:47:29:89:95:ec:12:b5:0d:d9:
15:da:43:4f:79:12:74:c3:28:98:0c:2c:fc:e5:f2:3f:d0:ab:
c5:a2:2e:6b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWZ9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzIyMDcwNjU3WhcNMjUwODI3MDcwNjU3WjAYMRYw
FAYDVQQDEw02ODdmMzg5Ni1lNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwaPgeHTPbC/K9bkmnYGTI+aN42sSyiWNeJqfaSlMF5Pujq0pLCD8Jmja
Td2IDQZ3uq2OcgkoE0ZPY9DcxYZ0CIbaZyAyUYr936+SnNuzUryYP77WZxHbTiI5
W9Q0vcwg7PCwiKcNfiTp5E0vsrkpozINaA3Xy0g7fSYOYlnhgtXCrEZ3vs1OiC/1
kjaq7TEPbB7nKk4Z2bBFDeNheTifWwuF1Q6Fofmo1P16cRqqRAtN4M136ES9PvKf
u+E/XCnLjqQzbxKifSIO5JPRWNLTPbJE9AXURGd7P0bUtKUhhXfRwjixFJtw4KZT
SxwIrP+SFXSwv74jWFr95WmzUvtkswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDP1
7zJtgchysU0GzRIivqlMtdicMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NzdBMjQyNjY2Q0ExMUYwODIwRDE3RThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAIMA0GCSqGSIb3DQEBCwUA
A4IBAQAgghLUrtdwNgpZBAdgPitNnxEKnfo4p9X5uQF/2VAOfDrvJwjJ/6W4Q9ZP
y/VRL/8vWjleQlk0pwNdoFP8yB1Brgy3FxcaX0QKAphjDKGlCUsTTHUq1xMz8HMJ
VxrJEvnUwYOXcqgaS/Ca3On6xWLvFgQq8an+YTKhMrSPomQoKz+6JzKwyLmBiTgI
6+Ef8AEfMfWUYWVAAH9+b4dnPJRMDTB8YJW9JK4SWApcmjSdJ53p1VGdpaBi6o8o
8q3ZUwG5rU61MFTZzQ0SB5L5VKRxqROC9aZu4snYpmsR6WbjU/hHKYmV7BK1DdkV
2kNPeRJ0wyiYDCz85fI/0KvFoi5r
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:02 2025 by rpki-client