Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15FDE514995811F094CF958ADAE4EC9C.roa
File: 15FDE514995811F094CF958ADAE4EC9C.roa (raw, json)
Hash identifier: S/9m4qxgZmh7Zu1yVzkB7ndqgZKU40DIKUZMABRoiII=
Subject key identifier: 37:FE:A2:2B:5C:9F:16:29:66:70:0B:B1:B0:5C:A8:97:B1:5F:60:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15FDE514995811F094CF958ADAE4EC9C.roa
Signing time: Wed 24 Sep 2025 15:06:46 +0000
ROA not before: Wed 24 Sep 2025 15:06:40 +0000
ROA not after: Thu 30 Oct 2025 15:06:40 +0000
asID: 401783
IP address blocks: 45.197.3.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.197.24.0/24 maxlen: 24
45.198.5.0/24 maxlen: 24
45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97511 (0x17ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 15:06:40 2025 GMT
Not After : Oct 30 15:06:40 2025 GMT
Subject: CN=68d40906-dbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:13:54:a9:fa:79:d5:45:2f:4a:ca:7b:bc:
2f:4e:b2:ac:e8:74:6a:9e:8f:55:79:2f:a3:1c:b3:
e4:d8:e8:45:73:25:a1:47:aa:f6:fa:81:32:0a:47:
9f:a5:c7:12:45:32:d3:42:24:e3:bb:a3:86:ce:cd:
78:6d:8f:92:21:6f:74:b4:9b:23:0f:fe:79:e3:40:
fb:26:42:7b:c7:f0:aa:e6:a4:5f:3d:c0:b9:53:12:
0e:61:a6:00:06:56:fc:f2:94:f9:30:33:5a:9e:26:
83:24:6c:27:d6:ed:33:6a:ca:3d:6c:a1:bb:0f:01:
35:5b:00:b1:6d:e8:5a:96:d6:d8:b8:37:4d:e8:a1:
f6:d7:27:52:b6:d1:da:4b:5b:24:22:69:59:41:73:
b3:b5:8c:7a:50:8a:b5:4a:2e:4d:b5:0d:f2:48:04:
c3:e0:2e:77:6a:96:89:94:8d:c7:28:e1:5d:fa:bc:
12:67:fa:66:05:64:be:a9:54:a5:1f:96:7b:94:6c:
ea:39:bb:b9:5d:e6:dd:3d:19:f9:cb:2f:9c:63:e2:
bc:c7:82:38:a4:12:69:f9:e8:95:3e:bb:62:d7:6a:
24:e9:2b:83:ad:22:27:e9:db:33:33:43:f8:d7:52:
8c:b6:fb:29:ab:a1:e3:e7:1e:96:b9:0d:a3:4e:a7:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FE:A2:2B:5C:9F:16:29:66:70:0B:B1:B0:5C:A8:97:B1:5F:60:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15FDE514995811F094CF958ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.3.0/24
45.197.8.0/24
45.197.10.0/23
45.197.24.0/24
45.198.5.0/24
45.198.16.0-45.198.18.255
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cb:39:97:14:80:b0:75:2d:ed:7a:30:4e:79:e2:07:10:91:
12:cc:7d:d8:15:60:5e:cc:e8:90:90:ca:10:1c:6d:d8:65:a7:
da:39:2d:42:1f:01:60:dc:ae:71:c6:e9:55:89:25:7b:25:df:
9e:db:07:9a:d5:a1:db:f0:f2:a6:34:1d:ee:e6:60:84:b6:64:
c9:5e:3f:4d:ef:52:2c:d5:c5:c7:c0:54:46:79:aa:6d:91:fd:
20:74:5e:8a:4e:14:c8:ce:98:3f:28:3e:30:26:7b:ac:00:6a:
11:69:d0:9c:f4:47:f2:d2:b5:4f:fb:68:3e:8a:a6:65:0a:68:
18:b4:cf:51:63:d3:60:46:d4:38:75:00:bf:a2:3a:f1:e5:3e:
b5:ba:b8:e5:f5:11:47:d7:72:e9:e3:a5:26:5e:36:a5:50:16:
32:11:78:3b:b7:96:7f:81:83:6e:71:f7:1e:cc:71:19:3c:67:
a4:3c:6f:44:c3:b7:b7:f5:b7:84:95:48:6f:bf:fb:15:9b:8c:
d0:6e:5f:57:cf:8d:44:1f:5b:10:41:e4:01:c2:c0:e6:bf:90:
9d:62:43:bf:ad:96:74:61:6c:60:38:2a:64:89:1e:ed:81:80:
fc:af:38:93:38:50:da:b7:e3:52:b8:1d:6a:24:5b:f3:8b:49:
de:8b:a4:da
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIDAXznMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI0MTUwNjQwWhcNMjUxMDMwMTUwNjQwWjAYMRYw
FAYDVQQDEw02OGQ0MDkwNi1kYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxQoTVKn6edVFL0rKe7wvTrKs6HRqno9VeS+jHLPk2OhFcyWhR6r2+oEy
CkefpccSRTLTQiTju6OGzs14bY+SIW90tJsjD/5540D7JkJ7x/Cq5qRfPcC5UxIO
YaYABlb88pT5MDNaniaDJGwn1u0zaso9bKG7DwE1WwCxbehaltbYuDdN6KH21ydS
ttHaS1skImlZQXOztYx6UIq1Si5NtQ3ySATD4C53apaJlI3HKOFd+rwSZ/pmBWS+
qVSlH5Z7lGzqObu5XebdPRn5yy+cY+K8x4I4pBJp+eiVPrti12ok6SuDrSIn6dsz
M0P411KMtvspq6Hj5x6WuQ2jTqeT/wIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFDf+
oitcnxYpZnALsbBcqJexX2CrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNUZERTUxNDk5NTgxMUYwOTRDRjk1OEFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQALcUDAwQALcUIAwQBLcUKAwQA
LcUYAwQALcYFMAwDBAQtxhADBAAtxhIDBAAtySMwDAMEAC3JKQMEAC3JKgMEAC3J
MAMEAC3JPTANBgkqhkiG9w0BAQsFAAOCAQEAB8s5lxSAsHUt7XowTnniBxCREsx9
2BVgXszokJDKEBxt2GWn2jktQh8BYNyuccbpVYkleyXfntsHmtWh2/DypjQd7uZg
hLZkyV4/Te9SLNXFx8BURnmqbZH9IHReik4UyM6YPyg+MCZ7rABqEWnQnPRH8tK1
T/toPoqmZQpoGLTPUWPTYEbUOHUAv6I68eU+tbq45fURR9dy6eOlJl42pVAWMhF4
O7eWf4GDbnH3HsxxGTxnpDxvRMO3t/W3hJVIb7/7FZuM0G5fV8+NRB9bEEHkAcLA
5r+QnWJDv62WdGFsYDgqZIke7YGA/K84kzhQ2rfjUrgdaiRb84tJ3ouk2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:52 2025 by rpki-client