Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18FA97DA833711F08D634EBBDAE4EC9C.roa
File: 18FA97DA833711F08D634EBBDAE4EC9C.roa (raw, json)
Hash identifier: xd5+y82WapK5/lkCszsJCEj6w8V81OCBUgX3Iuzdzk4=
Subject key identifier: 9E:26:CC:C4:7C:77:F0:02:74:FB:6B:E1:25:C3:5E:E6:B3:68:62:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18FA97DA833711F08D634EBBDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:15:12 +0000
ROA not before: Wed 27 Aug 2025 11:15:07 +0000
ROA not after: Sat 04 Oct 2025 11:15:07 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94629 (0x171a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 11:15:07 2025 GMT
Not After : Oct 4 11:15:07 2025 GMT
Subject: CN=68aee8c0-e204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:41:fe:d0:26:23:ad:9d:44:1e:c9:b3:79:
91:f4:9e:e7:ad:26:dc:dd:8f:a0:4b:87:3c:7e:3d:
75:23:de:1f:92:b6:d7:5a:3c:1c:14:eb:a3:59:b8:
a2:8d:6e:8c:27:0c:d2:10:41:5f:da:77:95:7e:53:
34:fd:0e:48:ec:8e:28:78:d3:7d:d5:8f:57:85:eb:
df:07:0d:88:1d:8d:49:e9:1f:e9:87:93:7f:d4:b1:
40:30:5c:55:29:af:07:08:86:7f:89:2a:91:7a:12:
b5:87:d8:c9:00:9f:bb:61:d5:53:08:77:e4:35:13:
74:bd:32:68:41:ff:e9:9c:8c:60:27:d4:b3:1c:84:
31:46:a0:2b:ba:dd:aa:a7:fe:a7:c2:aa:39:38:20:
3a:ac:f7:76:e6:3c:ba:68:85:6b:d6:a9:ca:19:98:
69:9d:0c:7d:df:13:7e:8f:e2:1b:ee:d2:ac:02:bc:
f3:ea:c6:2a:b3:4b:92:ae:85:0b:5f:51:80:f1:d4:
3a:6e:cc:0e:b4:e0:11:b7:e4:f6:36:73:90:1f:5b:
9b:c2:f4:3c:c9:ff:68:75:00:bf:62:48:d8:e7:80:
23:71:80:1c:06:7e:21:83:04:96:d5:f7:52:ea:af:
ef:27:4f:c0:2c:49:78:f9:cc:72:9b:24:09:86:8f:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:CC:C4:7C:77:F0:02:74:FB:6B:E1:25:C3:5E:E6:B3:68:62:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18FA97DA833711F08D634EBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fb:d9:c5:f1:42:0a:f0:76:7e:ee:77:19:53:28:82:f8:18:
88:f1:a6:c0:ee:ff:65:e5:d4:b7:e8:b0:15:6a:72:69:ac:16:
d4:17:f0:93:b2:19:9e:4b:d2:ae:08:39:94:0f:81:73:c5:d6:
28:f0:29:8a:6c:a5:cf:03:10:a1:11:17:15:fd:a9:67:95:7c:
a7:e9:43:4a:0e:8c:09:53:50:67:cc:2e:c7:f2:4c:44:65:45:
c2:e0:0f:9d:aa:86:54:c4:2a:c7:db:82:48:51:47:7d:10:eb:
fb:f7:a6:53:a0:63:10:cc:0c:f0:f5:ef:9b:1c:af:82:24:7d:
cd:2e:24:28:eb:34:ed:02:64:7d:80:70:19:07:e0:19:09:e5:
81:b2:1a:ba:5a:64:30:a1:d2:8f:89:70:c0:70:c3:71:24:fe:
84:c2:c5:fb:de:d4:80:0d:82:01:e7:84:6b:c4:05:d6:61:0c:
d2:a0:b1:18:d9:b0:f7:73:d4:6b:c5:88:6c:61:7d:bd:39:1f:
07:7f:77:d6:6a:b4:50:c4:97:c3:ca:61:9b:f6:ff:4b:d2:93:
db:bc:9d:2f:32:eb:97:54:21:af:ef:e5:6a:36:22:d4:f8:85:
e8:8f:3d:c9:3b:a2:77:fb:ec:0b:0b:d7:68:a9:28:a8:f9:6c:
07:7e:7c:4c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXGlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI3MTExNTA3WhcNMjUxMDA0MTExNTA3WjAYMRYw
FAYDVQQDEw02OGFlZThjMC1lMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr4JB/tAmI62dRB7Js3mR9J7nrSbc3Y+gS4c8fj11I94fkrbXWjwcFOuj
WbiijW6MJwzSEEFf2neVflM0/Q5I7I4oeNN91Y9XhevfBw2IHY1J6R/ph5N/1LFA
MFxVKa8HCIZ/iSqRehK1h9jJAJ+7YdVTCHfkNRN0vTJoQf/pnIxgJ9SzHIQxRqAr
ut2qp/6nwqo5OCA6rPd25jy6aIVr1qnKGZhpnQx93xN+j+Ib7tKsArzz6sYqs0uS
roULX1GA8dQ6bswOtOARt+T2NnOQH1ubwvQ8yf9odQC/YkjY54AjcYAcBn4hgwSW
1fdS6q/vJ0/ALEl4+cxymyQJho8akQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ4m
zMR8d/ACdPtr4SXDXuazaGJdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOEZBOTdEQTgzMzcxMUYwOEQ2MzRFQkJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDoMA0GCSqGSIb3DQEBCwUA
A4IBAQCP+9nF8UIK8HZ+7ncZUyiC+BiI8abA7v9l5dS36LAVanJprBbUF/CTshme
S9KuCDmUD4FzxdYo8CmKbKXPAxChERcV/alnlXyn6UNKDowJU1BnzC7H8kxEZUXC
4A+dqoZUxCrH24JIUUd9EOv796ZToGMQzAzw9e+bHK+CJH3NLiQo6zTtAmR9gHAZ
B+AZCeWBshq6WmQwodKPiXDAcMNxJP6EwsX73tSADYIB54RrxAXWYQzSoLEY2bD3
c9RrxYhsYX29OR8Hf3fWarRQxJfDymGb9v9L0pPbvJ0vMuuXVCGv7+VqNiLU+IXo
jz3JO6J3++wLC9doqSio+WwHfnxM
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:15:30 2025 by rpki-client