Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0832655E840911F0B80B7A9ADAE4EC9C.roa
File: 0832655E840911F0B80B7A9ADAE4EC9C.roa (raw, json)
Hash identifier: pGEY/QvID5UzHe26ZvTWmvxYqAl0yUNGOV8X4RnZYJM=
Subject key identifier: F7:81:01:D5:7D:A8:E1:AD:DE:0D:3F:97:8D:0E:22:F6:6E:2A:33:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017291
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0832655E840911F0B80B7A9ADAE4EC9C.roa
Signing time: Thu 28 Aug 2025 12:17:58 +0000
ROA not before: Thu 28 Aug 2025 12:17:53 +0000
ROA not after: Wed 08 Oct 2025 12:17:53 +0000
asID: 44559
IP address blocks: 45.196.122.0/24 maxlen: 24
45.196.123.0/24 maxlen: 24
45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94865 (0x17291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 12:17:53 2025 GMT
Not After : Oct 8 12:17:53 2025 GMT
Subject: CN=68b048f6-ea76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:6e:74:3e:4b:3d:9b:33:02:c6:eb:6b:5e:
43:26:f2:2f:a6:aa:ca:70:32:dc:7e:cb:cb:3c:0e:
23:2b:08:2f:e5:7b:79:f8:cc:73:c9:dd:5d:33:1f:
5b:3b:59:62:5c:1d:d3:de:1a:dd:34:64:aa:fd:c7:
41:42:3b:34:75:f6:f0:bf:b2:93:b8:7f:bf:a6:40:
29:c8:df:20:ae:17:9b:80:b4:97:ef:72:f9:eb:ba:
f8:3a:5e:c5:2d:26:7e:ae:f4:67:dc:95:d2:ed:5f:
97:07:2c:3f:74:7f:b6:6b:90:f5:f5:27:84:31:8c:
5b:8c:fc:32:c9:59:c2:80:08:d6:a4:06:80:1e:02:
35:70:ee:89:de:ea:34:e4:e6:08:f2:70:e2:56:b7:
21:cf:13:4c:31:44:58:37:19:0c:52:01:81:bd:50:
c4:81:27:69:4d:8c:de:00:f9:59:86:ed:fb:fa:3c:
dd:bc:05:c3:e8:b2:0b:a4:d0:06:94:22:c2:86:3e:
a1:f6:ed:bb:6f:78:5d:60:07:b0:e3:54:46:60:55:
fa:bd:e7:ff:2c:e6:6a:30:b8:c4:aa:5c:a7:8e:a3:
50:e6:6d:8e:8f:bd:36:18:00:67:51:75:41:51:9f:
ce:21:d4:4f:17:2f:6e:d3:2c:f9:4b:1d:77:a3:c3:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:01:D5:7D:A8:E1:AD:DE:0D:3F:97:8D:0E:22:F6:6E:2A:33:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0832655E840911F0B80B7A9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.122.0/23
45.202.201.0-45.202.202.255
45.202.205.0-45.202.208.255
45.202.213.0/24
45.204.65.0/24
45.204.73.0/24
45.204.75.0/24
45.207.2.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:10:10:8c:3b:64:59:c3:0b:3b:de:91:0a:0d:83:63:25:a0:
d8:92:6c:6e:2c:ec:0c:66:5a:e3:ee:3e:80:bf:07:ed:28:9c:
2e:35:3e:6d:6f:ac:d9:0f:b7:ed:fe:97:f4:38:a7:5a:c4:e1:
a5:a7:2b:99:ab:52:7c:46:a5:6d:92:d2:8b:6d:7b:d8:80:1e:
e7:58:a2:f5:de:62:4d:d4:9f:f5:02:cb:7d:95:f7:ff:5e:55:
50:af:80:53:42:5c:cc:ac:8c:94:3c:25:bd:6a:84:a0:1a:ac:
df:62:04:67:c1:0b:d7:d0:e2:8e:06:89:a4:f3:1e:70:a2:ca:
ae:d8:2e:d7:f6:21:25:d3:ba:5a:65:c0:eb:8f:a5:42:d6:56:
73:6e:ec:aa:b6:26:5a:55:1b:36:31:82:88:52:25:8a:85:e9:
a7:9a:29:c5:e6:74:d5:9c:c2:bd:99:6c:9d:d1:e9:8c:0e:2d:
16:d6:55:15:f0:22:eb:bd:ba:6a:09:17:9e:ee:b2:e6:88:6e:
ae:9b:02:5c:07:53:cc:e7:04:15:ca:8f:b6:50:7d:87:fb:c6:
55:8f:d7:b4:d2:2b:28:5c:e8:ba:0a:be:02:52:44:78:66:94:
00:c3:68:ab:38:ab:8f:df:93:fb:f0:29:ee:60:74:55:b3:6f:
dc:ed:fc:33
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIDAXKRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MTIxNzUzWhcNMjUxMDA4MTIxNzUzWjAYMRYw
FAYDVQQDEw02OGIwNDhmNi1lYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0rNudD5LPZszAsbra15DJvIvpqrKcDLcfsvLPA4jKwgv5Xt5+Mxzyd1d
Mx9bO1liXB3T3hrdNGSq/cdBQjs0dfbwv7KTuH+/pkApyN8grhebgLSX73L567r4
Ol7FLSZ+rvRn3JXS7V+XByw/dH+2a5D19SeEMYxbjPwyyVnCgAjWpAaAHgI1cO6J
3uo05OYI8nDiVrchzxNMMURYNxkMUgGBvVDEgSdpTYzeAPlZhu37+jzdvAXD6LIL
pNAGlCLChj6h9u27b3hdYAew41RGYFX6vef/LOZqMLjEqlynjqNQ5m2Oj702GABn
UXVBUZ/OIdRPFy9u0yz5Sx13o8OUCwIDAQABo4IC7jCCAuowHQYDVR0OBBYEFPeB
AdV9qOGt3g0/l40OIvZuKjPRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wODMyNjU1RTg0MDkxMUYwQjgwQjdBOUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQBLcR6MAwDBAAtyskDBAAtysow
DAMEAC3KzQMEAC3K0AMEAC3K1QMEAC3MQQMEAC3MSQMEAC3MSwMEAS3PAgMEAC3P
BgMEAi3PlAMEAC3PoDANBgkqhkiG9w0BAQsFAAOCAQEArRAQjDtkWcMLO96RCg2D
YyWg2JJsbizsDGZa4+4+gL8H7SicLjU+bW+s2Q+37f6X9DinWsThpacrmatSfEal
bZLSi2172IAe51ii9d5iTdSf9QLLfZX3/15VUK+AU0JczKyMlDwlvWqEoBqs32IE
Z8EL19DijgaJpPMecKLKrtgu1/YhJdO6WmXA64+lQtZWc27sqrYmWlUbNjGCiFIl
ioXpp5opxeZ01ZzCvZlsndHpjA4tFtZVFfAi6726agkXnu6y5ohurpsCXAdTzOcE
FcqPtlB9h/vGVY/XtNIrKFzougq+AlJEeGaUAMNoqzirj9+T+/Ap7mB0VbNv3O38
Mw==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:28:28 2025 by rpki-client