Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/007B78C0870411F0ACA21C90DAE4EC9C.roa
File: 007B78C0870411F0ACA21C90DAE4EC9C.roa (raw, json)
Hash identifier: MDXouvdvPLtAYZQ4b/jTRYMQDkHh1f/kSB7kBAlWInA=
Subject key identifier: 1C:DE:3D:BF:1A:9C:D6:E0:7E:A2:EC:00:C5:3C:E9:C1:50:EF:7D:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0174CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/007B78C0870411F0ACA21C90DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 07:19:31 +0000
ROA not before: Mon 01 Sep 2025 07:19:26 +0000
ROA not after: Tue 30 Sep 2025 07:19:26 +0000
asID: 400046
IP address blocks: 45.194.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95434 (0x174ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 07:19:26 2025 GMT
Not After : Sep 30 07:19:26 2025 GMT
Subject: CN=68b54903-ea58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:31:d7:94:99:7e:48:6a:8c:f7:84:09:6e:
ee:75:8b:3a:12:33:51:9f:4e:8c:46:38:82:2e:97:
9b:c5:6c:89:ce:e9:5b:76:8f:30:df:dd:c3:5a:b3:
71:13:34:3a:0b:da:cf:aa:27:13:96:ac:83:dd:68:
c0:3d:6b:68:44:62:e8:9a:13:c2:16:af:96:e4:d0:
a9:fd:3d:3a:2b:aa:4a:bf:3b:d8:3a:e8:e1:ca:24:
4f:59:6d:2f:3c:04:37:3b:35:e5:0b:a1:67:7b:3d:
c4:24:fc:b6:33:4d:ea:c9:d8:ea:8c:fe:7e:a6:6a:
58:2f:46:7d:05:6d:5f:44:e1:6f:af:73:4c:bb:24:
92:f1:6e:d9:4c:d5:29:c1:cb:33:5a:e5:d7:d0:9f:
5f:39:a6:2b:49:75:58:2e:b8:01:39:b3:28:66:70:
0b:cf:8e:ed:f8:f2:07:65:b9:cc:7c:3e:26:e9:07:
f2:45:ba:9a:5d:c3:23:b1:e3:34:f3:35:46:8f:62:
de:a7:aa:26:ed:b2:e8:24:90:5b:60:cd:35:3b:91:
85:56:12:cf:01:aa:ff:de:bc:b1:b1:e5:69:7a:89:
c9:e3:38:db:18:a0:ed:a3:ee:be:77:a5:6a:f9:d7:
5a:62:c0:14:27:e2:79:90:b9:fa:c7:7c:91:70:95:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:3D:BF:1A:9C:D6:E0:7E:A2:EC:00:C5:3C:E9:C1:50:EF:7D:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/007B78C0870411F0ACA21C90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:34:61:22:a5:06:1e:38:8a:3f:df:dc:e1:b8:ae:6b:ac:4a:
93:4c:21:bc:bf:42:3b:27:d7:a9:4f:19:ef:36:d0:87:f9:3a:
a0:72:33:67:da:30:ae:58:a7:dd:32:d0:8c:34:54:d6:93:cc:
3f:73:b2:f6:1b:ba:7a:a0:4a:5b:f1:84:f1:6e:25:66:f8:75:
7f:ba:42:31:1f:29:7c:a7:27:e3:51:b7:24:a6:01:94:00:b0:
4a:79:74:b3:f1:ea:24:4a:79:21:de:ff:6b:69:cd:a3:21:02:
9d:dc:6b:cb:44:15:03:37:88:c8:4c:91:a5:d3:2c:58:ba:09:
3f:98:f4:7b:80:b7:4a:2a:93:f1:87:28:3a:32:32:b7:44:e8:
25:bc:18:4b:81:aa:ff:fb:8b:25:c7:50:88:3e:b1:c6:fa:02:
e4:b7:3f:79:00:b7:78:17:9a:c9:ff:ef:de:fc:31:82:11:d0:
37:30:24:a8:93:1d:80:1d:6d:1b:8e:ec:82:cd:8d:a9:b6:32:
49:c0:46:15:88:d8:74:70:40:d3:97:77:1e:ff:b7:fe:5b:a7:
e2:23:82:38:a6:49:2b:03:77:7a:2a:ca:a8:d0:a3:a8:62:b9:
f1:1a:30:f8:6a:0f:e2:ca:f1:cd:53:dd:1f:1b:50:51:95:c6:
a3:3b:bb:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXTKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAxMDcxOTI2WhcNMjUwOTMwMDcxOTI2WjAYMRYw
FAYDVQQDEw02OGI1NDkwMy1lYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArOEx15SZfkhqjPeECW7udYs6EjNRn06MRjiCLpebxWyJzulbdo8w393D
WrNxEzQ6C9rPqicTlqyD3WjAPWtoRGLomhPCFq+W5NCp/T06K6pKvzvYOujhyiRP
WW0vPAQ3OzXlC6Fnez3EJPy2M03qydjqjP5+pmpYL0Z9BW1fROFvr3NMuySS8W7Z
TNUpwcszWuXX0J9fOaYrSXVYLrgBObMoZnALz47t+PIHZbnMfD4m6QfyRbqaXcMj
seM08zVGj2Lep6om7bLoJJBbYM01O5GFVhLPAar/3ryxseVpeonJ4zjbGKDto+6+
d6Vq+ddaYsAUJ+J5kLn6x3yRcJV9XQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBze
Pb8anNbgfqLsAMU86cFQ732yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDdCNzhDMDg3MDQxMUYwQUNBMjFDOTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIpMA0GCSqGSIb3DQEBCwUA
A4IBAQC2NGEipQYeOIo/39zhuK5rrEqTTCG8v0I7J9epTxnvNtCH+TqgcjNn2jCu
WKfdMtCMNFTWk8w/c7L2G7p6oEpb8YTxbiVm+HV/ukIxHyl8pyfjUbckpgGUALBK
eXSz8eokSnkh3v9rac2jIQKd3GvLRBUDN4jITJGl0yxYugk/mPR7gLdKKpPxhyg6
MjK3ROglvBhLgar/+4slx1CIPrHG+gLktz95ALd4F5rJ/+/e/DGCEdA3MCSokx2A
HW0bjuyCzY2ptjJJwEYViNh0cEDTl3ce/7f+W6fiI4I4pkkrA3d6Ksqo0KOoYrnx
GjD4ag/iyvHNU90fG1BRlcajO7su
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:12:02 2025 by rpki-client