Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43161A1A782111F0873377DDDAE4EC9C.roa
File: 43161A1A782111F0873377DDDAE4EC9C.roa (raw, json)
Hash identifier: daGRTr5GYYnV1E1JQy3VQe/a3sn/gV6nPLiavvwgkUw=
Subject key identifier: A8:8C:F2:F8:28:19:02:11:D2:8D:EE:D7:16:EE:4A:CD:71:99:E3:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43161A1A782111F0873377DDDAE4EC9C.roa
Signing time: Wed 13 Aug 2025 08:41:11 +0000
ROA not before: Wed 13 Aug 2025 08:41:03 +0000
ROA not after: Wed 17 Sep 2025 08:41:03 +0000
asID: 10103
IP address blocks: 45.196.206.0/23 maxlen: 24
45.196.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92835 (0x16aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 08:41:03 2025 GMT
Not After : Sep 17 08:41:03 2025 GMT
Subject: CN=689c4fa7-1983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:5f:ec:b8:4a:d4:8b:a9:d0:26:32:87:50:
80:33:fe:9b:9c:9a:52:e8:2e:b9:75:4b:52:dc:29:
72:a6:eb:5e:db:59:cc:5d:b2:ae:a7:0a:3f:cb:8e:
fc:6e:b2:0d:0b:fa:13:d5:01:18:fe:8d:ed:27:9f:
88:ff:5f:e2:7a:db:46:f0:8c:4a:80:da:fe:b8:97:
af:e4:f1:1e:23:24:0f:6f:2e:ef:c4:8e:43:f3:7f:
43:7f:de:02:1c:73:31:c8:aa:35:32:9f:41:d8:43:
83:c6:c3:66:7d:f0:06:f3:10:cc:d8:91:e2:70:35:
82:d1:0c:9c:38:de:9d:f5:29:ed:ce:e2:d2:14:4c:
e9:7c:ff:6c:d0:ee:4d:4c:62:85:4f:07:93:4c:12:
59:05:64:54:72:3d:46:90:64:ed:15:df:f5:75:fb:
5a:0d:bf:cf:88:8c:0c:0d:7c:0c:20:0a:0a:c2:3e:
eb:45:ef:29:c1:d1:88:8c:29:d0:af:0d:84:22:60:
36:ee:7b:bc:70:b7:cf:5c:e6:70:1d:de:48:e4:b5:
26:f7:f5:26:61:28:75:d7:dc:83:3f:49:4f:b3:27:
3e:36:ea:f5:36:5f:3c:a6:c4:06:c8:71:56:cf:b1:
bb:b0:a8:1c:73:09:d4:61:e2:66:43:98:55:63:ea:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8C:F2:F8:28:19:02:11:D2:8D:EE:D7:16:EE:4A:CD:71:99:E3:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43161A1A782111F0873377DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.206.0/23
45.196.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8a:e6:e7:f3:9a:a1:ad:e5:63:0a:48:dc:4d:fb:24:3b:d0:
6a:5e:e7:62:f6:7a:95:0a:1d:0c:e5:19:ae:e4:b4:0c:f6:8e:
1f:06:0e:d9:01:fc:2a:50:2d:f9:fe:6e:80:6d:a5:ba:02:e2:
a3:db:ae:ee:23:e3:b1:66:af:c2:7d:4a:6d:8f:e0:53:0f:dc:
89:a7:43:f1:63:6d:06:17:98:33:cd:1c:3d:02:91:04:61:a1:
88:62:dc:0c:4a:4c:e8:34:58:9e:9c:22:1f:ff:aa:9d:20:40:
7a:32:26:cc:ec:09:b0:af:fa:f9:48:9c:30:ac:bd:34:93:dd:
a6:d7:1a:41:b1:fd:a0:62:d9:46:8f:60:0d:12:3d:d6:27:61:
4a:80:d8:19:fc:dd:70:6b:5d:44:71:67:60:42:2c:69:3d:b3:
93:6f:ff:10:dd:4e:1c:38:08:f0:62:7b:50:67:27:29:f4:93:
9b:cd:30:00:a8:5f:c5:28:14:3f:f2:c7:5c:bc:0f:3b:c1:25:
df:1e:91:d0:82:d4:1a:9a:3a:dd:bb:ad:4d:30:39:f7:fb:6f:
c4:8d:a0:32:df:3a:3a:40:13:7e:82:ee:b4:ce:ce:ca:49:0a:
34:69:5f:31:73:f1:14:a3:2d:64:96:ba:73:f2:3d:5c:69:70:
69:d2:4b:55
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWqjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODEzMDg0MTAzWhcNMjUwOTE3MDg0MTAzWjAYMRYw
FAYDVQQDEw02ODljNGZhNy0xOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxHtf7LhK1Iup0CYyh1CAM/6bnJpS6C65dUtS3Clypute21nMXbKupwo/
y478brINC/oT1QEY/o3tJ5+I/1/iettG8IxKgNr+uJev5PEeIyQPby7vxI5D839D
f94CHHMxyKo1Mp9B2EODxsNmffAG8xDM2JHicDWC0QycON6d9SntzuLSFEzpfP9s
0O5NTGKFTweTTBJZBWRUcj1GkGTtFd/1dftaDb/PiIwMDXwMIAoKwj7rRe8pwdGI
jCnQrw2EImA27nu8cLfPXOZwHd5I5LUm9/UmYSh119yDP0lPsyc+Nur1Nl88psQG
yHFWz7G7sKgccwnUYeJmQ5hVY+pTTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiM
8vgoGQIR0o3u1xbuSs1xmeP9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzE2MUExQTc4MjExMUYwODczMzc3REREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLcTOAwQALcTkMA0GCSqGSIb3
DQEBCwUAA4IBAQBMiubn85qhreVjCkjcTfskO9BqXudi9nqVCh0M5Rmu5LQM9o4f
Bg7ZAfwqUC35/m6AbaW6AuKj267uI+OxZq/CfUptj+BTD9yJp0PxY20GF5gzzRw9
ApEEYaGIYtwMSkzoNFienCIf/6qdIEB6MibM7Amwr/r5SJwwrL00k92m1xpBsf2g
YtlGj2ANEj3WJ2FKgNgZ/N1wa11EcWdgQixpPbOTb/8Q3U4cOAjwYntQZycp9JOb
zTAAqF/FKBQ/8sdcvA87wSXfHpHQgtQamjrdu61NMDn3+2/EjaAy3zo6QBN+gu60
zs7KSQo0aV8xc/EUoy1klrpz8j1caXBp0ktV
-----END CERTIFICATE-----
Generated at Thu Aug 21 04:10:50 2025 by rpki-client