Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D25FA0832811F0B236A3D8DAE4EC9C.roa
File: 26D25FA0832811F0B236A3D8DAE4EC9C.roa (raw, json)
Hash identifier: BTm+C72j+ZCrA4OfMu/pdAVDgHLwlxHtQCBysGdk1sQ=
Subject key identifier: C9:F8:AF:BE:A8:4B:3B:34:62:49:71:8C:92:5D:BE:1F:5C:40:A7:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01716D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D25FA0832811F0B236A3D8DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 09:28:12 +0000
ROA not before: Wed 27 Aug 2025 09:28:07 +0000
ROA not after: Wed 01 Oct 2025 09:28:07 +0000
asID: 20326
IP address blocks: 45.196.193.0/24 maxlen: 24
45.196.201.0/24 maxlen: 24
45.198.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94573 (0x1716d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 09:28:07 2025 GMT
Not After : Oct 1 09:28:07 2025 GMT
Subject: CN=68aecfac-0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:f0:63:a8:5d:58:49:a0:6c:3a:7a:bd:77:
ab:a6:9a:4b:2c:98:15:d6:ac:63:40:5b:b0:e6:80:
2b:e2:ce:69:d7:df:56:1d:ea:3d:3f:5c:e7:b9:5b:
cc:cc:1c:25:82:92:2c:93:ff:43:64:a0:be:0e:1f:
5a:1b:c1:1f:ce:e1:d8:02:da:11:90:b0:9b:c4:fa:
5a:22:09:78:f9:e6:66:de:f1:0c:7a:a3:22:43:87:
e7:63:b2:87:36:82:c2:59:5f:d4:2f:73:bb:7d:69:
b0:38:79:d7:ed:99:d7:12:15:99:43:75:e7:db:d5:
6d:67:81:fb:96:79:43:ea:05:07:9b:14:8b:03:55:
b1:45:75:17:29:66:1c:86:2e:12:01:72:dd:de:3b:
33:17:6e:19:b2:c4:dd:8b:34:9c:2f:4c:65:78:30:
6b:3f:ea:56:11:32:5a:a0:c0:15:b8:85:5b:fc:23:
8a:55:d1:a5:b7:2d:01:a6:93:0b:40:c0:3d:cb:af:
82:e1:2a:36:2a:a1:3b:1c:43:fb:bd:7e:d3:38:0a:
e2:d1:9b:62:8b:e8:73:d3:b3:64:06:7f:3a:4b:eb:
d4:ab:7e:a0:dc:64:bc:8f:ff:0b:53:b5:96:ed:44:
18:ad:54:d4:12:b5:b8:73:45:5c:80:b1:5f:8a:03:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:AF:BE:A8:4B:3B:34:62:49:71:8C:92:5D:BE:1F:5C:40:A7:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D25FA0832811F0B236A3D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.193.0/24
45.196.201.0/24
45.198.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:ac:5f:a8:0e:c7:fe:3c:01:80:f0:c0:5e:a8:da:9c:f1:89:
f8:15:04:e3:18:33:b4:1d:53:32:ac:fb:c3:74:56:ee:83:a9:
7b:ec:42:83:7f:71:6e:4b:d3:2c:f8:11:e2:d8:88:88:86:49:
4f:a5:92:1d:48:6a:e5:7a:f2:3e:8a:9e:aa:92:7c:74:4a:7c:
f2:14:91:1d:05:c2:77:a1:60:29:ad:c4:53:22:79:df:c8:77:
f5:2f:87:f1:3c:96:c1:c1:88:35:25:c2:22:5b:dd:ba:7f:cb:
6c:fe:f3:12:5a:0a:35:5e:c5:90:0a:e4:89:16:18:d6:72:13:
dc:eb:a1:04:60:65:b1:f4:11:32:38:0a:9d:fd:a7:68:a4:51:
c7:33:e9:b7:f9:75:f1:1c:5d:f3:c4:11:b4:5b:fe:86:eb:bf:
b6:76:8a:c2:ce:c1:aa:83:e3:01:f4:cf:5e:9f:ee:a6:88:f4:
5c:1d:fb:76:f0:58:63:86:41:bb:ac:36:de:5e:70:e8:ca:df:
79:66:0d:e7:a9:46:e0:cc:ef:f4:63:77:a4:69:b9:76:d5:51:
43:aa:f2:99:d6:cc:c0:37:50:32:a8:29:0d:a2:21:80:51:65:
7d:12:f7:af:65:bf:7b:c2:48:6b:ad:c9:27:69:e2:2c:76:3b:
6e:bf:a3:45
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAXFtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI3MDkyODA3WhcNMjUxMDAxMDkyODA3WjAYMRYw
FAYDVQQDEw02OGFlY2ZhYy0wY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzMfwY6hdWEmgbDp6vXerpppLLJgV1qxjQFuw5oAr4s5p199WHeo9P1zn
uVvMzBwlgpIsk/9DZKC+Dh9aG8EfzuHYAtoRkLCbxPpaIgl4+eZm3vEMeqMiQ4fn
Y7KHNoLCWV/UL3O7fWmwOHnX7ZnXEhWZQ3Xn29VtZ4H7lnlD6gUHmxSLA1WxRXUX
KWYchi4SAXLd3jszF24ZssTdizScL0xleDBrP+pWETJaoMAVuIVb/COKVdGlty0B
ppMLQMA9y6+C4So2KqE7HEP7vX7TOAri0Ztii+hz07NkBn86S+vUq36g3GS8j/8L
U7WW7UQYrVTUErW4c0VcgLFfigPaCQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFMn4
r76oSzs0YklxjJJdvh9cQKcKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNkQyNUZBMDgzMjgxMUYwQjIzNkEzRDhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALcTBAwQALcTJAwQBLcb8MA0G
CSqGSIb3DQEBCwUAA4IBAQBqrF+oDsf+PAGA8MBeqNqc8Yn4FQTjGDO0HVMyrPvD
dFbug6l77EKDf3FuS9Ms+BHi2IiIhklPpZIdSGrlevI+ip6qknx0SnzyFJEdBcJ3
oWAprcRTInnfyHf1L4fxPJbBwYg1JcIiW926f8ts/vMSWgo1XsWQCuSJFhjWchPc
66EEYGWx9BEyOAqd/adopFHHM+m3+XXxHF3zxBG0W/6G67+2dorCzsGqg+MB9M9e
n+6miPRcHft28FhjhkG7rDbeXnDoyt95Zg3nqUbgzO/0Y3ekabl21VFDqvKZ1szA
N1AyqCkNoiGAUWV9EvevZb97wkhrrcknaeIsdjtuv6NF
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:20 2025 by rpki-client