Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F16EEDE5A8B11F08F841FBCDAE4EC9C.roa
File: 8F16EEDE5A8B11F08F841FBCDAE4EC9C.roa (raw, json)
Hash identifier: hrahFPBsjBtrYfbKkS913lLLEXvsrKW2+9ay1AqfzCQ=
Subject key identifier: 33:B1:39:E3:DC:5F:12:28:F3:77:92:9E:CD:1E:CF:69:F9:B9:DE:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016261
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F16EEDE5A8B11F08F841FBCDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 17:06:30 +0000
ROA not before: Sun 06 Jul 2025 17:06:25 +0000
ROA not after: Tue 12 Aug 2025 17:06:25 +0000
asID: 401701
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90721 (0x16261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 17:06:25 2025 GMT
Not After : Aug 12 17:06:25 2025 GMT
Subject: CN=686aad16-8716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:31:73:cc:c4:fb:bf:02:d0:6c:06:12:e9:
2a:34:ed:25:ff:81:5c:18:8c:a8:3b:b6:cb:47:97:
80:0f:5e:80:80:62:78:55:5e:e1:1a:e2:e8:bc:36:
76:78:99:39:ee:96:9b:be:0a:2b:61:e7:0f:d2:2b:
56:b1:bb:1e:35:29:74:28:17:5a:2b:e0:04:75:1a:
01:89:2e:d1:6c:7f:d5:fb:ea:26:49:b4:7c:5f:79:
61:c0:7c:25:bd:0a:37:f6:40:1b:a2:af:12:78:97:
45:ad:f3:fe:7d:24:88:34:05:a7:c2:d1:3e:0e:09:
e6:07:9c:a2:c6:6d:76:a8:ef:2a:e3:ec:d3:99:03:
e5:a9:0d:74:cd:44:2f:09:e2:87:a7:2e:b9:c9:27:
d7:5b:ea:6e:6d:7e:d1:5c:d1:be:78:f6:8f:df:04:
e2:bb:f7:86:ce:d7:92:b4:1f:29:73:f1:a0:54:ce:
80:cb:4c:dd:ea:ec:23:fa:fa:60:4a:58:51:e7:d2:
b0:d9:ae:70:4e:d5:21:63:4e:94:66:4b:88:44:c5:
4c:37:37:74:e8:3f:38:02:8d:06:e9:6f:f9:06:cd:
b7:e2:ad:ad:69:b6:47:6f:91:4b:6c:c6:42:33:31:
cd:28:7b:7a:51:8e:dc:39:80:e9:37:cf:ce:8b:81:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:39:E3:DC:5F:12:28:F3:77:92:9E:CD:1E:CF:69:F9:B9:DE:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F16EEDE5A8B11F08F841FBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
39:57:ab:8c:9f:58:1d:3a:46:00:4f:67:36:50:2d:de:fe:c2:
8e:a7:9b:d2:e7:ad:47:aa:df:76:2c:f2:10:59:31:9a:c3:83:
8e:c9:17:e7:77:38:98:0a:0b:41:0e:07:a7:6f:91:bb:07:c0:
3b:2f:fc:f1:41:4a:a7:b4:aa:92:b9:8a:10:c4:14:be:19:22:
d6:0c:69:9a:76:b0:a3:ba:17:ed:5e:cc:ea:b5:6e:f4:f2:5b:
3a:e1:e5:46:1e:08:ea:f6:58:38:9e:98:68:b1:5b:88:a8:d5:
76:14:1f:41:19:df:ef:82:13:40:68:81:cf:c5:7a:29:b8:00:
74:23:be:fc:f5:f3:68:8c:fa:6c:56:f7:94:70:93:d0:db:79:
72:22:51:21:04:c9:09:da:65:22:4a:66:a0:e8:a0:82:99:83:
8c:fa:b3:7c:b2:46:b8:6a:5a:d2:4f:3d:b1:cd:4f:9a:f5:e2:
49:34:f6:11:39:c2:bd:4d:a1:76:bd:e5:cf:c8:85:00:a6:42:
8b:93:b8:a4:ce:5f:d1:7d:ee:21:fa:b4:91:33:80:3c:d1:98:
de:d0:86:b4:b8:05:d4:57:74:3f:b8:86:75:70:18:71:91:ed:
47:96:43:bf:e0:ec:48:36:39:56:94:4e:ee:df:8a:92:d7:2e:
9a:ea:b1:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWJhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MTcwNjI1WhcNMjUwODEyMTcwNjI1WjAYMRYw
FAYDVQQDEw02ODZhYWQxNi04NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAugExc8zE+78C0GwGEukqNO0l/4FcGIyoO7bLR5eAD16AgGJ4VV7hGuLo
vDZ2eJk57pabvgorYecP0itWsbseNSl0KBdaK+AEdRoBiS7RbH/V++omSbR8X3lh
wHwlvQo39kAboq8SeJdFrfP+fSSINAWnwtE+DgnmB5yixm12qO8q4+zTmQPlqQ10
zUQvCeKHpy65ySfXW+pubX7RXNG+ePaP3wTiu/eGzteStB8pc/GgVM6Ay0zd6uwj
+vpgSlhR59Kw2a5wTtUhY06UZkuIRMVMNzd06D84Ao0G6W/5Bs234q2tabZHb5FL
bMZCMzHNKHt6UY7cOYDpN8/Oi4GbAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDOx
OePcXxIo83eSns0ez2n5ud5hMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RjE2RUVERTVBOEIxMUYwOEY4NDFGQkNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQA5V6uMn1gdOkYAT2c2UC3e/sKOp5vS561Hqt92LPIQWTGaw4OOyRfndziY
CgtBDgenb5G7B8A7L/zxQUqntKqSuYoQxBS+GSLWDGmadrCjuhftXszqtW708ls6
4eVGHgjq9lg4nphosVuIqNV2FB9BGd/vghNAaIHPxXopuAB0I7789fNojPpsVveU
cJPQ23lyIlEhBMkJ2mUiSmag6KCCmYOM+rN8ska4alrSTz2xzU+a9eJJNPYROcK9
TaF2veXPyIUApkKLk7ikzl/Rfe4h+rSRM4A80Zje0Ia0uAXUV3Q/uIZ1cBhxke1H
lkO/4OxINjlWlE7u34qS1y6a6rGJ
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:43 2025 by rpki-client