Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2E74920608511F090E5B187DAE4EC9C.roa
File: C2E74920608511F090E5B187DAE4EC9C.roa (raw, json)
Hash identifier: NXZVWFmAA9QilVEpciQOKg86OyXwebS2J1jcTu/tij8=
Subject key identifier: 1C:73:38:31:DD:AB:FC:7B:39:84:04:6A:FF:77:79:2A:89:27:DD:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2E74920608511F090E5B187DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:40:07 +0000
ROA not before: Mon 14 Jul 2025 07:40:01 +0000
ROA not after: Mon 18 Aug 2025 07:40:01 +0000
asID: 6079
IP address blocks: 45.203.192.0/22 maxlen: 24
45.205.76.0/22 maxlen: 24
45.205.80.0/23 maxlen: 24
45.205.86.0/23 maxlen: 24
45.205.88.0/21 maxlen: 24
45.205.96.0/23 maxlen: 24
45.205.152.0/23 maxlen: 24
45.205.156.0/22 maxlen: 24
45.205.160.0/23 maxlen: 24
45.205.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91376 (0x164f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 07:40:01 2025 GMT
Not After : Aug 18 07:40:01 2025 GMT
Subject: CN=6874b457-facc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:02:76:80:7d:c6:0f:2c:0b:99:e3:af:1a:
06:b4:16:6a:a0:21:e5:c0:ad:79:58:c2:23:a8:1b:
ad:4e:0e:55:b1:71:41:57:89:b9:1d:f5:31:e9:55:
46:60:71:50:24:9f:ef:ec:9e:af:7a:6a:af:d0:69:
16:c8:94:c9:92:87:ca:7c:d4:5b:95:38:00:da:36:
a5:1d:1e:c6:8b:dd:9b:b8:4f:67:1d:65:46:b0:36:
03:55:cf:f9:03:32:35:61:e4:47:eb:d6:f4:45:55:
7f:6d:55:03:c1:fd:88:bb:87:d5:ad:bd:f2:4e:f5:
cb:e6:e7:db:14:f7:7d:e9:97:3f:cd:68:28:70:42:
2f:83:51:8d:f1:6e:62:c0:69:0a:68:b4:82:29:7f:
98:d7:40:4f:e7:ed:d4:89:66:95:ef:2d:ca:97:7f:
8a:20:8b:b5:44:f1:f1:8c:ac:66:94:6e:14:ad:2d:
bf:3e:14:2b:f0:95:87:3c:2b:77:a9:20:8c:b4:07:
8f:3c:27:9b:05:22:8d:a0:72:1f:ea:42:d7:f9:8e:
25:4e:d5:26:0e:f9:d3:f4:7e:de:65:ec:55:53:43:
e4:23:35:33:f7:53:4b:57:81:85:73:c9:ca:90:c0:
3c:fc:17:d3:c3:42:9e:c4:d6:a0:51:6a:02:0b:86:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:38:31:DD:AB:FC:7B:39:84:04:6A:FF:77:79:2A:89:27:DD:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2E74920608511F090E5B187DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.192.0/22
45.205.76.0-45.205.81.255
45.205.86.0-45.205.97.255
45.205.152.0/23
45.205.156.0-45.205.161.255
45.205.170.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e5:e2:11:ef:8e:1b:e8:97:3e:b4:96:79:92:c9:c2:43:a7:
87:9d:ac:56:37:ca:80:96:1f:70:9d:27:74:c8:91:2c:21:1f:
ac:4f:c2:52:9f:b4:e8:86:e8:03:af:ad:4d:00:1b:e7:26:68:
81:cf:74:75:dd:ba:a4:99:ab:f7:bb:e3:8d:d3:f4:64:a7:00:
a8:2e:c4:81:22:7d:70:c2:45:82:c8:b0:0e:2f:61:38:bf:f6:
cc:f9:c4:1a:92:9a:0e:cf:84:83:0f:fa:d2:04:09:35:32:94:
c3:ce:4d:d7:8b:fa:41:d7:04:2c:f9:51:71:48:0b:bd:7c:58:
09:88:8f:0a:09:c2:21:97:7f:d0:80:36:23:0e:cb:7a:71:d2:
b3:00:21:57:40:e8:7b:8c:e6:71:f1:a9:1d:f0:9a:a6:9d:5f:
cc:f0:70:ea:d6:0d:a8:de:58:44:3d:03:ea:e7:76:29:1c:a6:
79:69:6c:d4:3e:94:17:91:bc:1d:80:43:e9:42:52:d2:28:a4:
56:f2:40:78:c7:ea:f5:31:13:87:0b:2b:89:75:d1:1d:65:32:
52:6d:e7:09:48:79:78:c7:ce:9d:9c:dc:9a:44:79:c2:dd:05:
c9:51:15:26:09:85:d1:07:41:a0:b3:2a:81:1b:8f:e7:90:39:
c6:8d:8d:a3
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAWTwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE0MDc0MDAxWhcNMjUwODE4MDc0MDAxWjAYMRYw
FAYDVQQDEw02ODc0YjQ1Ny1mYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2wwCdoB9xg8sC5njrxoGtBZqoCHlwK15WMIjqButTg5VsXFBV4m5HfUx
6VVGYHFQJJ/v7J6vemqv0GkWyJTJkofKfNRblTgA2jalHR7Gi92buE9nHWVGsDYD
Vc/5AzI1YeRH69b0RVV/bVUDwf2Iu4fVrb3yTvXL5ufbFPd96Zc/zWgocEIvg1GN
8W5iwGkKaLSCKX+Y10BP5+3UiWaV7y3Kl3+KIIu1RPHxjKxmlG4UrS2/PhQr8JWH
PCt3qSCMtAePPCebBSKNoHIf6kLX+Y4lTtUmDvnT9H7eZexVU0PkIzUz91NLV4GF
c8nKkMA8/BfTw0KexNagUWoCC4Y2cQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFBxz
ODHdq/x7OYQEav93eSqJJ92RMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMkU3NDkyMDYwODUxMUYwOTBFNUIxODdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCLcvAMAwDBAItzUwDBAEtzVAw
DAMEAS3NVgMEAS3NYAMEAS3NmDAMAwQCLc2cAwQBLc2gAwQBLc2qMA0GCSqGSIb3
DQEBCwUAA4IBAQB95eIR744b6Jc+tJZ5ksnCQ6eHnaxWN8qAlh9wnSd0yJEsIR+s
T8JSn7TohugDr61NABvnJmiBz3R13bqkmav3u+ON0/RkpwCoLsSBIn1wwkWCyLAO
L2E4v/bM+cQakpoOz4SDD/rSBAk1MpTDzk3Xi/pB1wQs+VFxSAu9fFgJiI8KCcIh
l3/QgDYjDst6cdKzACFXQOh7jOZx8akd8JqmnV/M8HDq1g2o3lhEPQPq53YpHKZ5
aWzUPpQXkbwdgEPpQlLSKKRW8kB4x+r1MROHCyuJddEdZTJSbecJSHl4x86dnNya
RHnC3QXJURUmCYXRB0GgsyqBG4/nkDnGjY2j
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:28:54 2025 by rpki-client