Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA4B6C845F211F0AD748EA3DAE4EC9C.roa
File: 7FA4B6C845F211F0AD748EA3DAE4EC9C.roa (raw, json)
Hash identifier: /aMtePfQCzPQ/El2/eIhnUIUTaaV5WB7HvgLwXJDE/A=
Subject key identifier: 32:62:EC:92:C9:66:1D:EF:BD:88:D5:B1:A8:2B:6C:68:22:2B:84:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA4B6C845F211F0AD748EA3DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 12:00:28 +0000
ROA not before: Tue 10 Jun 2025 12:00:23 +0000
ROA not after: Sat 12 Jul 2025 12:00:23 +0000
asID: 401696
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88773 (0x15ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 12:00:23 2025 GMT
Not After : Jul 12 12:00:23 2025 GMT
Subject: CN=68481e5c-e1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:54:60:71:17:aa:5d:d7:91:c9:54:28:8d:
c7:02:1d:2b:89:79:1e:54:1a:ec:b0:4b:2e:70:2e:
c5:68:1f:50:07:13:54:66:c8:8e:df:6a:cd:a8:1e:
b7:c4:60:ce:71:cd:34:27:eb:0b:01:46:de:fb:41:
79:b6:20:3b:10:d0:aa:6e:53:32:dd:9f:cd:1f:e5:
de:4f:fb:26:7d:18:40:ea:21:72:cc:21:65:4d:a2:
6c:49:f7:4a:40:73:03:99:5e:0c:85:27:0b:c0:d5:
ca:a5:f7:8a:7d:ff:ee:e4:4c:38:7d:ab:db:df:f6:
20:0e:71:37:60:a3:14:0c:b7:28:7a:f3:23:5f:7c:
02:f4:59:12:d8:81:ab:55:f1:ef:10:26:4c:d1:d2:
a2:52:08:ca:9f:c8:a2:3a:6d:c9:97:7f:86:12:c4:
69:7f:70:fe:74:03:5f:fc:54:49:8f:d7:b1:db:f8:
80:03:65:90:bc:26:bc:2a:8e:60:a0:96:34:94:7b:
56:07:61:5d:b5:64:81:16:32:55:25:86:f4:74:5a:
34:db:1e:8c:94:5f:db:59:0d:ef:49:97:3a:4a:c8:
03:8a:cf:75:ab:3e:13:59:91:d6:b7:89:ac:b1:cc:
f5:bc:d5:f5:ce:ad:6b:d1:ae:3b:90:80:b0:a9:ec:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:EC:92:C9:66:1D:EF:BD:88:D5:B1:A8:2B:6C:68:22:2B:84:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA4B6C845F211F0AD748EA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
80:60:14:15:7a:51:74:81:13:41:63:2c:05:b9:1a:8d:fe:fb:
6c:6e:23:61:01:4d:fc:69:6e:16:29:c3:0d:fb:ab:d4:da:1f:
61:27:a8:56:86:28:59:39:43:cd:66:87:4d:f4:eb:eb:1e:4c:
e6:b8:5f:c3:cb:65:eb:a9:7c:83:25:64:36:5d:24:7a:c3:ee:
32:ab:6c:48:33:84:89:81:3f:0f:00:a0:3f:6c:f1:69:6f:9f:
7a:05:9f:e3:91:52:ba:3a:98:37:c8:21:20:b7:15:36:da:d0:
17:ae:e8:c5:37:93:dc:19:35:95:3c:4b:8a:f7:44:cc:7b:60:
ad:19:86:6a:d8:d4:04:2a:57:ae:31:2f:d4:76:01:e7:10:5f:
56:64:61:e7:b9:86:30:56:a9:d0:a5:f3:1d:88:a7:02:65:09:
a0:07:4b:54:a0:a2:57:6a:9d:fd:0e:36:d5:51:d6:77:e8:3e:
b9:5d:72:a0:d9:32:81:d9:15:e5:2e:3b:56:1d:c0:44:c9:8c:
78:a0:45:3d:d9:ec:76:b6:b9:d9:68:3b:12:5e:e6:43:58:42:
74:2b:26:54:ad:1d:e2:e2:ad:5c:1e:fe:54:f9:6f:8b:fe:06:
df:43:73:a0:a2:70:a5:61:2d:a6:69:dd:61:5c:af:7d:92:4c:
3a:e0:f0:51
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVrFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEwMTIwMDIzWhcNMjUwNzEyMTIwMDIzWjAYMRYw
FAYDVQQDEw02ODQ4MWU1Yy1lMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvHdUYHEXql3XkclUKI3HAh0riXkeVBrssEsucC7FaB9QBxNUZsiO32rN
qB63xGDOcc00J+sLAUbe+0F5tiA7ENCqblMy3Z/NH+XeT/smfRhA6iFyzCFlTaJs
SfdKQHMDmV4MhScLwNXKpfeKff/u5Ew4favb3/YgDnE3YKMUDLcoevMjX3wC9FkS
2IGrVfHvECZM0dKiUgjKn8iiOm3Jl3+GEsRpf3D+dANf/FRJj9ex2/iAA2WQvCa8
Ko5goJY0lHtWB2FdtWSBFjJVJYb0dFo02x6MlF/bWQ3vSZc6SsgDis91qz4TWZHW
t4msscz1vNX1zq1r0a47kICwqez4aQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDJi
7JLJZh3vvYjVsagrbGgiK4S7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RkE0QjZDODQ1RjIxMUYwQUQ3NDhFQTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQCAYBQVelF0gRNBYywFuRqN/vtsbiNhAU38aW4WKcMN+6vU2h9hJ6hWhihZ
OUPNZodN9OvrHkzmuF/Dy2XrqXyDJWQ2XSR6w+4yq2xIM4SJgT8PAKA/bPFpb596
BZ/jkVK6Opg3yCEgtxU22tAXrujFN5PcGTWVPEuK90TMe2CtGYZq2NQEKleuMS/U
dgHnEF9WZGHnuYYwVqnQpfMdiKcCZQmgB0tUoKJXap39DjbVUdZ36D65XXKg2TKB
2RXlLjtWHcBEyYx4oEU92ex2trnZaDsSXuZDWEJ0KyZUrR3i4q1cHv5U+W+L/gbf
Q3OgonClYS2mad1hXK99kkw64PBR
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:58:01 2025 by rpki-client