Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47F9BF0437CC11F08E21189EDAE4EC9C.roa
File: 47F9BF0437CC11F08E21189EDAE4EC9C.roa (raw, json)
Hash identifier: dthtnwpXwxvYUd+gK652/+b9qz6ganaxFaAg6UuhSMI=
Subject key identifier: E0:AB:76:D3:21:E4:BD:C2:DC:F0:A3:B9:E5:94:32:F1:05:46:4C:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47F9BF0437CC11F08E21189EDAE4EC9C.roa
Signing time: Fri 23 May 2025 11:51:37 +0000
ROA not before: Fri 23 May 2025 11:51:33 +0000
ROA not after: Mon 25 Aug 2025 11:51:33 +0000
asID: 395839
IP address blocks: 45.202.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87750 (0x156c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 11:51:33 2025 GMT
Not After : Aug 25 11:51:33 2025 GMT
Subject: CN=68306149-7560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:74:2c:9c:da:21:a8:74:76:13:19:dc:5e:
68:6f:38:57:53:27:9e:a2:0d:e4:d4:c1:91:21:10:
14:03:8f:27:53:eb:b1:7e:63:08:9e:7f:03:1b:7e:
a1:4d:b6:80:57:99:4b:41:c1:0f:c7:e4:1b:db:ff:
b5:e4:f8:46:84:4b:4e:20:dc:4f:ee:8a:b5:50:fe:
33:f3:5d:20:19:90:3a:56:41:7c:03:0b:ea:a9:b9:
72:97:f7:fb:84:7b:d1:09:09:a0:b6:af:4c:a5:63:
80:2e:14:9d:39:a9:14:97:ec:d4:c2:9f:89:85:d8:
53:90:99:be:e1:58:53:62:a9:13:4d:5b:a0:96:d6:
0a:19:76:11:68:0a:39:0c:e0:dc:5f:4c:80:33:af:
be:6f:2b:b3:87:0e:e0:64:1b:d2:3b:13:4a:89:d4:
c1:04:51:d4:64:5e:57:59:9f:80:8f:87:4e:d2:16:
97:9c:88:66:75:5f:d3:0f:c1:ec:a7:00:55:3b:10:
51:4c:18:ab:76:f7:cd:05:0c:31:6d:e0:90:93:73:
d9:09:e3:d8:8e:d8:62:72:a5:84:75:0c:2d:44:e8:
80:f6:bc:24:2c:a9:b5:65:df:5f:6a:01:a2:25:61:
5b:d0:9c:af:33:04:ff:68:17:c9:36:de:15:b3:1a:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:76:D3:21:E4:BD:C2:DC:F0:A3:B9:E5:94:32:F1:05:46:4C:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47F9BF0437CC11F08E21189EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
14:90:e3:77:9e:11:f8:e9:0b:0c:ef:b8:f7:a0:19:9d:b7:e0:
3c:de:61:cc:8c:28:08:e3:0c:db:bf:97:7a:6b:2e:b9:9e:7b:
ff:cb:a2:c8:dd:dd:ec:e4:ae:81:1e:19:3b:a1:c2:34:a8:99:
cc:40:1b:ca:f1:c2:ae:27:45:7b:2e:f2:7c:38:78:08:af:1c:
ef:0a:8d:9e:18:a6:fc:ca:36:a7:39:a3:0a:54:6a:a8:24:1d:
1c:26:3d:f7:06:6f:3e:fa:7d:b1:28:a7:6b:dc:ad:89:ab:47:
c1:e0:1e:31:08:71:1f:a2:8c:9b:0f:b7:56:ae:e8:f0:3e:e6:
05:81:34:da:3d:ea:26:96:af:88:e2:45:8f:c0:0d:e9:22:38:
ff:d1:81:68:45:58:70:58:73:2f:bd:b6:e7:98:1c:ae:1d:80:
19:43:8b:38:05:2c:14:4d:e8:68:43:e1:d5:b4:94:7d:2e:c6:
9d:4d:ec:73:c3:e4:89:c5:a6:48:73:97:f5:41:4e:2b:b1:91:
33:d4:4c:42:19:9e:44:58:49:7b:73:20:9c:7f:d1:7f:76:e5:
95:b7:ae:40:26:3c:f3:18:59:55:4f:6a:30:75:d6:3c:b5:d2:
80:fc:c7:ee:91:62:d9:4b:7b:a8:b9:9c:69:66:9c:c5:61:56:
87:27:91:fd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVbGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIzMTE1MTMzWhcNMjUwODI1MTE1MTMzWjAYMRYw
FAYDVQQDEw02ODMwNjE0OS03NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA38V0LJzaIah0dhMZ3F5obzhXUyeeog3k1MGRIRAUA48nU+uxfmMInn8D
G36hTbaAV5lLQcEPx+Qb2/+15PhGhEtOINxP7oq1UP4z810gGZA6VkF8Awvqqbly
l/f7hHvRCQmgtq9MpWOALhSdOakUl+zUwp+JhdhTkJm+4VhTYqkTTVugltYKGXYR
aAo5DODcX0yAM6++byuzhw7gZBvSOxNKidTBBFHUZF5XWZ+Aj4dO0haXnIhmdV/T
D8HspwBVOxBRTBirdvfNBQwxbeCQk3PZCePYjthicqWEdQwtROiA9rwkLKm1Zd9f
agGiJWFb0JyvMwT/aBfJNt4Vsxpr/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOCr
dtMh5L3C3PCjueWUMvEFRkztMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80N0Y5QkYwNDM3Q0MxMUYwOEUyMTE4OUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpxMA0GCSqGSIb3DQEBCwUA
A4IBAQAUkON3nhH46QsM77j3oBmdt+A83mHMjCgI4wzbv5d6ay65nnv/y6LI3d3s
5K6BHhk7ocI0qJnMQBvK8cKuJ0V7LvJ8OHgIrxzvCo2eGKb8yjanOaMKVGqoJB0c
Jj33Bm8++n2xKKdr3K2Jq0fB4B4xCHEfooybD7dWrujwPuYFgTTaPeomlq+I4kWP
wA3pIjj/0YFoRVhwWHMvvbbnmByuHYAZQ4s4BSwUTehoQ+HVtJR9LsadTexzw+SJ
xaZIc5f1QU4rsZEz1ExCGZ5EWEl7cyCcf9F/duWVt65AJjzzGFlVT2owddY8tdKA
/MfukWLZS3uouZxpZpzFYVaHJ5H9
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:41:31 2025 by rpki-client