Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/567E9DD25CE911F09072A3A9DAE4EC9C.roa
File: 567E9DD25CE911F09072A3A9DAE4EC9C.roa (raw, json)
Hash identifier: wJYDs0fbnCQcAYs8mLrHGfcAnfkZ9zgTcX11k0PpVxI=
Subject key identifier: C8:2A:BC:F0:61:31:C9:4C:52:E9:96:75:B1:C7:6F:34:FC:79:80:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016428
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/567E9DD25CE911F09072A3A9DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 17:22:50 +0000
ROA not before: Wed 09 Jul 2025 17:22:44 +0000
ROA not after: Fri 15 Aug 2025 17:22:44 +0000
asID: 54801
IP address blocks: 45.194.85.0/24 maxlen: 24
45.195.60.0/24 maxlen: 24
45.195.192.0/24 maxlen: 24
45.195.196.0/24 maxlen: 24
45.195.197.0/24 maxlen: 24
45.197.1.0/24 maxlen: 24
45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91176 (0x16428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 17:22:44 2025 GMT
Not After : Aug 15 17:22:44 2025 GMT
Subject: CN=686ea56a-4e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:80:7c:1e:0a:50:7b:db:e7:01:ff:57:de:
cc:41:5c:90:08:67:a9:a3:ca:eb:01:69:9e:15:f4:
52:80:5d:59:53:1f:6e:e0:8a:a8:2c:93:ac:02:78:
ac:6e:a8:84:fb:fc:51:f2:32:12:9c:38:1d:42:cc:
f0:d3:23:48:bf:c4:05:af:7d:11:32:0a:a2:54:3c:
f8:1f:6b:5b:69:05:c7:1d:44:cb:1d:22:05:ae:d7:
d5:e3:e0:ef:5a:5c:12:57:fc:9d:2d:a6:98:49:77:
03:f9:12:f5:c8:54:55:1a:20:e1:a9:33:b1:47:81:
b5:5c:32:ea:cb:06:0d:b0:ce:96:fa:93:34:a5:6c:
a3:7d:2b:3d:e2:54:6a:78:00:9f:e9:4a:2a:b3:f9:
39:76:83:ff:41:74:38:9b:75:bf:98:e9:a1:34:7c:
c7:cb:9e:e9:96:9d:be:3d:cf:17:d4:6c:4c:a9:36:
51:de:64:62:e8:89:d6:5f:f3:ce:8e:72:ed:8e:32:
52:3c:08:96:be:dd:6e:fa:48:71:ae:32:6e:ed:5c:
3b:85:78:4d:88:1f:23:a8:0b:df:7b:2d:7c:02:bb:
2b:1b:42:40:88:7c:17:9d:23:cb:8c:dd:4d:1f:75:
a0:5c:15:1f:31:8d:8e:25:d2:a9:75:68:97:f1:bf:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2A:BC:F0:61:31:C9:4C:52:E9:96:75:B1:C7:6F:34:FC:79:80:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/567E9DD25CE911F09072A3A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.195.60.0/24
45.195.192.0/24
45.195.196.0/23
45.197.1.0-45.197.2.255
45.197.4.0/23
45.199.191.0/24
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
25:79:3a:6b:27:b7:dd:74:5f:22:ec:19:f6:1f:21:93:77:1c:
e6:70:32:7a:b2:e5:17:9d:fe:75:63:91:46:38:e1:99:c5:04:
f1:16:24:f2:e1:d7:a2:ff:45:d0:13:df:fa:65:f1:da:8e:58:
77:7b:37:f9:56:86:f6:ba:e9:08:75:2c:69:70:26:03:0a:fd:
c5:2a:b3:29:dc:6b:81:79:54:5e:07:58:33:7f:8f:dc:52:5e:
bd:7c:8d:7c:c3:58:00:21:f4:62:c8:f9:33:07:a3:4e:2a:c7:
84:b1:45:8c:38:26:13:d3:1e:c2:68:e2:46:c1:e8:e9:7a:25:
2f:89:d4:da:60:5e:4e:e0:ef:71:26:1a:04:7f:ce:cd:09:16:
a1:b8:5f:b5:e0:88:46:a9:9c:27:cc:b3:6f:29:ce:9d:5b:22:
12:5e:9b:0d:cf:af:45:de:a1:3b:c1:9a:27:6f:35:d8:05:3a:
a3:fb:99:76:2a:36:58:0a:19:88:53:ef:77:3b:2d:33:d6:14:
6f:24:a7:5f:f6:5c:3d:31:18:a7:05:9e:e2:42:a8:0d:b1:f7:
04:53:8a:1f:db:1d:2e:e5:f6:f6:c8:42:63:33:66:8e:eb:3c:
c1:c0:4a:c9:74:8a:61:b3:57:d7:3f:02:70:17:9b:13:fb:10:
25:15:d2:a0
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIDAWQoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA5MTcyMjQ0WhcNMjUwODE1MTcyMjQ0WjAYMRYw
FAYDVQQDEw02ODZlYTU2YS00ZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwiOAfB4KUHvb5wH/V97MQVyQCGepo8rrAWmeFfRSgF1ZUx9u4IqoLJOs
AnisbqiE+/xR8jISnDgdQszw0yNIv8QFr30RMgqiVDz4H2tbaQXHHUTLHSIFrtfV
4+DvWlwSV/ydLaaYSXcD+RL1yFRVGiDhqTOxR4G1XDLqywYNsM6W+pM0pWyjfSs9
4lRqeACf6Uoqs/k5doP/QXQ4m3W/mOmhNHzHy57plp2+Pc8X1GxMqTZR3mRi6InW
X/POjnLtjjJSPAiWvt1u+khxrjJu7Vw7hXhNiB8jqAvfey18ArsrG0JAiHwXnSPL
jN1NH3WgXBUfMY2OJdKpdWiX8b8qvQIDAQABo4IC8jCCAu4wHQYDVR0OBBYEFMgq
vPBhMclMUumWdbHHbzT8eYAcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NjdFOUREMjVDRTkxMUYwOTA3MkEzQTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQALcJVAwQALcM8AwQALcPAAwQB
LcPEMAwDBAAtxQEDBAAtxQIDBAEtxQQDBAAtx78DBAItyggDBAAtyj8DBAAtzAED
BAAtzEADBAAtzEcDBAAtz6MwDQYJKoZIhvcNAQELBQADggEBACV5Omsnt910XyLs
GfYfIZN3HOZwMnqy5Red/nVjkUY44ZnFBPEWJPLh16L/RdAT3/pl8dqOWHd7N/lW
hva66Qh1LGlwJgMK/cUqsynca4F5VF4HWDN/j9xSXr18jXzDWAAh9GLI+TMHo04q
x4SxRYw4JhPTHsJo4kbB6Ol6JS+J1NpgXk7g73EmGgR/zs0JFqG4X7XgiEapnCfM
s28pzp1bIhJemw3Pr0XeoTvBmidvNdgFOqP7mXYqNlgKGYhT73c7LTPWFG8kp1/2
XD0xGKcFnuJCqA2x9wRTih/bHS7l9vbIQmMzZo7rPMHASsl0imGzV9c/AnAXmxP7
ECUV0qA=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:49:46 2025 by rpki-client