Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504D24E04B7A11F0BD58AAAADAE4EC9C.roa
File: 504D24E04B7A11F0BD58AAAADAE4EC9C.roa (raw, json)
Hash identifier: cW/1ig2yxPq2rbsZdzMbTf/HdG97xnRgku780ftnP/8=
Subject key identifier: 2C:73:10:23:B4:52:AD:18:96:5F:E1:F8:05:41:F6:32:64:81:4D:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504D24E04B7A11F0BD58AAAADAE4EC9C.roa
Signing time: Tue 17 Jun 2025 12:55:16 +0000
ROA not before: Tue 17 Jun 2025 12:55:11 +0000
ROA not after: Thu 17 Jul 2025 12:55:11 +0000
asID: 54600
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 23:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89254 (0x15ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 12:55:11 2025 GMT
Not After : Jul 17 12:55:11 2025 GMT
Subject: CN=685165b4-3c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:a5:86:97:18:bc:da:9f:5f:2b:2e:91:2e:
6b:33:7c:45:d9:9c:af:17:fc:fd:15:db:bb:0c:a7:
23:4c:90:cd:00:a5:82:b1:46:54:99:3f:a4:8d:dd:
77:4d:9a:6c:8b:5f:84:d0:0c:0d:10:38:3f:a9:59:
ae:f8:af:b4:af:39:4b:be:07:08:d8:14:c2:0f:d3:
ee:6d:c8:8e:95:ac:28:73:06:90:6f:a6:d8:a6:e0:
35:d1:e1:d0:1d:78:70:c2:ef:2a:b3:35:74:fc:1f:
8b:f7:ba:20:c4:c0:ac:c0:11:d4:6d:14:e6:0c:fe:
dc:9e:42:ee:c1:04:c5:68:14:e1:4c:5a:d9:fa:65:
63:74:6b:c6:fd:f9:a3:fe:19:6a:f4:6a:d9:a1:39:
29:32:11:d0:6d:dd:a0:11:62:a7:3e:67:3d:1b:83:
3a:70:3e:e0:e1:a1:cd:9f:fa:23:a0:51:e1:86:49:
63:5a:32:d0:17:92:db:55:6e:0f:d7:35:7a:16:ef:
a3:3e:a3:0d:64:d9:cb:21:87:86:d4:ed:f5:83:fd:
ad:3b:1e:72:34:33:6c:73:5d:ff:df:98:2f:de:11:
78:5c:c9:85:92:a3:46:6e:c1:16:dd:fc:97:8b:f3:
68:73:99:db:68:c7:09:79:05:1a:69:e7:47:28:dd:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:10:23:B4:52:AD:18:96:5F:E1:F8:05:41:F6:32:64:81:4D:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504D24E04B7A11F0BD58AAAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
03:be:ef:59:6f:86:e2:77:f1:5d:94:62:cd:28:25:b7:f5:94:
d8:47:74:27:8c:80:ba:ff:33:d3:88:65:50:61:53:bf:cd:07:
45:82:cc:e2:b8:9e:5e:6b:ca:90:af:10:7c:16:ab:07:17:65:
d8:c9:ee:d6:f9:6a:53:b8:92:b3:68:9d:f2:c4:ac:ef:c0:f9:
fd:3c:df:ca:5a:a2:dd:4b:b5:13:82:31:bc:b3:be:d3:1c:1c:
91:00:a4:9b:5f:9d:7f:5d:e7:b5:38:96:50:de:d6:33:58:b3:
6e:95:85:ad:ad:bd:17:63:55:fb:f2:d3:cf:56:69:4d:38:08:
d2:64:70:f2:bb:b1:53:b4:d3:e4:b9:6e:05:5b:68:77:26:0a:
0c:e5:27:cf:e1:06:b5:17:6e:d6:58:dd:71:ef:81:8b:ba:32:
db:c3:83:d0:52:89:a5:fe:96:32:91:8a:c0:70:41:c4:77:df:
09:ab:01:8d:a5:a4:1b:5c:44:c9:0b:78:89:f7:95:0c:94:3c:
f5:cf:e6:9d:d2:96:07:4c:72:0c:09:b1:3b:64:7d:de:18:41:
ca:ac:92:5c:9e:d6:3d:e3:3c:eb:e2:d1:1b:53:e2:29:33:73:
9b:c8:e5:dc:45:6a:eb:7d:e3:b6:a7:9f:7a:85:7f:5b:e5:72:
97:7a:23:68
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAVymMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE3MTI1NTExWhcNMjUwNzE3MTI1NTExWjAYMRYw
FAYDVQQDEw02ODUxNjViNC0zYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtdWlhpcYvNqfXysukS5rM3xF2ZyvF/z9Fdu7DKcjTJDNAKWCsUZUmT+k
jd13TZpsi1+E0AwNEDg/qVmu+K+0rzlLvgcI2BTCD9PubciOlawocwaQb6bYpuA1
0eHQHXhwwu8qszV0/B+L97ogxMCswBHUbRTmDP7cnkLuwQTFaBThTFrZ+mVjdGvG
/fmj/hlq9GrZoTkpMhHQbd2gEWKnPmc9G4M6cD7g4aHNn/ojoFHhhkljWjLQF5Lb
VW4P1zV6Fu+jPqMNZNnLIYeG1O31g/2tOx5yNDNsc13/35gv3hF4XMmFkqNGbsEW
3fyXi/Noc5nbaMcJeQUaaedHKN1cDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxz
ECO0Uq0Yll/h+AVB9jJkgU1uMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MDREMjRFMDRCN0ExMUYwQkQ1OEFBQUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcDAAwQGLcjAMA0GCSqGSIb3
DQEBCwUAA4IBAQADvu9Zb4bid/FdlGLNKCW39ZTYR3QnjIC6/zPTiGVQYVO/zQdF
gsziuJ5ea8qQrxB8FqsHF2XYye7W+WpTuJKzaJ3yxKzvwPn9PN/KWqLdS7UTgjG8
s77THByRAKSbX51/Xee1OJZQ3tYzWLNulYWtrb0XY1X78tPPVmlNOAjSZHDyu7FT
tNPkuW4FW2h3JgoM5SfP4Qa1F27WWN1x74GLujLbw4PQUoml/pYykYrAcEHEd98J
qwGNpaQbXETJC3iJ95UMlDz1z+ad0pYHTHIMCbE7ZH3eGEHKrJJcntY94zzr4tEb
U+IpM3ObyOXcRWrrfeO2p596hX9b5XKXeiNo
-----END CERTIFICATE-----
Generated at Mon Jul 7 02:31:38 2025 by rpki-client