Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32DB719659B711F09137D4DBDAE4EC9C.roa
File: 32DB719659B711F09137D4DBDAE4EC9C.roa (raw, json)
Hash identifier: gB8lySl8yaXB/nq+GpXLVCzUq/ZK8u12kRHWF/4daTk=
Subject key identifier: 0F:59:DD:2D:77:8F:C1:1E:62:EA:3D:06:7E:F7:09:5E:0F:5A:2A:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32DB719659B711F09137D4DBDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 15:46:22 +0000
ROA not before: Sat 05 Jul 2025 15:46:17 +0000
ROA not after: Sat 30 Aug 2025 15:46:17 +0000
asID: 398443
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90565 (0x161c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 15:46:17 2025 GMT
Not After : Aug 30 15:46:17 2025 GMT
Subject: CN=686948ce-1c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:d2:9b:cf:45:10:2f:da:66:d5:90:45:97:
bb:34:47:22:34:7b:b5:0a:d2:cb:83:70:4e:80:0c:
0a:b5:d3:08:f0:40:fd:83:13:ac:41:a9:11:28:15:
89:c9:d6:18:48:1a:fc:81:84:be:cb:5c:17:36:b3:
a1:f6:e2:81:a9:a0:bc:e7:0b:53:71:91:d0:6d:1a:
90:bb:43:58:75:47:19:81:e5:13:80:bd:39:f2:b7:
22:05:b5:0b:2d:a8:69:54:65:e4:ae:b9:fd:6d:e0:
cf:e1:27:fa:0a:a5:7e:a1:2c:a4:1b:b9:63:43:e3:
c6:88:a9:63:f3:2d:9a:0a:b8:78:47:57:b0:93:9d:
4f:d4:87:b7:e3:f4:bf:51:bc:d5:9d:ee:7c:8a:70:
cc:77:2e:0b:16:5f:18:98:a3:7b:e7:da:f5:65:a3:
d3:76:09:e5:2e:ca:61:2b:5a:a3:ce:ac:0c:11:35:
67:28:c8:0a:78:9c:3c:7e:a0:22:e0:fb:d0:dd:4d:
aa:ac:90:1e:e0:9c:90:bc:ef:7c:17:2e:03:6d:9e:
6f:00:74:e1:cc:be:3a:52:e2:77:d3:5a:32:21:ff:
df:e1:17:7c:74:89:be:66:aa:a0:d5:d3:87:d3:b4:
04:28:af:f6:9b:87:9d:f8:8f:9a:b0:15:17:b9:6d:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:59:DD:2D:77:8F:C1:1E:62:EA:3D:06:7E:F7:09:5E:0F:5A:2A:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32DB719659B711F09137D4DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
45:18:29:82:7f:2a:7b:69:da:b0:83:99:ab:f8:a0:b5:40:b2:
00:38:21:06:d3:1b:7b:8d:04:b3:4c:e5:43:24:c3:a3:fd:1a:
48:ee:33:56:fd:05:e8:06:ff:6c:42:db:ad:78:af:7b:55:a8:
ef:1c:9a:87:cb:92:ca:0a:73:46:9e:42:a3:6e:0d:f4:05:2f:
28:8e:de:5e:e3:0c:21:aa:90:04:50:84:99:03:fc:bc:18:c9:
cb:01:23:75:b2:65:b4:dc:22:84:2f:02:67:28:86:ff:ff:00:
73:aa:b5:a7:90:ec:c6:b1:9a:66:af:b9:49:9d:7b:a4:a4:9c:
a0:38:95:7f:6d:1b:0f:c3:04:f2:2e:2a:ed:db:10:03:36:90:
dc:be:d5:65:89:3c:2e:e6:4a:29:19:af:39:d9:50:eb:52:60:
10:cb:6a:f0:b4:c0:54:1a:3c:ab:42:72:89:34:c5:e8:d0:16:
c7:cc:d0:73:dc:98:19:b9:c3:47:e7:01:d5:0b:8b:e3:d2:13:
16:bb:d0:b8:df:c0:fe:29:82:49:68:51:09:60:8c:a2:c3:aa:
6b:5e:bb:5d:2b:51:02:00:d4:2d:e6:25:99:33:41:3e:32:7f:
49:28:a5:41:05:03:5b:5a:fc:08:03:53:f1:b6:1c:62:9d:bd:
2e:58:09:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWHFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA1MTU0NjE3WhcNMjUwODMwMTU0NjE3WjAYMRYw
FAYDVQQDEw02ODY5NDhjZS0xYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq53Sm89FEC/aZtWQRZe7NEciNHu1CtLLg3BOgAwKtdMI8ED9gxOsQakR
KBWJydYYSBr8gYS+y1wXNrOh9uKBqaC85wtTcZHQbRqQu0NYdUcZgeUTgL058rci
BbULLahpVGXkrrn9beDP4Sf6CqV+oSykG7ljQ+PGiKlj8y2aCrh4R1ewk51P1Ie3
4/S/UbzVne58inDMdy4LFl8YmKN759r1ZaPTdgnlLsphK1qjzqwMETVnKMgKeJw8
fqAi4PvQ3U2qrJAe4JyQvO98Fy4DbZ5vAHThzL46UuJ301oyIf/f4Rd8dIm+Zqqg
1dOH07QEKK/2m4ed+I+asBUXuW2o7QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA9Z
3S13j8EeYuo9Bn73CV4PWioxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMkRCNzE5NjU5QjcxMUYwOTEzN0Q0REJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQBFGCmCfyp7adqwg5mr+KC1QLIAOCEG0xt7jQSzTOVDJMOj/RpI7jNW/QXo
Bv9sQtuteK97VajvHJqHy5LKCnNGnkKjbg30BS8ojt5e4wwhqpAEUISZA/y8GMnL
ASN1smW03CKELwJnKIb//wBzqrWnkOzGsZpmr7lJnXukpJygOJV/bRsPwwTyLirt
2xADNpDcvtVliTwu5kopGa852VDrUmAQy2rwtMBUGjyrQnKJNMXo0BbHzNBz3JgZ
ucNH5wHVC4vj0hMWu9C438D+KYJJaFEJYIyiw6prXrtdK1ECANQt5iWZM0E+Mn9J
KKVBBQNbWvwIA1Pxthxinb0uWAm3
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:54 2025 by rpki-client