Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E087281449D911F0BED08D9ADAE4EC9C.roa
File: E087281449D911F0BED08D9ADAE4EC9C.roa (raw, json)
Hash identifier: 3WTAdoDOpRgoHcob1/ZROUi2+I8T0HyiI1LBL6bMjrY=
Subject key identifier: 2E:8B:97:9B:CB:9D:B4:8F:2E:E2:BC:98:90:E0:EB:B3:8E:C7:F9:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C5C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E087281449D911F0BED08D9ADAE4EC9C.roa
Signing time: Sun 15 Jun 2025 11:14:18 +0000
ROA not before: Sun 15 Jun 2025 11:14:13 +0000
ROA not after: Sat 20 Jun 2026 11:14:13 +0000
asID: 140659
IP address blocks: 45.199.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89180 (0x15c5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 11:14:13 2025 GMT
Not After : Jun 20 11:14:13 2026 GMT
Subject: CN=684eab09-889f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:bb:e8:b6:44:13:38:bc:43:fc:38:36:ee:
48:f8:fe:09:a8:2b:ca:4e:50:32:b3:89:b5:d3:69:
d6:4d:34:53:f1:b9:aa:8e:96:37:e2:68:a7:5f:72:
f1:53:5b:9d:97:68:9d:5d:b5:dd:4f:92:f5:c8:aa:
ba:69:86:15:ee:d5:17:b2:e3:95:40:af:33:35:75:
90:28:fa:69:71:52:33:78:f8:1e:a5:14:b6:19:d0:
87:70:cf:fe:ce:19:29:5a:2f:7b:4e:e6:c8:8e:f9:
9a:8d:52:9b:82:18:3b:31:6e:ae:d4:d8:03:2d:f5:
9f:8a:90:ae:e2:d1:4b:eb:97:56:71:7d:51:b8:1e:
81:84:ee:87:e7:d5:3a:20:5e:40:f6:a7:2b:e2:7e:
b1:e9:9c:2b:44:d9:f9:24:b3:64:8a:40:f8:25:3f:
e9:3b:e8:d7:f9:8e:79:b4:ab:58:b7:3d:fc:2b:c8:
64:66:00:07:40:d2:ec:01:33:b3:f2:8c:68:a5:7b:
fe:cb:56:44:d1:17:e1:3f:12:54:db:f0:ba:59:2f:
cf:6a:33:3c:7a:5c:4e:85:72:43:d0:a1:f6:d8:44:
41:46:62:dc:24:e5:61:7a:47:dd:4c:15:61:ec:6f:
32:6d:19:de:7d:08:5a:a1:35:72:db:c2:6d:5d:7f:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:97:9B:CB:9D:B4:8F:2E:E2:BC:98:90:E0:EB:B3:8E:C7:F9:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E087281449D911F0BED08D9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.128.0/23
Signature Algorithm: sha256WithRSAEncryption
41:00:30:ee:92:44:7a:a9:36:d9:c4:c8:af:57:25:66:72:26:
9a:9d:dd:9d:90:c8:bc:31:c2:53:c1:33:27:bf:3b:e8:79:6f:
22:85:0e:ad:e2:c1:11:79:f1:78:0f:66:e0:80:57:55:d8:6e:
9e:b2:3e:cb:5d:50:69:c6:14:6d:2f:19:4f:6a:a2:d1:72:60:
86:ec:ad:c9:97:f6:dd:a0:82:7c:84:81:3a:65:55:3f:20:b1:
e4:69:76:bd:0e:45:4f:97:64:f3:a6:27:8c:c3:e9:12:04:ae:
c5:f8:25:bc:c0:cd:3a:0e:2d:af:a2:5a:b9:5d:a3:92:10:9f:
70:8f:6f:92:44:3b:08:0e:43:06:88:17:d7:e7:1b:93:01:08:
1b:ba:4a:5a:cc:7e:15:29:80:00:00:d6:c4:c1:99:9f:77:e1:
4e:6b:63:aa:54:26:85:4f:04:ef:67:45:bd:32:8c:47:a9:6b:
5b:cb:28:f5:8c:54:71:cd:7a:bb:8d:2b:0f:0d:c1:b5:b5:1c:
a0:fe:e4:e4:3d:14:a7:20:46:c4:1d:c4:49:17:79:c6:9b:9d:
2e:d2:fe:80:fa:f6:1a:af:f7:9a:a6:18:4d:64:6f:60:16:c2:
4d:9d:79:70:0c:ad:38:63:af:9b:e8:39:0f:a0:ae:35:c3:89:
dc:50:16:3d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVxcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE1MTExNDEzWhcNMjYwNjIwMTExNDEzWjAYMRYw
FAYDVQQDEw02ODRlYWIwOS04ODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4Ey76LZEEzi8Q/w4Nu5I+P4JqCvKTlAys4m102nWTTRT8bmqjpY34min
X3LxU1udl2idXbXdT5L1yKq6aYYV7tUXsuOVQK8zNXWQKPppcVIzePgepRS2GdCH
cM/+zhkpWi97TubIjvmajVKbghg7MW6u1NgDLfWfipCu4tFL65dWcX1RuB6BhO6H
59U6IF5A9qcr4n6x6ZwrRNn5JLNkikD4JT/pO+jX+Y55tKtYtz38K8hkZgAHQNLs
ATOz8oxopXv+y1ZE0RfhPxJU2/C6WS/PajM8elxOhXJD0KH22ERBRmLcJOVhekfd
TBVh7G8ybRnefQhaoTVy28JtXX+RswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC6L
l5vLnbSPLuK8mJDg67OOx/knMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMDg3MjgxNDQ5RDkxMUYwQkVEMDhEOUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLceAMA0GCSqGSIb3DQEBCwUA
A4IBAQBBADDukkR6qTbZxMivVyVmciaand2dkMi8McJTwTMnvzvoeW8ihQ6t4sER
efF4D2bggFdV2G6esj7LXVBpxhRtLxlPaqLRcmCG7K3Jl/bdoIJ8hIE6ZVU/ILHk
aXa9DkVPl2TzpieMw+kSBK7F+CW8wM06Di2volq5XaOSEJ9wj2+SRDsIDkMGiBfX
5xuTAQgbukpazH4VKYAAANbEwZmfd+FOa2OqVCaFTwTvZ0W9MoxHqWtbyyj1jFRx
zXq7jSsPDcG1tRyg/uTkPRSnIEbEHcRJF3nGm50u0v6A+vYar/eaphhNZG9gFsJN
nXlwDK04Y6+b6DkPoK41w4ncUBY9
-----END CERTIFICATE-----
Generated at Thu Jun 19 03:32:46 2025 by rpki-client