Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5407E665A7511F0B55FDFB0DAE4EC9C.roa
File: A5407E665A7511F0B55FDFB0DAE4EC9C.roa (raw, json)
Hash identifier: EJDoyTys+iV3MSySlzC5UlhXq9kImXChERJHW30Mpbw=
Subject key identifier: AD:61:6F:DC:C6:C8:7B:4A:30:15:32:41:54:33:F9:73:9E:75:0E:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016229
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5407E665A7511F0B55FDFB0DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 14:29:38 +0000
ROA not before: Sun 06 Jul 2025 14:29:33 +0000
ROA not after: Wed 23 Jul 2025 14:29:33 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90665 (0x16229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 14:29:33 2025 GMT
Not After : Jul 23 14:29:33 2025 GMT
Subject: CN=686a8852-aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:78:4a:a3:37:28:8b:8a:ce:33:c4:74:90:
a0:10:01:7a:1c:2a:e5:93:16:c5:ec:74:8a:9d:fd:
62:76:d0:48:de:63:78:9a:69:fd:ef:e8:de:07:06:
0f:d4:f0:1e:55:c2:ed:5d:9c:0e:75:49:14:4d:fd:
be:e9:73:57:96:99:3e:bb:19:90:55:7c:17:f3:46:
dd:44:3d:e5:f4:5e:2b:dd:46:bf:ec:54:9a:98:ac:
a2:85:8a:8d:f5:81:39:7d:23:3d:d2:96:61:0e:f7:
88:06:47:33:97:31:9e:aa:52:7e:a3:be:43:a2:f7:
fb:fe:29:8b:de:b5:92:91:db:8d:8f:0a:bd:e6:2b:
00:e5:5f:e4:97:34:15:cb:40:16:f1:90:e5:63:20:
3f:47:d1:4e:8a:7d:27:fa:83:35:31:e1:6e:10:3d:
9a:c5:9e:36:93:da:a5:fa:42:f1:5f:c6:96:40:b2:
56:35:a5:29:78:17:2b:d5:b8:4c:8c:ba:53:35:64:
0e:03:ab:f0:2f:4f:6f:54:03:60:7e:96:69:c8:96:
23:d8:3e:5f:2b:d4:e0:8d:dd:0e:d4:77:b4:d1:ce:
5e:c0:d9:4c:24:9d:eb:b0:49:3e:24:26:91:ce:4d:
b3:7b:2a:e1:2f:d0:00:33:67:4f:3c:0d:7c:43:c4:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:6F:DC:C6:C8:7B:4A:30:15:32:41:54:33:F9:73:9E:75:0E:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5407E665A7511F0B55FDFB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:dd:e3:eb:78:7e:57:ad:32:60:21:7d:04:46:43:bc:8f:09:
45:93:5e:49:5a:10:01:f5:75:c5:be:27:4d:58:26:01:8c:b4:
25:65:00:1b:ef:37:4e:63:2c:04:18:d3:42:80:6f:52:08:83:
cc:bc:7d:71:86:b7:81:f9:91:53:43:b2:fe:07:a9:9d:41:e0:
d3:51:cd:02:e1:08:9d:9b:38:11:44:56:47:b7:b0:f9:1b:4f:
c7:d1:e0:99:c4:77:7d:75:5e:8f:32:2c:b7:81:d7:37:f4:76:
f3:26:df:fe:fe:56:19:e0:27:cb:53:02:fd:8b:33:da:1a:72:
26:f9:fd:ba:39:db:a0:c7:da:10:dd:77:dc:64:85:a5:6b:20:
26:e0:8f:9c:cf:bc:27:b2:68:d5:f9:b5:36:80:c9:fc:27:40:
7f:d3:c9:86:94:80:fa:95:39:a8:14:7a:f8:4f:ce:fe:01:72:
3f:b4:e4:f9:a3:52:72:57:89:d4:c7:51:09:87:d0:56:cc:f9:
f8:e2:e2:8c:2c:cc:cf:0a:fc:23:f7:b7:76:eb:d5:e7:1e:07:
cd:36:f9:30:98:29:47:95:3d:e2:4d:b0:e9:04:90:e9:c9:a0:
e9:21:cb:86:86:b9:86:1b:1c:f9:f0:b6:e0:70:17:e6:6c:f5:
57:2b:e5:1c
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAWIpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MTQyOTMzWhcNMjUwNzIzMTQyOTMzWjAYMRYw
FAYDVQQDEw02ODZhODg1Mi1hYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1uF4SqM3KIuKzjPEdJCgEAF6HCrlkxbF7HSKnf1idtBI3mN4mmn97+je
BwYP1PAeVcLtXZwOdUkUTf2+6XNXlpk+uxmQVXwX80bdRD3l9F4r3Ua/7FSamKyi
hYqN9YE5fSM90pZhDveIBkczlzGeqlJ+o75Dovf7/imL3rWSkduNjwq95isA5V/k
lzQVy0AW8ZDlYyA/R9FOin0n+oM1MeFuED2axZ42k9ql+kLxX8aWQLJWNaUpeBcr
1bhMjLpTNWQOA6vwL09vVANgfpZpyJYj2D5fK9Tgjd0O1He00c5ewNlMJJ3rsEk+
JCaRzk2zeyrhL9AAM2dPPA18Q8RfXQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFK1h
b9zGyHtKMBUyQVQz+XOedQ4RMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNTQwN0U2NjVBNzUxMUYwQjU1RkRGQjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLcIOMAwDBAAtwhkDBAAtwhoD
BAEtwlADBAEtwlgwDQYJKoZIhvcNAQELBQADggEBAG7d4+t4fletMmAhfQRGQ7yP
CUWTXklaEAH1dcW+J01YJgGMtCVlABvvN05jLAQY00KAb1IIg8y8fXGGt4H5kVND
sv4HqZ1B4NNRzQLhCJ2bOBFEVke3sPkbT8fR4JnEd311Xo8yLLeB1zf0dvMm3/7+
VhngJ8tTAv2LM9oacib5/bo526DH2hDdd9xkhaVrICbgj5zPvCeyaNX5tTaAyfwn
QH/TyYaUgPqVOagUevhPzv4Bcj+05PmjUnJXidTHUQmH0FbM+fji4owszM8K/CP3
t3br1eceB802+TCYKUeVPeJNsOkEkOnJoOkhy4aGuYYbHPnwtuBwF+Zs9Vcr5Rw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:23 2025 by rpki-client