Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525D303C5CDB11F0B4A88CD0DAE4EC9C.roa
File: 525D303C5CDB11F0B4A88CD0DAE4EC9C.roa (raw, json)
Hash identifier: 1FBlmpPD80SB4nOBvwOpzUhJu9PeVDNQCfVO3NUFQXY=
Subject key identifier: C4:0B:CE:01:5C:4D:39:62:C4:7E:27:69:FF:EF:AC:0A:2F:0D:D1:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016414
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525D303C5CDB11F0B4A88CD0DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 15:42:30 +0000
ROA not before: Wed 09 Jul 2025 15:42:25 +0000
ROA not after: Sat 16 Aug 2025 15:42:25 +0000
asID: 40779
IP address blocks: 45.192.96.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91156 (0x16414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 15:42:25 2025 GMT
Not After : Aug 16 15:42:25 2025 GMT
Subject: CN=686e8de6-02ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:cc:a8:68:b6:27:7c:fd:60:fd:fc:8a:0d:
59:76:e9:3a:41:7a:71:38:14:e7:25:41:11:79:93:
4a:a9:68:25:55:28:3e:d5:6a:f4:cf:1d:c3:4d:e9:
5c:80:3c:61:e9:3a:33:de:ab:75:9b:d2:40:18:c1:
7c:1c:06:59:ba:ea:03:85:de:56:77:96:1a:38:4b:
1c:75:d9:d3:66:15:65:f5:ba:1c:f8:29:0a:6d:72:
83:a1:10:1e:9c:33:76:1f:cd:f1:fb:b0:f3:53:3b:
db:44:b8:f7:4f:15:60:f3:be:bd:15:cb:c8:27:18:
11:ff:a5:be:7a:de:a5:32:7e:37:df:de:80:2d:e6:
46:15:70:33:a0:3e:38:5c:de:f4:66:6e:64:ab:de:
37:bd:c7:7d:14:c3:14:b2:8a:08:7e:94:95:61:db:
e3:18:c4:79:56:83:c5:72:9c:2d:99:ac:f5:16:1c:
36:9b:7f:04:72:47:73:06:45:bd:8c:cd:ac:ab:83:
00:95:84:97:e1:d9:dd:11:58:ac:9b:37:ed:95:29:
e2:19:87:79:aa:f4:29:db:96:61:4f:6a:a6:9f:f0:
04:fc:8d:c2:be:38:db:6b:d8:f6:38:1b:64:8a:40:
85:25:c9:3f:7d:5c:78:50:4c:3c:0f:9d:02:92:74:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:CE:01:5C:4D:39:62:C4:7E:27:69:FF:EF:AC:0A:2F:0D:D1:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525D303C5CDB11F0B4A88CD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:22:2d:49:81:50:fe:bb:a2:49:38:ea:81:e8:2e:33:00:3e:
bf:b2:86:b4:e0:38:93:dc:3f:8c:eb:75:93:08:fe:bd:b0:0c:
93:24:38:0c:fb:97:dc:f2:c3:85:8a:2b:87:90:0b:b8:d9:a2:
14:dd:cd:a0:b8:c3:e6:df:56:03:9c:0a:b0:5f:fc:1a:58:4f:
b5:89:b1:0e:f0:63:c0:72:4d:82:7e:29:df:fa:ac:c6:1e:6d:
c1:c6:d9:c2:02:40:13:7e:54:56:2d:83:ac:96:46:7f:d1:7c:
1d:6c:7a:46:8a:40:90:b0:a8:13:7b:b9:8c:28:72:2e:86:4f:
0c:d0:9d:b7:3a:e3:52:66:d8:88:6f:0f:3d:de:87:c4:f0:b1:
f1:6f:5b:6b:99:e9:ed:de:f1:74:fb:31:04:26:f6:b2:de:c4:
c8:7b:5e:44:30:9d:d2:de:54:b3:4d:93:ae:72:bc:2a:3f:b7:
a9:29:eb:4b:b2:ad:2c:c1:4d:6c:fb:10:b1:08:73:e4:67:71:
e2:8e:18:8f:cc:6c:ca:8a:08:7d:82:c1:dd:13:aa:c7:b2:f2:
f6:94:50:d5:55:b3:16:8c:51:83:19:13:0e:4f:f8:c2:5b:44:
93:70:b7:5c:19:b4:b0:02:33:e9:a4:88:d6:96:19:d2:cd:c4:
1c:40:75:4e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWQUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA5MTU0MjI1WhcNMjUwODE2MTU0MjI1WjAYMRYw
FAYDVQQDEw02ODZlOGRlNi0wMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmCzMqGi2J3z9YP38ig1Zduk6QXpxOBTnJUEReZNKqWglVSg+1Wr0zx3D
TelcgDxh6Toz3qt1m9JAGMF8HAZZuuoDhd5Wd5YaOEscddnTZhVl9boc+CkKbXKD
oRAenDN2H83x+7DzUzvbRLj3TxVg8769FcvIJxgR/6W+et6lMn43396ALeZGFXAz
oD44XN70Zm5kq943vcd9FMMUsooIfpSVYdvjGMR5VoPFcpwtmaz1Fhw2m38Eckdz
BkW9jM2sq4MAlYSX4dndEVismzftlSniGYd5qvQp25ZhT2qmn/AE/I3Cvjjba9j2
OBtkikCFJck/fVx4UEw8D50CknSbKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQL
zgFcTTlixH4naf/vrAovDdGIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MjVEMzAzQzVDREIxMUYwQjRBODhDRDBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcBgAwQFLc/AMA0GCSqGSIb3
DQEBCwUAA4IBAQCwIi1JgVD+u6JJOOqB6C4zAD6/soa04DiT3D+M63WTCP69sAyT
JDgM+5fc8sOFiiuHkAu42aIU3c2guMPm31YDnAqwX/waWE+1ibEO8GPAck2Cfinf
+qzGHm3BxtnCAkATflRWLYOslkZ/0XwdbHpGikCQsKgTe7mMKHIuhk8M0J23OuNS
ZtiIbw893ofE8LHxb1trment3vF0+zEEJvay3sTIe15EMJ3S3lSzTZOucrwqP7ep
KetLsq0swU1s+xCxCHPkZ3HijhiPzGzKigh9gsHdE6rHsvL2lFDVVbMWjFGDGRMO
T/jCW0STcLdcGbSwAjPppIjWlhnSzcQcQHVO
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:51 2025 by rpki-client