Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80122B56567111F08FFEF190DAE4EC9C.roa
File: 80122B56567111F08FFEF190DAE4EC9C.roa (raw, json)
Hash identifier: JJSCcX2lOX8FE0KUTpKkFh+DJTL6kwziLmQZn6Fjrzc=
Subject key identifier: 1B:C3:20:E7:0C:DE:B6:95:63:7D:22:04:CC:7F:BB:B2:6C:52:F4:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80122B56567111F08FFEF190DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 11:49:55 +0000
ROA not before: Tue 01 Jul 2025 11:49:48 +0000
ROA not after: Sat 30 Aug 2025 11:49:48 +0000
asID: 399195
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90078 (0x15fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 11:49:48 2025 GMT
Not After : Aug 30 11:49:48 2025 GMT
Subject: CN=6863cb63-b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:02:8d:af:2a:ba:a3:4b:86:ca:0b:d3:9e:
d3:5a:7a:57:25:4b:73:77:50:57:a2:58:8d:d6:d0:
9b:bf:24:78:d0:5e:7f:fe:f5:70:93:86:56:06:da:
b8:26:5f:99:6e:81:ae:a1:2d:e7:5a:65:6e:6b:d5:
3e:1b:85:b6:65:be:5d:cd:7d:98:0f:f6:c4:4c:71:
e7:ab:bc:a7:7f:cf:57:2d:7a:29:78:0a:b9:a5:9f:
7f:72:38:8f:b0:10:ca:79:14:87:30:a6:a0:ca:2f:
c2:b6:df:50:b8:d2:52:30:ef:ce:88:16:db:6b:20:
10:88:22:f2:97:12:9f:69:bb:98:a7:5c:0a:8f:06:
09:83:3d:cb:b1:a0:55:f7:31:b5:16:5d:40:3e:db:
41:10:53:ed:24:2c:c9:e2:35:10:15:ed:8f:ab:4d:
b3:b2:18:65:2a:2d:24:80:45:a8:52:a5:e9:5c:55:
8b:d7:61:9a:42:c1:fe:df:2f:58:cb:73:d2:5c:8f:
87:09:d5:8d:16:bf:63:74:96:d8:c9:6c:58:20:32:
ad:82:11:4b:c2:19:de:dc:70:39:e9:c5:84:14:e4:
70:26:3a:af:25:bf:30:67:72:3d:40:d6:0f:9f:53:
41:cf:3c:d8:0c:eb:50:93:a6:e7:ba:f9:de:7c:65:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:20:E7:0C:DE:B6:95:63:7D:22:04:CC:7F:BB:B2:6C:52:F4:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80122B56567111F08FFEF190DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
19:d1:fc:ea:13:40:c4:17:fb:28:d3:31:77:e8:72:b9:80:b6:
54:14:eb:ea:37:24:93:dd:cc:a9:e0:4e:79:04:d8:52:9c:f8:
94:fa:b5:ad:ad:30:39:75:8a:d0:df:27:fe:d5:34:c5:40:29:
6c:07:08:26:aa:3d:5f:78:f7:01:06:be:f9:d6:39:a5:55:23:
f8:a4:c2:f6:26:4f:a1:44:06:25:7f:16:59:0e:52:c6:bf:4a:
a2:6e:bb:97:a9:7c:af:6a:2e:c2:57:4e:ce:c0:db:f7:b3:42:
79:f9:dc:7b:39:10:fb:db:ec:e8:34:7f:08:ae:9d:6d:62:42:
83:ce:1c:56:87:f9:7b:dd:d1:03:ef:37:ce:33:42:1a:22:7a:
79:da:9f:0a:a4:74:4a:0f:11:8e:d1:0b:c3:1f:3d:70:55:65:
a8:61:f7:23:6c:a5:ca:4b:d7:63:df:1f:3c:01:05:a7:3a:91:
79:79:62:0a:d9:34:bb:e1:f6:3b:fa:a1:10:39:1f:b9:93:3a:
15:a4:d1:54:f4:2f:a1:d3:59:fb:7e:7d:d2:cf:11:09:a5:cf:
58:27:5e:eb:96:6e:7d:79:b8:1e:50:0e:6c:12:8a:39:b5:0e:
d8:fb:36:00:45:26:32:46:80:3f:c2:06:48:fc:be:37:67:0f:
2f:67:a7:78
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAV/eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAxMTE0OTQ4WhcNMjUwODMwMTE0OTQ4WjAYMRYw
FAYDVQQDEw02ODYzY2I2My1iOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxSICja8quqNLhsoL057TWnpXJUtzd1BXoliN1tCbvyR40F5//vVwk4ZW
Btq4Jl+ZboGuoS3nWmVua9U+G4W2Zb5dzX2YD/bETHHnq7ynf89XLXopeAq5pZ9/
cjiPsBDKeRSHMKagyi/Ctt9QuNJSMO/OiBbbayAQiCLylxKfabuYp1wKjwYJgz3L
saBV9zG1Fl1APttBEFPtJCzJ4jUQFe2Pq02zshhlKi0kgEWoUqXpXFWL12GaQsH+
3y9Yy3PSXI+HCdWNFr9jdJbYyWxYIDKtghFLwhne3HA56cWEFORwJjqvJb8wZ3I9
QNYPn1NBzzzYDOtQk6bnuvnefGW3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvD
IOcM3raVY30iBMx/u7JsUvTrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MDEyMkI1NjU2NzExMUYwOEZGRUYxOTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcDAAwQGLcjAMA0GCSqGSIb3
DQEBCwUAA4IBAQAZ0fzqE0DEF/so0zF36HK5gLZUFOvqNyST3cyp4E55BNhSnPiU
+rWtrTA5dYrQ3yf+1TTFQClsBwgmqj1fePcBBr751jmlVSP4pML2Jk+hRAYlfxZZ
DlLGv0qibruXqXyvai7CV07OwNv3s0J5+dx7ORD72+zoNH8Irp1tYkKDzhxWh/l7
3dED7zfOM0IaInp52p8KpHRKDxGO0QvDHz1wVWWoYfcjbKXKS9dj3x88AQWnOpF5
eWIK2TS74fY7+qEQOR+5kzoVpNFU9C+h01n7fn3SzxEJpc9YJ17rlm59ebgeUA5s
Eoo5tQ7Y+zYARSYyRoA/wgZI/L43Zw8vZ6d4
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:33:45 2025 by rpki-client