Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A5AA9CA76111F08D85078DDAE4EC9C.roa
File: 54A5AA9CA76111F08D85078DDAE4EC9C.roa (raw, json)
Hash identifier: WRW8C26qPCZ3SImjjm7hyvq9emrinj5EwEpVPgGnMoQ=
Subject key identifier: E1:37:1D:67:DB:97:D8:4E:BC:CC:38:F7:B0:B8:0E:80:49:01:2F:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018016
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A5AA9CA76111F08D85078DDAE4EC9C.roa
Signing time: Sun 12 Oct 2025 11:48:12 +0000
ROA not before: Sun 12 Oct 2025 11:48:08 +0000
ROA not after: Tue 11 Aug 2026 11:48:08 +0000
asID: 36680
IP address blocks: 45.204.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98326 (0x18016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 11:48:08 2025 GMT
Not After : Aug 11 11:48:08 2026 GMT
Subject: CN=68eb957c-aa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:2e:9a:4f:ce:e6:fb:38:0c:c8:fa:f3:40:
d0:64:72:c3:2e:48:2d:38:bb:8a:6a:83:90:d1:eb:
dc:60:cc:73:91:a2:b0:99:6d:e0:45:33:0f:e2:14:
a4:fc:63:34:a9:5b:bb:61:4d:23:0f:3f:dd:00:3e:
34:a8:18:ed:4e:66:d2:ce:9b:ce:f5:bb:9f:46:69:
65:68:d7:bd:af:02:15:f6:5f:a0:05:4c:09:d0:2c:
0b:75:f9:c2:d9:84:7b:8a:55:61:c9:ba:b0:ff:eb:
5c:0b:b3:cf:14:fc:3e:f4:ab:2c:d0:d2:76:ba:d5:
ed:07:5a:08:54:c3:16:30:fc:74:e5:62:da:66:bd:
67:35:39:e2:7f:8a:82:b2:55:1a:16:ac:75:2c:85:
95:55:1c:d0:43:63:db:1d:ee:60:7f:ea:fd:dd:e1:
bd:c2:64:57:90:a9:f2:20:a5:c5:88:ac:1c:56:5c:
12:d4:04:d6:31:eb:ac:53:b3:91:59:a4:f0:b4:08:
b5:47:bd:50:02:d0:69:ed:1d:d4:38:dc:8e:83:e4:
de:52:3f:f0:ae:fa:26:28:fc:de:5e:f1:c0:63:96:
2e:78:f0:c9:b3:3c:b1:2c:6e:0d:79:08:4d:08:f6:
c1:25:ef:c8:1b:6a:11:5c:f8:58:9e:44:14:b6:bd:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:37:1D:67:DB:97:D8:4E:BC:CC:38:F7:B0:B8:0E:80:49:01:2F:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A5AA9CA76111F08D85078DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.60.0/22
Signature Algorithm: sha256WithRSAEncryption
64:d7:ac:fa:a9:02:ff:26:c1:8a:88:08:0a:43:4f:aa:82:e4:
c5:c5:fd:0d:98:c2:fd:38:3c:9f:97:f5:52:cb:d6:cc:36:ef:
e2:4d:29:81:5f:0e:f7:fb:02:21:91:8b:a3:78:34:e2:1c:43:
92:0a:97:ac:80:da:4f:e2:3d:4f:d4:9f:ce:95:70:60:9e:2c:
ab:95:52:04:8a:0e:27:38:56:6b:77:31:72:ad:85:b7:11:2f:
91:1f:ac:b3:47:d4:41:4b:38:59:c8:b0:80:e7:e5:4d:b1:ff:
67:56:e7:02:82:33:89:e0:2e:87:7b:73:30:a5:74:5d:a6:4c:
14:5f:42:a9:07:ac:c5:17:e2:56:71:e9:cb:b1:36:78:af:0e:
9f:30:0f:9e:1d:31:50:00:8a:7c:0c:9c:e0:cd:da:d0:2f:80:
8b:c3:71:9a:ca:08:af:6c:2d:18:8a:ec:f6:24:5c:20:bf:6c:
60:e5:0a:79:ed:a5:ed:bd:d4:b1:97:4d:89:ab:54:3e:7f:7f:
e7:21:c3:bb:e0:ed:fe:bc:96:2f:f4:b8:49:7c:8c:f8:a7:5e:
39:16:8e:5c:ce:82:7d:fa:3f:36:6a:09:01:92:31:6b:d8:ad:
89:41:86:c5:7b:3b:59:b0:1c:36:6a:63:b7:d1:29:a4:aa:7a:
39:49:13:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYAWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDEyMTE0ODA4WhcNMjYwODExMTE0ODA4WjAYMRYw
FAYDVQQDEw02OGViOTU3Yy1hYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApFsumk/O5vs4DMj680DQZHLDLkgtOLuKaoOQ0evcYMxzkaKwmW3gRTMP
4hSk/GM0qVu7YU0jDz/dAD40qBjtTmbSzpvO9bufRmllaNe9rwIV9l+gBUwJ0CwL
dfnC2YR7ilVhybqw/+tcC7PPFPw+9Kss0NJ2utXtB1oIVMMWMPx05WLaZr1nNTni
f4qCslUaFqx1LIWVVRzQQ2PbHe5gf+r93eG9wmRXkKnyIKXFiKwcVlwS1ATWMeus
U7ORWaTwtAi1R71QAtBp7R3UONyOg+TeUj/wrvomKPzeXvHAY5YuePDJszyxLG4N
eQhNCPbBJe/IG2oRXPhYnkQUtr206wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOE3
HWfbl9hOvMw497C4DoBJAS9zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NEE1QUE5Q0E3NjExMUYwOEQ4NTA3OEREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcw8MA0GCSqGSIb3DQEBCwUA
A4IBAQBk16z6qQL/JsGKiAgKQ0+qguTFxf0NmML9ODyfl/VSy9bMNu/iTSmBXw73
+wIhkYujeDTiHEOSCpesgNpP4j1P1J/OlXBgniyrlVIEig4nOFZrdzFyrYW3ES+R
H6yzR9RBSzhZyLCA5+VNsf9nVucCgjOJ4C6He3MwpXRdpkwUX0KpB6zFF+JWcenL
sTZ4rw6fMA+eHTFQAIp8DJzgzdrQL4CLw3GaygivbC0Yiuz2JFwgv2xg5Qp57aXt
vdSxl02Jq1Q+f3/nIcO74O3+vJYv9LhJfIz4p145Fo5czoJ9+j82agkBkjFr2K2J
QYbFeztZsBw2amO30Smkqno5SRMO
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:53 2025 by rpki-client