Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/292DB0E6692011F0A6FE3EA2DAE4EC9C.roa
File: 292DB0E6692011F0A6FE3EA2DAE4EC9C.roa (raw, json)
Hash identifier: XsuVjMriLtn7uDt7G55shjnz2DMTbDpDdF/rBEVLDeA=
Subject key identifier: CE:3E:C1:77:FD:6E:34:20:44:52:2C:66:11:F4:12:FA:9E:C6:2E:E4
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 05B1
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/292DB0E6692011F0A6FE3EA2DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 06:25:30 +0000
ROA not before: Fri 25 Jul 2025 06:25:25 +0000
ROA not after: Tue 10 Feb 2026 06:25:25 +0000
asID: 207184
IP address blocks: 45.221.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jul 25 06:25:25 2025 GMT
Not After : Feb 10 06:25:25 2026 GMT
Subject: CN=6883235a-4f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:f6:9d:0d:3e:51:b6:61:97:15:be:f1:d4:
f6:fb:14:07:bf:ac:b4:ec:52:53:b3:06:4c:59:1d:
a8:69:46:d2:0c:16:5f:03:86:8e:37:99:89:b8:af:
4b:74:83:b4:f5:62:47:a3:de:10:fc:8a:df:63:f9:
4a:46:01:5b:9f:ea:b6:2c:90:7c:18:18:60:5b:32:
dd:e8:45:19:34:92:f3:b4:bb:b8:ba:0a:04:d0:cf:
8a:52:ca:60:84:d3:92:b3:3c:f5:89:9b:da:98:b2:
9f:1a:b6:42:4e:8d:b5:5f:22:51:a8:fe:71:a2:1d:
4c:2d:96:3e:a7:66:8f:a4:1e:da:ce:88:3b:69:78:
68:cd:53:1a:ba:9d:6d:be:1a:04:20:b8:50:19:47:
db:92:6a:8a:f2:6d:79:b0:ea:52:23:6e:de:b3:15:
c4:dd:fd:f8:37:3a:c7:a7:fd:00:dc:8c:47:36:e3:
2f:df:e6:ea:23:80:41:4a:5f:20:36:b3:b9:25:f3:
64:6f:dd:79:40:c2:83:8a:b5:dc:51:91:54:95:d2:
c2:2f:5c:2b:2e:fe:76:f0:45:9a:40:53:f1:5c:e4:
3b:46:f1:87:71:2b:f8:e7:82:ea:67:f4:e4:f3:a9:
7b:f6:7c:98:3e:d7:8a:38:55:2d:56:be:19:6a:17:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:C1:77:FD:6E:34:20:44:52:2C:66:11:F4:12:FA:9E:C6:2E:E4
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/292DB0E6692011F0A6FE3EA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5d:bb:a6:d4:e3:db:6e:33:45:be:db:70:22:73:19:30:ea:
45:2b:72:78:e5:9d:60:c2:b4:fb:85:be:71:eb:42:01:64:e2:
17:be:df:71:88:b4:2e:6f:41:03:3b:0b:57:3c:9b:c0:85:68:
d4:73:f3:c7:89:57:b3:41:c8:5f:24:92:2e:23:a1:62:43:de:
7f:a2:b3:0d:03:e9:c0:b0:19:4b:15:fa:70:33:7b:c1:e1:0a:
e4:18:d3:93:4f:89:07:0d:f0:7f:3c:8d:44:ab:f5:14:0a:76:
e6:b6:ab:c5:1c:97:5e:72:85:7f:09:86:0d:86:ec:da:19:16:
3d:8a:3e:73:c8:31:2e:4c:db:10:a3:a9:db:f2:ff:39:99:b1:
28:b1:b8:c2:0c:1d:af:64:d9:55:59:1c:92:05:92:84:fa:07:
0b:e3:5e:a1:8a:83:54:df:fd:a1:5f:fc:9e:83:f5:47:57:ae:
ba:d2:f5:7d:ff:74:65:5c:ba:25:9d:21:3a:d7:33:db:f7:16:
68:f1:3c:d6:da:c0:6e:cb:fb:06:77:e5:b7:8d:eb:66:a3:d4:
36:e9:01:9c:41:c4:24:17:f8:b7:7e:12:9e:95:c7:51:d5:ed:
bc:02:d7:10:d1:52:c4:a3:7b:ef:a5:46:13:dc:34:83:39:16:
bf:2b:1a:da
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTA3MjUwNjI1MjVaFw0yNjAyMTAwNjI1MjVaMBgxFjAU
BgNVBAMTDTY4ODMyMzVhLTRmM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIw/adDT5RtmGXFb7x1Pb7FAe/rLTsUlOzBkxZHahpRtIMFl8Dho43mYm4
r0t0g7T1Ykej3hD8it9j+UpGAVuf6rYskHwYGGBbMt3oRRk0kvO0u7i6CgTQz4pS
ymCE05KzPPWJm9qYsp8atkJOjbVfIlGo/nGiHUwtlj6nZo+kHtrOiDtpeGjNUxq6
nW2+GgQguFAZR9uSaorybXmw6lIjbt6zFcTd/fg3Osen/QDcjEc24y/f5uojgEFK
XyA2s7kl82Rv3XlAwoOKtdxRkVSV0sIvXCsu/nbwRZpAU/Fc5DtG8YdxK/jngupn
9OTzqXv2fJg+14o4VS1WvhlqFxlbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzj7B
d/1uNCBEUixmEfQS+p7GLuQwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3LzI5MkRCMEU2NjkyMDExRjBBNkZFM0VBMkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UMwDQYJKoZIhvcNAQELBQAD
ggEBAE1du6bU49tuM0W+23Aicxkw6kUrcnjlnWDCtPuFvnHrQgFk4he+33GItC5v
QQM7C1c8m8CFaNRz88eJV7NByF8kki4joWJD3n+isw0D6cCwGUsV+nAze8HhCuQY
05NPiQcN8H88jUSr9RQKdua2q8Ucl15yhX8Jhg2G7NoZFj2KPnPIMS5M2xCjqdvy
/zmZsSixuMIMHa9k2VVZHJIFkoT6BwvjXqGKg1Tf/aFf/J6D9UdXrrrS9X3/dGVc
uiWdITrXM9v3FmjxPNbawG7L+wZ35beN62aj1DbpAZxBxCQX+Ld+Ep6Vx1HV7bwC
1xDRUsSje++lRhPcNIM5Fr8rGto=
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:54 2025 by rpki-client