Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1297F1E4947611F09D13EFF5DAE4EC9C.roa
File: 1297F1E4947611F09D13EFF5DAE4EC9C.roa (raw, json)
Hash identifier: E+Ba3j4mdbPMZ7ZLg889/SM4eYlsj1ctvZPFM22YWqo=
Subject key identifier: E7:B4:C7:93:DC:59:84:D0:26:49:A2:40:9C:2A:F8:CB:C1:EA:00:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1297F1E4947611F09D13EFF5DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 09:58:49 +0000
ROA not before: Thu 18 Sep 2025 09:58:44 +0000
ROA not after: Thu 30 Oct 2025 09:58:44 +0000
asID: 62468
IP address blocks: 45.204.201.0/24 maxlen: 24
45.204.202.0/24 maxlen: 24
45.204.203.0/24 maxlen: 24
45.204.204.0/24 maxlen: 24
45.204.205.0/24 maxlen: 24
45.204.206.0/24 maxlen: 24
45.204.207.0/24 maxlen: 24
45.204.208.0/24 maxlen: 24
45.204.209.0/24 maxlen: 24
45.204.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97276 (0x17bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 09:58:44 2025 GMT
Not After : Oct 30 09:58:44 2025 GMT
Subject: CN=68cbd7d9-0092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:40:65:01:7c:c2:83:ce:31:20:aa:5d:de:
c3:3b:c8:ac:7a:5c:af:05:c1:03:6f:c6:81:10:f6:
79:b4:98:18:1c:46:59:d2:94:1a:f6:27:b8:20:8d:
ef:2f:af:81:fa:83:ef:bb:31:c3:42:c6:06:2f:7b:
f1:a0:c9:27:76:b4:26:a7:9a:82:75:69:e5:35:73:
e9:73:54:d0:d1:9f:f0:fb:9c:bf:e7:eb:e6:54:ed:
68:4c:a8:b7:8c:fc:8c:0c:6d:5b:62:82:38:66:4b:
64:14:ed:a6:89:4b:36:02:55:be:ac:d3:bf:6e:1c:
48:f3:ba:83:91:fa:b2:fe:cf:dc:1d:08:df:8e:67:
3f:e8:76:07:d3:b0:27:d0:e1:34:7b:18:cb:93:37:
c1:29:05:2a:4b:f4:f5:01:6a:08:8f:75:be:18:5b:
d1:b3:c5:1c:92:ae:57:df:49:b5:16:a0:a7:ce:a0:
ed:de:f5:72:57:49:a2:ac:ef:2a:b1:81:fa:c5:12:
6d:29:5f:d9:b8:b7:98:dc:42:f2:ea:a9:79:25:9d:
db:d1:34:14:87:67:43:09:e3:34:5d:10:f2:97:14:
13:83:af:1d:6b:7e:91:e8:98:8c:82:0e:ab:5d:76:
40:f9:4f:97:18:39:31:50:5c:ad:74:94:23:f2:13:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:C7:93:DC:59:84:D0:26:49:A2:40:9C:2A:F8:CB:C1:EA:00:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1297F1E4947611F09D13EFF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.201.0-45.204.210.255
Signature Algorithm: sha256WithRSAEncryption
5d:6a:e5:1f:23:22:16:77:3f:9a:3f:86:03:eb:62:9e:ba:e5:
b9:95:65:79:01:ac:5d:1a:5a:a1:89:e7:ad:7c:fb:1a:99:09:
8c:3f:14:dc:c3:35:dc:91:70:f5:35:70:2a:00:99:92:61:f1:
39:e3:bd:13:d4:6d:3e:ae:84:3b:2a:1a:cc:31:ca:a6:95:14:
8d:ed:d2:23:6d:9e:29:16:73:44:ad:7d:2a:cf:a9:d9:48:29:
42:b8:29:00:60:09:34:12:6d:37:94:c7:13:fb:73:96:da:57:
8b:bb:ef:24:fe:30:30:6c:b2:7c:ea:b0:04:54:43:93:d0:ea:
40:a4:07:ac:57:79:6d:b9:89:4e:c6:84:b5:76:3e:9d:ba:c0:
22:3c:a6:e6:b0:36:66:3b:08:75:a0:41:ed:a7:2b:2c:dc:e3:
f2:c0:86:52:77:50:01:d4:e5:7d:fb:bc:cc:79:20:55:54:51:
3d:b7:70:9a:51:fc:10:01:bc:35:27:79:c1:2c:75:7c:3f:08:
f7:49:9d:ff:e0:06:17:b6:ae:1b:25:94:b9:4c:7b:74:29:e2:
a7:89:d2:39:18:26:de:55:24:6f:87:ce:43:d6:45:c9:a7:d2:
b0:98:d9:66:1a:33:93:86:ad:45:da:c1:45:2d:a2:c7:2d:bb:
40:ec:ab:c7
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAXv8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE4MDk1ODQ0WhcNMjUxMDMwMDk1ODQ0WjAYMRYw
FAYDVQQDEw02OGNiZDdkOS0wMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzulAZQF8woPOMSCqXd7DO8iselyvBcEDb8aBEPZ5tJgYHEZZ0pQa9ie4
II3vL6+B+oPvuzHDQsYGL3vxoMkndrQmp5qCdWnlNXPpc1TQ0Z/w+5y/5+vmVO1o
TKi3jPyMDG1bYoI4ZktkFO2miUs2AlW+rNO/bhxI87qDkfqy/s/cHQjfjmc/6HYH
07An0OE0exjLkzfBKQUqS/T1AWoIj3W+GFvRs8Uckq5X30m1FqCnzqDt3vVyV0mi
rO8qsYH6xRJtKV/ZuLeY3ELy6ql5JZ3b0TQUh2dDCeM0XRDylxQTg68da36R6JiM
gg6rXXZA+U+XGDkxUFytdJQj8hOkbQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOe0
x5PcWYTQJkmiQJwq+MvB6gANMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMjk3RjFFNDk0NzYxMUYwOUQxM0VGRjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtzMkDBAAtzNIwDQYJKoZI
hvcNAQELBQADggEBAF1q5R8jIhZ3P5o/hgPrYp665bmVZXkBrF0aWqGJ5618+xqZ
CYw/FNzDNdyRcPU1cCoAmZJh8TnjvRPUbT6uhDsqGswxyqaVFI3t0iNtnikWc0St
fSrPqdlIKUK4KQBgCTQSbTeUxxP7c5baV4u77yT+MDBssnzqsARUQ5PQ6kCkB6xX
eW25iU7GhLV2Pp26wCI8puawNmY7CHWgQe2nKyzc4/LAhlJ3UAHU5X37vMx5IFVU
UT23cJpR/BABvDUnecEsdXw/CPdJnf/gBhe2rhsllLlMe3Qp4qeJ0jkYJt5VJG+H
zkPWRcmn0rCY2WYaM5OGrUXawUUtosctu0Dsq8c=
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:13 2025 by rpki-client