Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A838E4B6617611F0BCA4F4A3DAE4EC9C.roa
File: A838E4B6617611F0BCA4F4A3DAE4EC9C.roa (raw, json)
Hash identifier: yCAFwLFzsWcnssr3G445uovFgFJ6CM9L9v+vOd8Vsfc=
Subject key identifier: 70:72:BF:57:61:47:D9:03:EC:72:F1:F4:A3:66:A3:70:C4:86:54:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01654B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A838E4B6617611F0BCA4F4A3DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 12:24:31 +0000
ROA not before: Tue 15 Jul 2025 12:24:26 +0000
ROA not after: Thu 24 Jul 2025 12:24:26 +0000
asID: 54801
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91467 (0x1654b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 12:24:26 2025 GMT
Not After : Jul 24 12:24:26 2025 GMT
Subject: CN=6876487f-3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:e6:bf:8c:ca:c1:45:68:8d:2e:53:01:f6:
8a:ae:0e:4c:71:14:6d:21:ca:1a:6a:9c:5d:4b:55:
f5:74:77:a3:67:97:6e:2a:9c:c2:b1:57:b9:71:33:
04:11:bf:7c:d6:d0:da:2d:31:82:5e:88:b4:17:5f:
52:01:78:00:f6:95:c3:5d:e2:a6:ec:a2:bc:37:8f:
f1:c6:65:5a:a5:9e:a9:47:15:9b:b8:f1:90:bf:34:
43:42:f9:86:06:ad:d5:b6:fe:62:61:a5:67:c4:9d:
c3:5c:24:2a:ae:30:0b:11:0e:bb:6d:26:86:86:a1:
be:92:ec:06:9d:17:f6:1d:44:b0:43:12:46:14:f4:
22:fd:b1:48:a6:2f:e0:84:b4:d6:57:7a:53:c0:e0:
51:c3:92:20:18:c3:76:e2:7c:8d:63:d4:2c:b7:02:
12:7f:b7:fb:4f:8a:42:55:bf:e4:ed:b1:94:ec:34:
ab:68:5d:e6:42:00:11:81:2e:f4:0b:5f:27:05:d4:
45:cc:db:7e:bd:22:28:c8:d1:04:05:99:59:73:01:
73:ba:2b:97:b1:78:5c:02:71:28:de:d3:fe:c2:78:
e6:85:8c:d1:c8:b8:d1:ab:93:5a:5d:32:a5:da:b7:
74:fb:58:63:34:30:a9:36:a3:a6:da:5b:8f:ec:5b:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:BF:57:61:47:D9:03:EC:72:F1:F4:A3:66:A3:70:C4:86:54:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A838E4B6617611F0BCA4F4A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
58:a0:f3:4c:8d:34:87:01:6e:b5:2c:a5:cb:e6:68:d3:ad:86:
7f:8f:a5:88:c3:4b:56:64:4c:56:ab:b7:5b:33:65:47:23:47:
6e:d7:94:69:e4:13:9a:88:6f:9e:40:37:f0:dd:f6:d0:ea:1d:
67:76:02:f4:bb:8f:5d:e7:c9:41:89:0d:1e:17:84:ec:e3:bc:
e5:d3:6c:98:1c:63:6d:d4:68:45:f9:1d:2e:32:b1:84:9e:c7:
22:41:b3:1a:a5:b4:a5:1e:d7:41:29:94:6c:9e:f7:b3:8c:ed:
78:91:d8:ed:48:df:60:9f:bf:31:cf:f3:34:0b:fb:d8:cd:06:
4b:32:80:76:5c:f3:ed:bd:e6:b0:cf:cd:e3:76:9e:cc:39:1d:
36:cc:27:17:5c:c1:ee:91:80:77:c5:3d:8e:3d:05:55:77:43:
45:c7:cf:fa:1a:dc:92:e8:78:e0:17:ec:fe:65:b9:0e:22:42:
d9:38:11:03:cd:2e:b7:f9:cf:7d:a0:4e:b8:6a:b1:f6:7a:1e:
bb:c7:d1:ac:20:42:d2:f1:28:f4:46:9b:bf:c3:4a:c1:a9:9c:
3a:9f:c5:8a:69:45:a1:95:6c:35:aa:29:1d:04:9a:20:3b:a9:
fc:3b:4a:fc:d7:df:64:73:ff:e2:e1:c2:f5:7a:80:4a:e3:b8:
d5:92:4e:a9
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAWVLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE1MTIyNDI2WhcNMjUwNzI0MTIyNDI2WjAYMRYw
FAYDVQQDEw02ODc2NDg3Zi0zZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoSbmv4zKwUVojS5TAfaKrg5McRRtIcoaapxdS1X1dHejZ5duKpzCsVe5
cTMEEb981tDaLTGCXoi0F19SAXgA9pXDXeKm7KK8N4/xxmVapZ6pRxWbuPGQvzRD
QvmGBq3Vtv5iYaVnxJ3DXCQqrjALEQ67bSaGhqG+kuwGnRf2HUSwQxJGFPQi/bFI
pi/ghLTWV3pTwOBRw5IgGMN24nyNY9QstwISf7f7T4pCVb/k7bGU7DSraF3mQgAR
gS70C18nBdRFzNt+vSIoyNEEBZlZcwFzuiuXsXhcAnEo3tP+wnjmhYzRyLjRq5Na
XTKl2rd0+1hjNDCpNqOm2luP7Fuw6QIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFHBy
v1dhR9kD7HLx9KNmo3DEhlQZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODM4RTRCNjYxNzYxMUYwQkNBNEY0QTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAEtyA4DBAYtyAAwDAMEAS3J
1gMEAy3J4AMEBC3J8AMEAC3MAAMEBS3P4DANBgkqhkiG9w0BAQsFAAOCAQEAWKDz
TI00hwFutSyly+Zo062Gf4+liMNLVmRMVqu3WzNlRyNHbteUaeQTmohvnkA38N32
0OodZ3YC9LuPXefJQYkNHheE7OO85dNsmBxjbdRoRfkdLjKxhJ7HIkGzGqW0pR7X
QSmUbJ73s4zteJHY7UjfYJ+/Mc/zNAv72M0GSzKAdlzz7b3msM/N43aezDkdNswn
F1zB7pGAd8U9jj0FVXdDRcfP+hrckuh44Bfs/mW5DiJC2TgRA80ut/nPfaBOuGqx
9noeu8fRrCBC0vEo9Eabv8NKwamcOp/FimlFoZVsNaopHQSaIDup/DtK/NffZHP/
4uHC9XqASuO41ZJOqQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:33 2025 by rpki-client