Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD6D192952A11F09F782689DAE4EC9C.roa
File: DBD6D192952A11F09F782689DAE4EC9C.roa (raw, json)
Hash identifier: jqNWhI8UQn39X9X/CapsRK0jroHjFpGGj3gUq+eEEsM=
Subject key identifier: 2D:EC:F6:D8:1A:CA:18:7E:9E:4E:8F:44:01:9F:06:7B:9E:DD:23:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD6D192952A11F09F782689DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 07:32:56 +0000
ROA not before: Fri 19 Sep 2025 07:32:51 +0000
ROA not after: Sat 25 Oct 2025 07:32:51 +0000
asID: 2914
IP address blocks: 45.201.12.0/22 maxlen: 24
45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97355 (0x17c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 07:32:51 2025 GMT
Not After : Oct 25 07:32:51 2025 GMT
Subject: CN=68cd0728-7cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:ae:d3:80:10:f7:87:f6:e8:32:17:db:05:
19:fd:29:3e:b0:b0:74:ae:6c:e0:18:80:ae:50:f4:
a0:88:7f:67:68:e3:01:93:69:63:6f:5d:4c:21:e6:
c3:a8:50:9e:f7:11:7c:5c:bb:f6:0d:12:a4:8d:9a:
75:a0:82:6e:e0:5e:ed:68:a1:eb:7d:3b:67:c3:6f:
57:b9:13:23:36:64:c2:34:74:fc:fe:cd:4f:77:3e:
c7:9f:ea:a9:01:71:ad:1f:28:00:c0:66:e6:f1:61:
73:26:33:fc:a3:a8:ad:28:a3:30:c5:c2:99:a8:89:
ed:b0:ff:bc:41:7c:ae:b8:14:a2:16:3b:bd:67:00:
70:ab:6f:7b:73:94:a5:86:d1:8b:0c:e6:67:e0:b8:
b5:9a:8b:b7:fa:19:71:dc:89:c9:f1:f6:f0:f0:0d:
86:b1:fa:31:5d:1b:eb:ac:a6:5f:c8:d7:9e:47:22:
3e:ec:c8:74:dc:7e:e1:26:b8:4c:be:cb:71:12:9c:
42:6f:38:9a:f6:fd:4c:c8:88:54:fc:45:aa:59:4c:
9b:30:1b:ee:92:3c:5f:e1:ba:f4:c2:d0:5f:75:ef:
c0:a2:d2:ee:98:d2:df:e4:87:7d:69:42:5b:de:6e:
f7:0e:f5:79:6c:0c:a7:c7:64:af:57:b1:6d:d8:1e:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EC:F6:D8:1A:CA:18:7E:9E:4E:8F:44:01:9F:06:7B:9E:DD:23:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD6D192952A11F09F782689DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a1:90:59:32:aa:d1:73:2a:5d:b7:bb:a7:b6:d2:e1:f1:bd:
12:75:52:65:9d:75:65:d3:69:bd:a1:e2:b5:9c:86:39:f7:01:
7d:df:f1:7a:43:81:f3:c5:3f:19:7d:d5:ad:36:97:8b:7a:81:
c3:5d:32:06:1e:ce:08:45:27:04:08:be:3f:ce:b5:e4:1c:c6:
8b:07:b8:a0:65:d8:f8:65:1d:14:c3:d7:86:ea:4a:fd:63:9f:
1a:e9:59:7b:95:fe:c0:18:b2:ea:10:b2:ce:0d:04:81:7e:7f:
dd:c4:b8:25:58:50:91:25:b1:cd:1a:1a:35:83:40:08:af:85:
15:48:04:87:5e:2a:94:31:83:98:9e:52:d7:cd:a2:15:0a:b8:
5a:94:13:ce:f8:47:0b:de:ac:03:aa:ce:e0:ca:5b:f1:16:e3:
dd:85:70:cf:3f:f8:2f:fd:28:e2:49:65:51:64:c7:08:06:bf:
91:59:a5:7f:2a:e1:53:28:b8:a3:a6:55:1c:5b:db:4c:d0:21:
08:b2:91:cf:2f:71:f2:c2:0f:05:20:e1:7b:3c:dd:50:b6:26:
dd:4d:93:14:a0:27:25:bd:e2:0d:1b:89:52:6f:ee:29:7e:c4:
34:b1:ee:24:7f:11:26:cf:39:46:42:a4:77:1d:33:00:04:f3:
fb:d1:eb:f4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAXxLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE5MDczMjUxWhcNMjUxMDI1MDczMjUxWjAYMRYw
FAYDVQQDEw02OGNkMDcyOC03Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1liu04AQ94f26DIX2wUZ/Sk+sLB0rmzgGICuUPSgiH9naOMBk2ljb11M
IebDqFCe9xF8XLv2DRKkjZp1oIJu4F7taKHrfTtnw29XuRMjNmTCNHT8/s1Pdz7H
n+qpAXGtHygAwGbm8WFzJjP8o6itKKMwxcKZqIntsP+8QXyuuBSiFju9ZwBwq297
c5SlhtGLDOZn4Li1mou3+hlx3InJ8fbw8A2GsfoxXRvrrKZfyNeeRyI+7Mh03H7h
JrhMvstxEpxCbzia9v1MyIhU/EWqWUybMBvukjxf4br0wtBfde/AotLumNLf5Id9
aUJb3m73DvV5bAynx2SvV7Ft2B7VdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3s
9tgayhh+nk6PRAGfBnue3SO/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQkQ2RDE5Mjk1MkExMUYwOUY3ODI2ODlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLckMAwQALcpKMA0GCSqGSIb3
DQEBCwUAA4IBAQBdoZBZMqrRcypdt7unttLh8b0SdVJlnXVl02m9oeK1nIY59wF9
3/F6Q4HzxT8ZfdWtNpeLeoHDXTIGHs4IRScECL4/zrXkHMaLB7igZdj4ZR0Uw9eG
6kr9Y58a6Vl7lf7AGLLqELLODQSBfn/dxLglWFCRJbHNGho1g0AIr4UVSASHXiqU
MYOYnlLXzaIVCrhalBPO+EcL3qwDqs7gylvxFuPdhXDPP/gv/SjiSWVRZMcIBr+R
WaV/KuFTKLijplUcW9tM0CEIspHPL3Hywg8FIOF7PN1QtibdTZMUoCclveING4lS
b+4pfsQ0se4kfxEmzzlGQqR3HTMABPP70ev0
-----END CERTIFICATE-----
Generated at Wed Oct 8 12:01:35 2025 by rpki-client