Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C99E208477E11F0B169A0B5DAE4EC9C.roa
File: 8C99E208477E11F0B169A0B5DAE4EC9C.roa (raw, json)
Hash identifier: gFzm8bJ3KDcYsz1QhsVqKKL2gi2Z1dU1Qp4ObHa8cLc=
Subject key identifier: F6:D5:44:A6:1E:7C:84:1C:34:9C:58:6E:BC:7D:C4:65:A8:D4:E0:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C99E208477E11F0B169A0B5DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 11:15:30 +0000
ROA not before: Thu 12 Jun 2025 11:15:25 +0000
ROA not after: Sat 19 Jul 2025 11:15:25 +0000
asID: 6079
IP address blocks: 45.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 01:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88939 (0x15b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 11:15:25 2025 GMT
Not After : Jul 19 11:15:25 2025 GMT
Subject: CN=684ab6d2-351d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:42:a7:30:13:5d:10:54:ff:4c:09:2b:ec:
34:6f:0b:06:f9:3a:7c:9e:a0:9e:3b:7d:10:1e:db:
e1:3b:00:cb:b4:60:7e:c7:4f:7b:1a:c5:3c:96:dd:
6e:e0:6e:f7:2d:f8:ef:85:b5:74:bc:05:c3:7d:4e:
a8:34:4b:3a:02:45:a8:96:4e:c8:c0:ad:ef:9e:52:
d5:f7:01:4a:fc:2a:31:08:bf:06:10:54:bd:c0:5c:
c1:28:6f:a2:11:5d:bd:9f:00:e7:8b:cd:45:8b:5b:
5b:2a:08:c7:dc:1f:b5:d9:1b:61:6e:0f:0b:86:3a:
8e:ee:f6:9f:7a:55:2a:3c:cb:7c:23:ff:93:61:50:
05:82:a1:6d:16:d0:90:ab:c5:28:1f:f3:a2:45:20:
38:1c:0e:23:ef:61:b3:ad:b5:a4:89:41:d6:9e:dd:
ad:c3:01:b4:28:14:aa:a4:c3:59:3d:c5:89:02:33:
9b:35:00:a0:f3:89:21:80:32:e6:b0:34:89:fc:7f:
75:e8:f8:73:a4:66:0b:84:e5:3a:7a:a3:b2:d5:d9:
5f:b5:83:a3:76:28:82:85:fe:be:82:c8:f9:74:cb:
c5:0a:e0:f3:4d:12:08:58:68:c3:df:61:f3:49:95:
86:74:1c:d4:3c:8e:2b:c2:7b:5b:a9:d4:a7:cf:06:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:44:A6:1E:7C:84:1C:34:9C:58:6E:BC:7D:C4:65:A8:D4:E0:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C99E208477E11F0B169A0B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9e:0d:65:ad:ab:92:65:5a:70:fc:8e:8e:7a:aa:f9:4d:56:
13:23:4a:79:d8:ea:6b:e5:8f:33:b9:05:e4:ce:95:e3:cb:40:
ff:98:74:1a:11:e9:01:67:bf:47:02:f5:30:9b:ee:46:02:e6:
01:fc:4c:1a:fd:a2:08:af:b0:f6:8e:8b:7c:7c:20:18:b3:b3:
39:3a:8c:c1:ce:e4:32:dd:29:d9:05:0c:8a:61:00:87:25:99:
ef:37:29:92:2b:84:95:29:de:84:74:3e:97:dc:66:2b:f1:10:
8d:8d:4d:24:31:8e:34:96:68:a5:82:76:33:16:8b:d8:4b:1f:
3d:32:10:0d:a1:b0:61:ee:36:80:79:52:78:da:c0:32:97:6a:
4a:06:77:39:50:09:db:e2:95:1e:3c:46:78:9f:67:68:58:85:
28:90:d6:0e:ab:8c:9a:3b:60:1b:1f:51:2e:28:0f:e0:9d:ab:
72:6e:0a:bb:a0:08:10:67:55:d7:92:49:9b:ba:27:7c:fa:7f:
ff:8e:99:8f:c8:68:c2:98:57:b8:9a:14:1e:92:3e:b0:1a:d0:
8c:d3:17:5f:eb:7d:0c:20:9e:61:dc:9a:74:7c:8e:8f:cf:a7:
3a:ad:a2:d0:43:2e:75:d8:53:2d:15:25:e5:1c:bd:3b:a0:d6:
97:21:48:69
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVtrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEyMTExNTI1WhcNMjUwNzE5MTExNTI1WjAYMRYw
FAYDVQQDEw02ODRhYjZkMi0zNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoqFCpzATXRBU/0wJK+w0bwsG+Tp8nqCeO30QHtvhOwDLtGB+x097GsU8
lt1u4G73LfjvhbV0vAXDfU6oNEs6AkWolk7IwK3vnlLV9wFK/CoxCL8GEFS9wFzB
KG+iEV29nwDni81Fi1tbKgjH3B+12Rthbg8LhjqO7vafelUqPMt8I/+TYVAFgqFt
FtCQq8UoH/OiRSA4HA4j72GzrbWkiUHWnt2twwG0KBSqpMNZPcWJAjObNQCg84kh
gDLmsDSJ/H916PhzpGYLhOU6eqOy1dlftYOjdiiChf6+gsj5dMvFCuDzTRIIWGjD
32HzSZWGdBzUPI4rwntbqdSnzwZ8LQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPbV
RKYefIQcNJxYbrx9xGWo1OCGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84Qzk5RTIwODQ3N0UxMUYwQjE2OUEwQjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpEMA0GCSqGSIb3DQEBCwUA
A4IBAQBlng1lrauSZVpw/I6Oeqr5TVYTI0p52Opr5Y8zuQXkzpXjy0D/mHQaEekB
Z79HAvUwm+5GAuYB/Ewa/aIIr7D2jot8fCAYs7M5OozBzuQy3SnZBQyKYQCHJZnv
NymSK4SVKd6EdD6X3GYr8RCNjU0kMY40lmilgnYzFovYSx89MhANobBh7jaAeVJ4
2sAyl2pKBnc5UAnb4pUePEZ4n2doWIUokNYOq4yaO2AbH1EuKA/gnatybgq7oAgQ
Z1XXkkmbuid8+n//jpmPyGjCmFe4mhQekj6wGtCM0xdf630MIJ5h3Jp0fI6Pz6c6
raLQQy512FMtFSXlHL07oNaXIUhp
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:30:27 2025 by rpki-client