Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A579413EB32511F096E01CBEDAE4EC9C.roa
File: A579413EB32511F096E01CBEDAE4EC9C.roa (raw, json)
Hash identifier: fjldxpJYIRFbqLn26mEkiG2FT0DsJe63NpRKQQHo+XI=
Subject key identifier: A7:06:DB:A2:A2:03:47:A3:33:C1:2B:B6:2F:32:6D:8B:36:76:87:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A579413EB32511F096E01CBEDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 11:11:12 +0000
ROA not before: Mon 27 Oct 2025 11:11:07 +0000
ROA not after: Mon 01 Dec 2025 11:11:07 +0000
asID: 44559
IP address blocks: 45.192.253.0/24 maxlen: 24
45.192.254.0/24 maxlen: 24
45.192.255.0/24 maxlen: 24
45.195.96.0/24 maxlen: 24
45.195.97.0/24 maxlen: 24
45.195.98.0/24 maxlen: 24
45.195.99.0/24 maxlen: 24
45.195.100.0/24 maxlen: 24
45.195.101.0/24 maxlen: 24
45.195.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99037 (0x182dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 11:11:07 2025 GMT
Not After : Dec 1 11:11:07 2025 GMT
Subject: CN=68ff5350-e35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:73:a3:2c:84:52:97:cb:3d:75:e8:00:75:
6b:98:76:a8:e7:02:a1:2f:99:91:3c:2b:68:c1:24:
29:a7:b6:e7:7b:1e:c9:1c:52:6f:c0:56:b8:03:66:
ec:8d:7e:ca:da:c5:75:9c:e1:db:b9:91:9e:b6:49:
d7:6f:ba:cd:0b:f5:ef:0e:81:98:47:b5:a7:7e:3d:
de:29:44:82:d7:0b:fa:e0:78:81:f3:91:d8:ff:76:
4c:3e:83:d0:5c:28:13:1c:cc:a6:fe:eb:e0:0b:0b:
2e:0a:c1:cf:af:8f:20:ee:22:e7:8c:e2:7d:31:b9:
03:f1:7f:00:b1:8e:0c:72:b0:11:fc:f2:25:65:17:
5c:b0:c6:90:33:92:b2:fc:d9:37:b9:86:4b:38:f6:
ab:91:9b:11:86:af:5d:34:4a:76:e2:27:e9:11:a4:
ce:39:68:6f:f4:9d:8f:1f:bb:24:6f:50:20:b0:91:
8e:b1:b1:93:f7:11:4f:49:0e:10:cf:c8:fa:a2:fc:
cc:01:d6:d0:ee:ac:28:a2:c5:a9:71:66:85:ef:87:
33:4e:77:ba:ab:de:f9:c6:89:fe:fb:ca:03:55:4c:
e2:12:2a:51:cc:c8:9c:54:3a:77:f8:8d:84:fd:e0:
99:47:1d:6c:20:f8:96:96:07:8c:c0:44:b9:dd:61:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:06:DB:A2:A2:03:47:A3:33:C1:2B:B6:2F:32:6D:8B:36:76:87:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A579413EB32511F096E01CBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.253.0-45.192.255.255
45.195.96.0-45.195.102.255
Signature Algorithm: sha256WithRSAEncryption
09:85:a5:c1:fa:f9:22:5a:c4:75:80:aa:25:1e:1e:f3:c3:17:
47:32:77:c5:f6:5e:ac:e3:ba:d2:b9:0b:62:c8:20:85:45:34:
e0:50:b8:9d:4d:f3:4f:13:29:ef:56:af:8f:bb:68:82:dc:49:
74:10:84:89:57:60:b1:8e:18:3d:b8:7e:9c:64:96:87:62:7b:
37:da:9b:31:ab:10:68:cd:57:6f:0f:b7:fd:00:a7:cd:69:b8:
e9:9b:51:9b:4c:7a:52:92:35:6e:94:f8:d9:a1:8a:4c:33:32:
59:43:ba:b2:73:c1:92:87:1c:f9:b1:04:3d:77:e9:e8:c6:c3:
de:9e:bd:4e:a3:1a:f9:da:72:d1:df:bd:17:25:a4:56:83:1a:
65:28:76:d8:90:d4:82:21:ec:1e:cc:7d:d8:46:a3:bf:31:8e:
5b:aa:15:79:6b:75:86:f5:60:17:bd:e0:c9:16:be:d6:48:13:
d7:28:b8:86:7a:61:a5:04:76:f7:fc:63:9b:37:0d:2d:f7:fe:
19:a9:68:ed:51:83:6b:bf:58:73:80:7e:3e:e4:57:ab:54:73:
98:c9:b2:81:b2:22:a2:49:83:90:63:ad:23:fe:07:40:a6:35:
69:cd:54:c4:fd:69:d4:0d:18:db:eb:98:ee:22:ad:37:34:6d:
24:9d:7c:4d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAYLdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI3MTExMTA3WhcNMjUxMjAxMTExMTA3WjAYMRYw
FAYDVQQDEw02OGZmNTM1MC1lMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv0pzoyyEUpfLPXXoAHVrmHao5wKhL5mRPCtowSQpp7bnex7JHFJvwFa4
A2bsjX7K2sV1nOHbuZGetknXb7rNC/XvDoGYR7Wnfj3eKUSC1wv64HiB85HY/3ZM
PoPQXCgTHMym/uvgCwsuCsHPr48g7iLnjOJ9MbkD8X8AsY4McrAR/PIlZRdcsMaQ
M5Ky/Nk3uYZLOParkZsRhq9dNEp24ifpEaTOOWhv9J2PH7skb1AgsJGOsbGT9xFP
SQ4Qz8j6ovzMAdbQ7qwoosWpcWaF74czTne6q975xon++8oDVUziEipRzMicVDp3
+I2E/eCZRx1sIPiWlgeMwES53WF7yQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFKcG
26KiA0ejM8Erti8ybYs2doeaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNTc5NDEzRUIzMjUxMUYwOTZFMDFDQkVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDBAAtwP0DAwAtwDAMAwQFLcNg
AwQALcNmMA0GCSqGSIb3DQEBCwUAA4IBAQAJhaXB+vkiWsR1gKolHh7zwxdHMnfF
9l6s47rSuQtiyCCFRTTgULidTfNPEynvVq+Pu2iC3El0EISJV2Cxjhg9uH6cZJaH
Yns32psxqxBozVdvD7f9AKfNabjpm1GbTHpSkjVulPjZoYpMMzJZQ7qyc8GShxz5
sQQ9d+noxsPenr1Ooxr52nLR370XJaRWgxplKHbYkNSCIewezH3YRqO/MY5bqhV5
a3WG9WAXveDJFr7WSBPXKLiGemGlBHb3/GObNw0t9/4ZqWjtUYNrv1hzgH4+5Fer
VHOYybKBsiKiSYOQY60j/gdApjVpzVTE/WnUDRjb65juIq03NG0knXxN
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:09 2025 by rpki-client