Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AA83CD63BA311F090EE87A0DAE4EC9C.roa
File: 0AA83CD63BA311F090EE87A0DAE4EC9C.roa (raw, json)
Hash identifier: HGu7DEFKgaeW9fAZeNs4X3X4pIEToINS06H9IDkkmm8=
Subject key identifier: 05:44:03:9D:F8:BD:3A:A1:CC:6E:EC:4C:36:2A:84:E5:89:E0:8A:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015821
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AA83CD63BA311F090EE87A0DAE4EC9C.roa
Signing time: Wed 28 May 2025 09:06:30 +0000
ROA not before: Wed 28 May 2025 09:06:25 +0000
ROA not after: Sat 27 Jun 2026 09:06:25 +0000
asID: 984
IP address blocks: 45.203.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88097 (0x15821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 09:06:25 2025 GMT
Not After : Jun 27 09:06:25 2026 GMT
Subject: CN=6836d216-22f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:a8:3b:77:49:46:ce:a2:c6:d2:9a:c9:38:
dc:93:0b:a1:ba:fb:22:fa:a5:ef:38:a6:90:3a:09:
98:18:a6:0c:ef:80:b0:8b:7c:b0:d7:cd:8e:93:3e:
f5:79:f4:4c:be:fb:2a:57:11:e8:07:13:ab:a4:f6:
22:a3:74:61:88:27:6a:cd:73:94:35:0a:16:d9:f2:
db:c9:86:a8:c9:87:83:ad:4d:7c:0e:f8:a5:e5:9c:
da:7a:f9:6a:7e:dc:27:a2:84:d7:5d:fd:5d:8d:29:
a6:f7:95:67:c2:61:28:07:0c:11:e9:13:7a:eb:a2:
0a:66:85:06:b7:24:1e:d6:9c:9d:45:75:b8:ae:d3:
58:fd:11:e1:89:e8:a0:8c:0e:f1:d3:a7:b8:9f:3e:
2e:ec:9c:12:06:9d:66:49:06:e8:c1:1d:75:1f:b2:
88:5c:c2:1e:53:3e:cb:cb:a4:4b:75:b5:c9:ac:c7:
06:e8:42:2b:d2:74:80:0b:00:f4:fa:3e:86:97:b8:
4d:7e:f1:bc:8f:9a:89:ee:a0:22:81:72:f5:1a:83:
96:52:b2:32:bf:f6:ab:01:14:44:6c:09:35:57:10:
45:2c:73:1c:b7:74:c5:80:4b:9f:02:3d:d8:b1:68:
2e:88:28:bb:5c:c0:35:1d:4d:28:95:29:0e:94:ca:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:44:03:9D:F8:BD:3A:A1:CC:6E:EC:4C:36:2A:84:E5:89:E0:8A:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AA83CD63BA311F090EE87A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.248.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f4:23:4f:c0:22:d8:22:d9:ca:f6:7e:ec:78:eb:85:71:16:
f6:a9:83:bd:60:b2:64:74:ff:4d:5a:b0:72:7d:23:76:87:3d:
45:05:74:78:06:cc:8a:ef:94:2f:3e:27:eb:f4:e6:a1:d5:ea:
e1:4e:1b:e1:96:6a:c7:a2:60:8c:8b:3b:d0:91:77:19:14:25:
5c:92:b1:07:97:ac:ec:bf:85:55:4d:7f:36:ac:7f:11:5e:08:
d1:5f:fc:1c:8c:49:61:81:2d:b3:25:98:55:b9:4d:17:9a:7e:
77:6c:98:fd:67:fa:a7:b9:ea:0f:8b:66:d4:fd:56:96:6e:71:
f5:e0:de:3d:10:72:05:a9:7c:bf:06:f4:71:e4:45:5f:a8:a2:
f4:c3:18:a4:e8:22:f7:47:a8:fa:48:8b:84:72:e3:da:03:b0:
60:86:a6:ea:4b:c9:aa:7d:7b:8d:91:eb:3a:60:bf:6f:40:d2:
56:f3:30:ed:fb:73:17:5b:a9:e8:df:c1:01:05:37:04:cb:59:
92:00:11:73:89:54:b0:27:d2:9c:55:64:f5:a9:26:c2:bd:27:
66:66:81:67:8a:88:89:7c:f8:20:0f:19:a3:fa:c0:dd:bb:39:
96:4c:a8:1f:91:4b:a7:6d:46:bf:86:fd:4d:13:9b:9f:22:37:
d4:61:e0:5c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVghMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTI4MDkwNjI1WhcNMjYwNjI3MDkwNjI1WjAYMRYw
FAYDVQQDEw02ODM2ZDIxNi0yMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqgGoO3dJRs6ixtKayTjckwuhuvsi+qXvOKaQOgmYGKYM74Cwi3yw182O
kz71efRMvvsqVxHoBxOrpPYio3RhiCdqzXOUNQoW2fLbyYaoyYeDrU18Dvil5Zza
evlqftwnooTXXf1djSmm95VnwmEoBwwR6RN666IKZoUGtyQe1pydRXW4rtNY/RHh
ieigjA7x06e4nz4u7JwSBp1mSQbowR11H7KIXMIeUz7Ly6RLdbXJrMcG6EIr0nSA
CwD0+j6Gl7hNfvG8j5qJ7qAigXL1GoOWUrIyv/arARREbAk1VxBFLHMct3TFgEuf
Aj3YsWguiCi7XMA1HU0olSkOlMpyRQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAVE
A534vTqhzG7sTDYqhOWJ4IqcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQUE4M0NENjNCQTMxMUYwOTBFRTg3QTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcv4MA0GCSqGSIb3DQEBCwUA
A4IBAQCQ9CNPwCLYItnK9n7seOuFcRb2qYO9YLJkdP9NWrByfSN2hz1FBXR4BsyK
75QvPifr9Oah1erhThvhlmrHomCMizvQkXcZFCVckrEHl6zsv4VVTX82rH8RXgjR
X/wcjElhgS2zJZhVuU0Xmn53bJj9Z/qnueoPi2bU/VaWbnH14N49EHIFqXy/BvRx
5EVfqKL0wxik6CL3R6j6SIuEcuPaA7BghqbqS8mqfXuNkes6YL9vQNJW8zDt+3MX
W6no38EBBTcEy1mSABFziVSwJ9KcVWT1qSbCvSdmZoFnioiJfPggDxmj+sDduzmW
TKgfkUunbUa/hv1NE5ufIjfUYeBc
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:03 2025 by rpki-client