Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39EDA1A8836E11F09486FA9CDAE4EC9C.roa
File: 39EDA1A8836E11F09486FA9CDAE4EC9C.roa (raw, json)
Hash identifier: CfENy8Yel8NeRI7MTdhj+mRY8ZzZ5/8JgCtfsB4ZT4M=
Subject key identifier: B8:AC:6A:4A:C6:67:20:DD:A2:3E:D1:9C:45:59:32:A5:C7:E3:9D:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39EDA1A8836E11F09486FA9CDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 17:49:49 +0000
ROA not before: Wed 27 Aug 2025 17:49:41 +0000
ROA not after: Fri 25 Sep 2026 17:49:41 +0000
asID: 147019
IP address blocks: 45.194.56.0/24 maxlen: 24
45.194.57.0/24 maxlen: 24
45.194.58.0/24 maxlen: 24
45.194.59.0/24 maxlen: 24
45.194.60.0/24 maxlen: 24
45.194.61.0/24 maxlen: 24
45.194.62.0/24 maxlen: 24
45.194.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94696 (0x171e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 17:49:41 2025 GMT
Not After : Sep 25 17:49:41 2026 GMT
Subject: CN=68af453d-ed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:4f:eb:7f:ef:7a:c4:b4:50:98:8c:d2:bf:
ba:51:c3:78:29:bc:8f:8f:8c:3f:0d:2b:98:9a:13:
bc:e9:6b:a3:c1:b6:dc:a4:46:4b:02:9c:49:ca:d4:
bb:ba:4f:65:aa:4a:a3:53:43:eb:18:a0:4f:d6:c5:
c6:a5:79:e1:5d:e9:c9:51:1e:1a:26:7f:69:7f:44:
34:e6:92:52:46:f1:93:b7:32:19:df:bc:c7:17:47:
88:27:c6:7b:03:07:79:94:03:6a:37:71:8f:43:26:
2d:b2:80:c2:bd:f9:c9:b9:db:29:53:f1:f2:eb:c1:
51:b9:63:7e:42:20:dc:07:14:62:26:c2:6b:a4:8f:
82:66:1a:63:de:89:47:17:0e:43:01:a7:df:09:df:
1f:0b:66:58:c7:ba:f5:5d:3b:b8:79:38:92:d8:98:
30:40:bb:6c:c3:48:ec:a2:8c:48:85:9a:50:53:c2:
76:63:cc:0e:71:b1:89:dd:53:19:90:22:6e:02:8a:
77:a1:ec:ef:e5:a3:d7:05:80:ac:f1:b9:45:c5:47:
bd:82:c9:1e:87:7b:8b:18:7d:ae:53:17:6d:51:3d:
08:90:e9:13:c5:59:5c:d0:6f:bb:7c:0a:ea:ec:c4:
e5:01:e0:d2:cf:c6:a1:e9:9b:26:d8:7a:3b:7a:f2:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:6A:4A:C6:67:20:DD:A2:3E:D1:9C:45:59:32:A5:C7:E3:9D:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39EDA1A8836E11F09486FA9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.56.0/21
Signature Algorithm: sha256WithRSAEncryption
21:09:fe:fc:bd:14:cf:9b:f0:71:ed:31:bd:0c:ed:72:93:27:
40:d7:34:c5:43:70:59:19:d5:bc:99:5b:52:06:ee:b5:ef:57:
9f:0f:af:4b:22:51:7b:d5:d6:d2:8a:7c:77:5c:93:c3:68:8b:
44:c7:08:70:97:45:74:1e:27:30:0a:38:07:12:24:98:0c:44:
6d:bf:21:47:42:83:58:19:02:9c:49:bf:b4:2d:a2:1a:82:66:
c4:a8:01:6d:0e:3f:55:07:26:aa:9f:95:99:71:16:d6:44:01:
ab:d2:08:a9:f3:19:33:f4:ce:e5:e4:41:af:45:ab:36:7b:c0:
4c:41:b7:c5:2e:37:70:f6:86:8e:66:c1:d2:ce:78:10:58:fb:
8d:58:a7:35:28:69:a4:12:db:7d:90:dd:f2:d3:db:00:c4:99:
7e:d6:24:1e:e9:9d:26:f3:13:39:76:81:43:92:6c:22:fd:61:
cd:ba:56:a4:b3:d8:cc:7c:93:17:2e:62:e6:8b:2e:c0:4e:14:
b6:83:4b:50:e4:d5:eb:a3:c5:d9:27:c5:76:32:c7:fc:72:73:
f9:f8:76:a1:ee:46:d1:6c:c1:10:3b:2e:34:47:a6:01:0e:dd:
50:3f:0e:ef:df:12:49:b5:7d:18:22:6d:c9:b5:d1:8e:d6:63:
36:f3:e0:7f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXHoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI3MTc0OTQxWhcNMjYwOTI1MTc0OTQxWjAYMRYw
FAYDVQQDEw02OGFmNDUzZC1lZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo/JP63/vesS0UJiM0r+6UcN4KbyPj4w/DSuYmhO86WujwbbcpEZLApxJ
ytS7uk9lqkqjU0PrGKBP1sXGpXnhXenJUR4aJn9pf0Q05pJSRvGTtzIZ37zHF0eI
J8Z7Awd5lANqN3GPQyYtsoDCvfnJudspU/Hy68FRuWN+QiDcBxRiJsJrpI+CZhpj
3olHFw5DAaffCd8fC2ZYx7r1XTu4eTiS2JgwQLtsw0jsooxIhZpQU8J2Y8wOcbGJ
3VMZkCJuAop3oezv5aPXBYCs8blFxUe9gskeh3uLGH2uUxdtUT0IkOkTxVlc0G+7
fArq7MTlAeDSz8ah6Zsm2Ho7evK7LwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLis
akrGZyDdoj7RnEVZMqXH452NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOUVEQTFBODgzNkUxMUYwOTQ4NkZBOUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcI4MA0GCSqGSIb3DQEBCwUA
A4IBAQAhCf78vRTPm/Bx7TG9DO1ykydA1zTFQ3BZGdW8mVtSBu6171efD69LIlF7
1dbSinx3XJPDaItExwhwl0V0HicwCjgHEiSYDERtvyFHQoNYGQKcSb+0LaIagmbE
qAFtDj9VByaqn5WZcRbWRAGr0gip8xkz9M7l5EGvRas2e8BMQbfFLjdw9oaOZsHS
zngQWPuNWKc1KGmkEtt9kN3y09sAxJl+1iQe6Z0m8xM5doFDkmwi/WHNulaks9jM
fJMXLmLmiy7AThS2g0tQ5NXro8XZJ8V2Msf8cnP5+Hah7kbRbMEQOy40R6YBDt1Q
Pw7v3xJJtX0YIm3JtdGO1mM28+B/
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:01 2025 by rpki-client