Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B97676565CB911F0B716D379DAE4EC9C.roa
File: B97676565CB911F0B716D379DAE4EC9C.roa (raw, json)
Hash identifier: 8VdYGenhg75Hi+ZBDnc4o764yYg4veZxnEPg2SVqIyM=
Subject key identifier: CB:0B:2B:62:B2:22:CD:6A:24:A7:72:3E:43:2F:C9:46:59:4C:DC:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B97676565CB911F0B716D379DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 11:42:00 +0000
ROA not before: Wed 09 Jul 2025 11:41:55 +0000
ROA not after: Wed 23 Jul 2025 11:41:55 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91066 (0x163ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 11:41:55 2025 GMT
Not After : Jul 23 11:41:55 2025 GMT
Subject: CN=686e5588-44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:ca:a5:ec:f6:8e:7d:2f:70:94:70:a1:35:
40:d6:61:90:9f:e9:72:ad:23:26:6c:48:b4:6f:2e:
68:c3:21:98:a2:88:11:b9:ff:ba:63:61:d4:68:61:
e0:f6:4e:71:b9:d0:a7:ee:f3:72:2c:02:33:96:13:
13:35:1e:91:3b:a7:c9:72:be:a9:79:e6:f3:74:35:
50:f8:ff:0b:db:9d:41:80:75:7c:3b:93:5e:d2:39:
ee:73:1f:67:31:e6:f9:e0:da:b5:f4:9e:fb:51:be:
6b:ed:fa:65:10:91:d5:76:69:77:c5:10:9e:92:b0:
98:70:d5:a6:49:e9:9d:a0:f6:f9:89:58:45:9e:8b:
ee:de:b6:2c:cb:77:31:ae:1a:4a:3a:18:29:7f:28:
48:b1:8c:cc:b9:62:02:4e:5a:b3:34:17:70:84:18:
d8:42:39:83:75:b1:30:b4:9b:0d:02:3f:2f:aa:66:
6a:b6:70:db:ae:d9:a7:58:d5:4e:18:77:32:23:6e:
33:39:15:25:8f:ba:9f:97:94:48:fb:7c:e0:87:c4:
cf:02:6d:72:32:14:7f:7b:bf:aa:00:15:84:d5:13:
50:f4:42:81:93:a2:39:76:3a:bf:67:02:1f:8e:6d:
4b:9b:5f:a8:5f:42:e1:f9:8b:fe:9b:1c:b9:44:39:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:2B:62:B2:22:CD:6A:24:A7:72:3E:43:2F:C9:46:59:4C:DC:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B97676565CB911F0B716D379DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:2d:de:36:62:46:99:9d:33:32:27:85:a0:61:9f:14:2a:cb:
78:19:ad:a8:ee:49:bb:10:52:16:a3:5c:21:ae:bd:ab:43:ff:
64:0f:d3:94:b1:16:ce:d7:b7:20:08:fa:b3:61:54:cb:5b:ec:
db:86:03:b3:94:e4:a6:90:a7:30:67:8c:0c:79:56:96:67:68:
cf:68:f3:5d:e9:10:5f:a6:12:44:8c:cc:78:cf:d0:f5:f4:93:
37:98:8f:85:76:09:fa:f2:df:03:66:d3:ad:43:14:33:3a:ed:
20:1e:98:1f:58:03:35:49:61:7b:74:94:24:d0:82:4d:8a:20:
49:fb:2f:88:06:58:71:82:45:d7:32:5b:7f:9f:30:f7:d6:37:
b6:ff:11:26:af:f1:d7:91:8a:9c:38:94:35:e2:ca:cf:04:b0:
81:ab:96:a7:cc:3e:3e:fe:15:8a:7a:fb:44:7c:90:16:b0:a7:
52:8d:bc:03:90:0a:3a:d9:10:2e:83:b0:e3:b7:75:76:33:0f:
ed:79:a4:54:61:83:3c:fe:c8:44:f1:84:d3:72:5c:5b:f6:3d:
30:d4:66:b0:89:53:cd:e6:2c:98:ce:51:06:28:76:ce:ae:bf:
44:49:a8:98:d7:e5:c5:5d:94:d2:d8:1b:96:26:2f:6d:1a:11:
63:dd:31:cb
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAWO6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA5MTE0MTU1WhcNMjUwNzIzMTE0MTU1WjAYMRYw
FAYDVQQDEw02ODZlNTU4OC00NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsm3Kpez2jn0vcJRwoTVA1mGQn+lyrSMmbEi0by5owyGYoogRuf+6Y2HU
aGHg9k5xudCn7vNyLAIzlhMTNR6RO6fJcr6peebzdDVQ+P8L251BgHV8O5Ne0jnu
cx9nMeb54Nq19J77Ub5r7fplEJHVdml3xRCekrCYcNWmSemdoPb5iVhFnovu3rYs
y3cxrhpKOhgpfyhIsYzMuWICTlqzNBdwhBjYQjmDdbEwtJsNAj8vqmZqtnDbrtmn
WNVOGHcyI24zORUlj7qfl5RI+3zgh8TPAm1yMhR/e7+qABWE1RNQ9EKBk6I5djq/
ZwIfjm1Lm1+oX0Lh+Yv+mxy5RDnzMwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFMsL
K2KyIs1qJKdyPkMvyUZZTNziMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COTc2NzY1NjVDQjkxMUYwQjcxNkQzNzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLcOCAwQBLcPCAwQBLcPSMA0G
CSqGSIb3DQEBCwUAA4IBAQBLLd42YkaZnTMyJ4WgYZ8UKst4Ga2o7km7EFIWo1wh
rr2rQ/9kD9OUsRbO17cgCPqzYVTLW+zbhgOzlOSmkKcwZ4wMeVaWZ2jPaPNd6RBf
phJEjMx4z9D19JM3mI+Fdgn68t8DZtOtQxQzOu0gHpgfWAM1SWF7dJQk0IJNiiBJ
+y+IBlhxgkXXMlt/nzD31je2/xEmr/HXkYqcOJQ14srPBLCBq5anzD4+/hWKevtE
fJAWsKdSjbwDkAo62RAug7Djt3V2Mw/teaRUYYM8/shE8YTTclxb9j0w1GawiVPN
5iyYzlEGKHbOrr9ESaiY1+XFXZTS2BuWJi9tGhFj3THL
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:34:28 2025 by rpki-client