Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/359D93D287E311F08437B2C2DAE4EC9C.roa
File: 359D93D287E311F08437B2C2DAE4EC9C.roa (raw, json)
Hash identifier: PPo/G+WUUaRyOZ5+yMz3ObZAXvlTM5hAOwxqdRhZzDI=
Subject key identifier: A5:A3:AD:D0:59:5B:AE:3D:EA:F8:F3:F6:39:E8:EB:F5:E4:33:10:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017653
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/359D93D287E311F08437B2C2DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 09:57:18 +0000
ROA not before: Tue 02 Sep 2025 09:57:01 +0000
ROA not after: Mon 02 Sep 2030 09:57:01 +0000
asID: 134548
IP address blocks: 45.193.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95827 (0x17653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 09:57:01 2025 GMT
Not After : Sep 2 09:57:01 2030 GMT
Subject: CN=68b6bf7e-88e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:99:ee:d9:6f:89:4e:01:ee:31:3e:7b:ed:
52:4e:c1:11:f6:2f:3b:e7:78:85:f2:c4:14:77:a0:
fc:ce:14:5d:3a:eb:e6:50:56:a2:6f:d8:27:24:64:
d3:00:fb:4b:ec:41:01:bc:69:75:70:0e:4f:fa:36:
db:5a:c6:b2:c9:b5:24:df:9a:6b:29:ff:b4:85:0a:
26:28:46:7f:74:ba:4c:3d:7c:f0:39:30:b1:e7:8e:
d9:27:76:87:c7:77:8d:d9:f8:e9:d3:ff:56:13:05:
7b:dd:68:e1:b0:6c:5e:14:67:b0:52:34:ce:41:49:
22:d3:50:c9:19:43:79:cb:96:0e:a1:f0:cb:5e:3e:
fd:05:09:ad:d2:25:84:86:80:4b:b3:a6:05:57:dd:
b7:71:ff:f2:2d:ac:f6:97:25:50:05:78:f3:a8:ba:
16:74:b5:02:1e:f1:21:be:2d:b9:76:9e:c0:a7:88:
37:77:85:46:5f:e1:cc:73:6a:83:8b:29:e9:bb:79:
88:76:b4:c1:7e:07:c7:d7:04:d8:2a:a1:35:db:15:
c2:00:a8:e8:2d:fa:54:5f:c5:57:0e:85:9e:11:0d:
c7:e8:38:b7:4a:49:c6:82:2c:88:68:63:4e:40:23:
ac:ca:10:de:67:30:b9:a4:d6:ed:87:ac:f8:ff:82:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:AD:D0:59:5B:AE:3D:EA:F8:F3:F6:39:E8:EB:F5:E4:33:10:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/359D93D287E311F08437B2C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:53:ca:9b:b9:e1:09:94:6b:7e:16:b6:b4:54:f5:32:15:c9:
bf:b0:bd:40:af:69:68:ab:45:8c:5c:8f:78:6b:9a:95:9a:b8:
0a:59:da:30:7f:78:70:c8:4c:ce:9d:f4:92:3b:94:17:1b:75:
cf:e6:2e:50:8e:77:3d:d9:4a:e8:f1:59:5f:67:3f:ad:1f:0c:
38:4d:e1:f1:d7:40:2b:0f:1d:2d:d1:61:64:34:c0:4f:a3:00:
9e:1c:49:33:5e:44:74:e8:47:e2:26:e8:d8:22:e0:6b:81:42:
1d:c7:3a:d7:3f:f2:0b:da:76:2d:7c:80:93:a9:f7:6a:b3:2c:
ca:ce:25:2a:6b:98:4e:50:fe:c9:d4:56:27:0e:e5:60:f5:dc:
c8:f7:e8:bf:8c:97:d6:70:ff:ea:38:5a:93:32:45:36:f1:fa:
52:3e:58:d2:29:e6:2b:29:10:13:d4:89:a9:bd:db:54:d6:3c:
13:06:41:a8:6e:9a:e9:bf:58:ef:2f:3d:3d:d6:03:88:a9:c4:
e3:ef:af:0a:0b:ac:f8:af:13:5c:c6:2e:6f:35:3c:58:6b:78:
a1:5a:da:ad:a6:cd:be:83:33:0b:80:ad:5d:f2:d2:b0:53:72:
05:44:9f:a9:72:ef:06:be:7c:ac:b6:ea:d7:d1:a5:7a:6f:ac:
50:96:f8:03
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAXZTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAyMDk1NzAxWhcNMzAwOTAyMDk1NzAxWjAYMRYw
FAYDVQQDEw02OGI2YmY3ZS04OGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtXqZ7tlviU4B7jE+e+1STsER9i8753iF8sQUd6D8zhRdOuvmUFaib9gn
JGTTAPtL7EEBvGl1cA5P+jbbWsayybUk35prKf+0hQomKEZ/dLpMPXzwOTCx547Z
J3aHx3eN2fjp0/9WEwV73WjhsGxeFGewUjTOQUki01DJGUN5y5YOofDLXj79BQmt
0iWEhoBLs6YFV923cf/yLaz2lyVQBXjzqLoWdLUCHvEhvi25dp7Ap4g3d4VGX+HM
c2qDiynpu3mIdrTBfgfH1wTYKqE12xXCAKjoLfpUX8VXDoWeEQ3H6Di3SknGgiyI
aGNOQCOsyhDeZzC5pNbth6z4/4L28wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKWj
rdBZW6496vjz9jno6/XkMxAVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNTlEOTNEMjg3RTMxMUYwODQzN0IyQzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALcEwDQYJKoZIhvcNAQELBQAD
ggEBAHpTypu54QmUa34WtrRU9TIVyb+wvUCvaWirRYxcj3hrmpWauApZ2jB/eHDI
TM6d9JI7lBcbdc/mLlCOdz3ZSujxWV9nP60fDDhN4fHXQCsPHS3RYWQ0wE+jAJ4c
STNeRHToR+Im6Ngi4GuBQh3HOtc/8gvadi18gJOp92qzLMrOJSprmE5Q/snUVicO
5WD13Mj36L+Ml9Zw/+o4WpMyRTbx+lI+WNIp5ispEBPUiam921TWPBMGQahumum/
WO8vPT3WA4ipxOPvrwoLrPivE1zGLm81PFhreKFa2q2mzb6DMwuArV3y0rBTcgVE
n6ly7wa+fKy26tfRpXpvrFCW+AM=
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:12:16 2025 by rpki-client