Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05456A80A28B11F089B1F3B5DAE4EC9C.roa
File: 05456A80A28B11F089B1F3B5DAE4EC9C.roa (raw, json)
Hash identifier: 27cr0S3kYRTMwOcsMkITcSmmWGhFg/RzPcdHgZhBav0=
Subject key identifier: 79:A5:C6:68:81:4E:B2:60:73:EE:DE:D9:D5:6C:33:52:7B:5C:B4:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05456A80A28B11F089B1F3B5DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:04:02 +0000
ROA not before: Mon 06 Oct 2025 08:03:57 +0000
ROA not after: Sun 09 Nov 2025 08:03:57 +0000
asID: 215391
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98020 (0x17ee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:03:57 2025 GMT
Not After : Nov 9 08:03:57 2025 GMT
Subject: CN=68e377f2-eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:60:3d:32:92:b3:d7:fa:9a:cc:38:99:a4:
d0:40:10:9c:02:c1:ff:ef:fd:9b:d9:41:b5:de:6c:
4c:71:55:08:ba:81:ee:fd:c4:46:6d:ec:15:b5:af:
fc:be:62:43:18:6b:8e:60:97:01:02:95:b3:18:02:
2b:32:37:3f:4c:b1:a6:c4:7c:7d:15:8d:d6:8e:32:
dd:f5:ed:81:d5:3b:89:24:b7:f8:8e:aa:72:fc:72:
e4:fb:8e:a3:3f:a8:0d:75:f0:be:cb:a3:f1:80:76:
6d:d1:de:cb:3c:f7:03:5d:c2:e5:fc:15:77:b6:32:
e6:3e:d9:ab:31:c8:c1:cf:38:00:0b:3e:60:81:b7:
6b:59:b6:a9:85:05:87:96:e7:27:3a:3d:21:ac:1a:
69:c0:04:d5:05:dd:9c:69:06:37:40:c3:df:4c:34:
a2:03:60:d8:b1:d7:ff:1a:b0:3a:2f:3a:fb:e7:18:
2e:7a:70:7b:61:25:d0:32:7c:23:e8:60:bb:5d:6d:
e9:1e:c7:dc:88:9b:f6:cc:de:a8:7a:8c:69:01:63:
13:43:4d:33:d5:05:44:b8:6b:f7:7f:51:d7:66:c9:
b0:15:7d:96:1f:82:3b:48:27:71:67:95:27:3b:f9:
77:52:68:e9:19:a6:e7:8d:0a:dc:5e:04:d9:aa:99:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:C6:68:81:4E:B2:60:73:EE:DE:D9:D5:6C:33:52:7B:5C:B4:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05456A80A28B11F089B1F3B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7d:08:3a:1e:2b:b1:b0:70:a3:f6:70:d1:a9:62:5d:ac:19:
f2:d0:1f:fb:00:80:23:ce:3f:e5:a2:39:dd:db:30:a1:21:c5:
ab:2e:25:a9:b8:19:7b:da:f2:8d:98:2b:ea:41:89:61:e6:1f:
75:7d:67:61:8c:71:f0:e9:a5:a6:f3:7b:43:72:41:77:59:b4:
06:79:bc:32:a6:da:4f:ae:4f:d9:ed:8c:96:68:98:16:49:c0:
bf:7e:86:2d:ee:c2:90:13:ea:43:18:9d:cc:e9:65:ac:1f:92:
be:75:db:d9:3a:f6:ea:76:33:b9:cb:7f:9b:56:cf:93:9d:b5:
fb:e4:89:23:82:53:d4:a1:50:e4:77:ae:07:45:f9:b2:54:c1:
56:df:1d:ff:3c:51:b5:09:81:60:03:8c:88:0d:5c:4e:d6:d6:
36:03:d3:82:09:ce:82:21:9d:4d:87:5d:56:1d:80:09:be:71:
f2:f9:b8:5a:a3:c4:80:1c:90:04:a7:e0:68:59:15:f3:7c:94:
e5:2a:07:52:35:f0:a8:88:3f:39:aa:8f:f0:04:82:7e:64:fb:
85:ec:85:1b:08:c8:d1:a3:37:b8:21:1e:cd:5d:cd:96:ec:db:
18:86:13:c6:46:8f:2d:21:50:26:9b:19:42:f5:c0:74:54:9f:
e5:ce:cc:af
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX7kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDA2MDgwMzU3WhcNMjUxMTA5MDgwMzU3WjAYMRYw
FAYDVQQDEw02OGUzNzdmMi1lYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4VtgPTKSs9f6msw4maTQQBCcAsH/7/2b2UG13mxMcVUIuoHu/cRGbewV
ta/8vmJDGGuOYJcBApWzGAIrMjc/TLGmxHx9FY3WjjLd9e2B1TuJJLf4jqpy/HLk
+46jP6gNdfC+y6PxgHZt0d7LPPcDXcLl/BV3tjLmPtmrMcjBzzgACz5ggbdrWbap
hQWHlucnOj0hrBppwATVBd2caQY3QMPfTDSiA2DYsdf/GrA6Lzr75xguenB7YSXQ
Mnwj6GC7XW3pHsfciJv2zN6oeoxpAWMTQ00z1QVEuGv3f1HXZsmwFX2WH4I7SCdx
Z5UnO/l3UmjpGabnjQrcXgTZqpltCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHml
xmiBTrJgc+7e2dVsM1J7XLT5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNTQ1NkE4MEEyOEIxMUYwODlCMUYzQjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcATMA0GCSqGSIb3DQEBCwUA
A4IBAQABfQg6HiuxsHCj9nDRqWJdrBny0B/7AIAjzj/lojnd2zChIcWrLiWpuBl7
2vKNmCvqQYlh5h91fWdhjHHw6aWm83tDckF3WbQGebwyptpPrk/Z7YyWaJgWScC/
foYt7sKQE+pDGJ3M6WWsH5K+ddvZOvbqdjO5y3+bVs+TnbX75IkjglPUoVDkd64H
RfmyVMFW3x3/PFG1CYFgA4yIDVxO1tY2A9OCCc6CIZ1Nh11WHYAJvnHy+bhao8SA
HJAEp+BoWRXzfJTlKgdSNfCoiD85qo/wBIJ+ZPuF7IUbCMjRoze4IR7NXc2W7NsY
hhPGRo8tIVAmmxlC9cB0VJ/lzsyv
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:47 2025 by rpki-client