Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63CC9642609A11F0A0FAF889DAE4EC9C.roa
File: 63CC9642609A11F0A0FAF889DAE4EC9C.roa (raw, json)
Hash identifier: uwSOfQiAIcQHpLQcPx1u/wdG7ZT4uOu0afUdiLrOlks=
Subject key identifier: 3A:2A:75:34:AF:FB:4F:02:2F:07:99:56:4B:C1:C0:B4:94:41:28:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016506
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63CC9642609A11F0A0FAF889DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:07:47 +0000
ROA not before: Mon 14 Jul 2025 10:07:42 +0000
ROA not after: Wed 20 Aug 2025 10:07:42 +0000
asID: 174
IP address blocks: 45.195.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91398 (0x16506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:07:42 2025 GMT
Not After : Aug 20 10:07:42 2025 GMT
Subject: CN=6874d6f3-07ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:b0:eb:1c:a8:db:b1:29:13:99:69:ee:60:
d8:30:51:c5:2c:55:b8:26:fa:95:a1:a5:d6:b0:14:
5d:25:cc:fe:01:f3:61:18:1f:af:a6:19:41:d7:23:
5a:35:60:08:76:3c:29:82:49:75:88:38:e0:2a:0c:
59:57:b1:b9:6b:1c:ee:7c:8b:b8:e7:cc:d4:d1:f3:
8d:5e:5f:82:4e:4c:fd:5f:57:ce:05:49:02:71:32:
cf:fa:41:b1:ea:67:77:1a:0f:7e:00:2e:30:40:a6:
02:f0:0a:de:db:77:e2:e2:3a:50:68:b1:b9:1e:8d:
ab:06:f9:b0:70:f7:18:3f:22:2a:38:90:8c:a4:99:
79:a2:a1:92:16:c0:3a:8f:a0:4d:69:ee:ad:97:9d:
e9:e8:d7:8d:30:77:c4:4e:14:d4:6e:20:8e:cf:78:
be:ad:76:91:23:12:49:ed:fb:a7:2d:12:b3:7f:b1:
3b:88:bc:1a:02:c4:f7:4f:f7:18:41:47:4c:7a:04:
15:56:9b:ac:02:b2:ab:ca:b7:16:4d:fd:ce:36:88:
d5:28:6e:4c:71:5a:d2:bc:2e:e9:03:e4:fb:51:b5:
5b:9b:69:4e:e5:9d:56:35:ec:d1:46:d4:c3:f2:32:
7e:07:95:58:6f:72:0f:72:f5:1e:53:16:44:5e:06:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2A:75:34:AF:FB:4F:02:2F:07:99:56:4B:C1:C0:B4:94:41:28:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63CC9642609A11F0A0FAF889DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.244.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:cd:1f:bb:e5:8d:6f:c5:f7:ac:83:0e:df:f6:07:bd:4d:e0:
20:1a:0b:ec:9b:03:aa:8d:ba:6b:08:7d:fe:33:39:ba:26:59:
7b:58:c4:41:6d:92:dc:d1:1d:89:aa:0c:c0:1f:82:47:ac:e6:
17:ee:71:f3:da:f8:5f:a8:65:bc:9c:c9:0e:15:07:25:a0:f9:
1a:4c:e6:3f:51:89:d5:8c:a4:1a:28:51:99:2c:6b:ec:70:33:
b9:76:f7:b4:7c:54:95:10:1e:d4:f5:75:a1:ed:95:e3:d6:85:
dc:46:6f:d3:92:e2:42:05:4f:30:b4:be:6f:05:a4:12:09:3b:
87:c3:fd:51:c3:63:ad:29:1e:73:ea:a5:d9:fa:fa:9d:0a:93:
b6:bd:06:6e:8c:06:57:c9:01:09:a1:e7:1a:4b:09:5f:39:05:
ac:d6:f9:d0:93:91:8d:5c:bd:52:11:34:cf:87:1d:f8:6d:57:
83:ac:29:31:9e:77:f2:64:f1:4c:ad:46:47:a7:5e:ec:40:fa:
01:7f:c2:aa:61:20:98:49:b4:17:9d:f8:24:f9:87:b5:c7:1a:
0d:13:c6:34:0e:13:30:60:39:35:b8:b7:7c:9d:b6:63:25:91:
57:d2:a2:f5:cb:4c:c4:2c:b4:27:ad:27:d3:69:24:0d:3a:e1:
9a:ea:ea:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWUGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE0MTAwNzQyWhcNMjUwODIwMTAwNzQyWjAYMRYw
FAYDVQQDEw02ODc0ZDZmMy0wN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0b6w6xyo27EpE5lp7mDYMFHFLFW4JvqVoaXWsBRdJcz+AfNhGB+vphlB
1yNaNWAIdjwpgkl1iDjgKgxZV7G5axzufIu458zU0fONXl+CTkz9X1fOBUkCcTLP
+kGx6md3Gg9+AC4wQKYC8Are23fi4jpQaLG5Ho2rBvmwcPcYPyIqOJCMpJl5oqGS
FsA6j6BNae6tl53p6NeNMHfEThTUbiCOz3i+rXaRIxJJ7funLRKzf7E7iLwaAsT3
T/cYQUdMegQVVpusArKryrcWTf3ONojVKG5McVrSvC7pA+T7UbVbm2lO5Z1WNezR
RtTD8jJ+B5VYb3IPcvUeUxZEXgapeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDoq
dTSv+08CLweZVkvBwLSUQShpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0NDOTY0MjYwOUExMUYwQTBGQUY4ODlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcP0MA0GCSqGSIb3DQEBCwUA
A4IBAQCazR+75Y1vxfesgw7f9ge9TeAgGgvsmwOqjbprCH3+Mzm6Jll7WMRBbZLc
0R2JqgzAH4JHrOYX7nHz2vhfqGW8nMkOFQcloPkaTOY/UYnVjKQaKFGZLGvscDO5
dve0fFSVEB7U9XWh7ZXj1oXcRm/TkuJCBU8wtL5vBaQSCTuHw/1Rw2OtKR5z6qXZ
+vqdCpO2vQZujAZXyQEJoecaSwlfOQWs1vnQk5GNXL1SETTPhx34bVeDrCkxnnfy
ZPFMrUZHp17sQPoBf8KqYSCYSbQXnfgk+Ye1xxoNE8Y0DhMwYDk1uLd8nbZjJZFX
0qL1y0zELLQnrSfTaSQNOuGa6urY
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:18 2025 by rpki-client