Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DE009D8801D11F0BC0B5E93DAE4EC9C.roa
File: 5DE009D8801D11F0BC0B5E93DAE4EC9C.roa (raw, json)
Hash identifier: GEdo06oNspnRKghywtXYOISA6ojvCwxBtnzk+BZB/xU=
Subject key identifier: 2E:C1:52:A8:82:A1:12:6C:56:D2:C5:F5:1F:73:3B:DC:6B:69:B9:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DE009D8801D11F0BC0B5E93DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 12:33:27 +0000
ROA not before: Sat 23 Aug 2025 12:33:20 +0000
ROA not after: Sat 27 Sep 2025 12:33:20 +0000
asID: 20326
IP address blocks: 45.198.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93969 (0x16f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 12:33:20 2025 GMT
Not After : Sep 27 12:33:20 2025 GMT
Subject: CN=68a9b517-e9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:5b:34:e7:8e:a1:80:11:66:5c:75:72:ba:
30:cc:2b:66:f8:0e:46:65:83:ad:fa:94:49:21:ad:
f7:91:df:21:70:bb:e6:c6:75:aa:62:c4:68:56:bb:
71:49:f2:4e:52:33:d0:e3:b9:43:56:49:ee:bf:23:
7b:3d:36:c2:e3:90:11:95:4f:af:e2:50:dd:c4:d7:
16:d8:a5:95:51:84:c8:81:83:3c:16:8a:78:af:cf:
62:90:84:c3:36:7e:8b:2c:65:51:7c:ca:15:e4:1b:
65:86:50:e0:2b:24:c9:e5:a5:f9:7d:24:f1:09:36:
98:25:59:f5:d0:48:5d:f1:8d:2a:29:b1:5e:4e:ff:
35:03:19:47:da:50:3d:52:f4:1f:60:00:cc:3a:e1:
4c:e2:ff:b9:e5:8a:a0:19:6f:11:4c:0a:58:59:87:
44:2e:6c:5c:f6:73:2d:52:2a:44:ea:51:fe:35:73:
f6:e2:16:79:d0:b6:8e:bf:2f:4b:2a:69:9a:e7:27:
21:60:bc:d1:0d:58:54:c3:e9:38:19:07:ff:09:ea:
2e:b9:af:a6:4f:fc:08:24:81:fb:dd:de:8a:22:e7:
5b:5d:63:a4:f9:78:30:50:ba:fe:62:65:bd:11:51:
12:a8:e1:06:75:34:b6:02:5a:e1:5a:9d:68:a1:95:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:52:A8:82:A1:12:6C:56:D2:C5:F5:1F:73:3B:DC:6B:69:B9:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DE009D8801D11F0BC0B5E93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.162.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5e:48:ed:57:46:0a:55:fe:3c:05:c9:68:da:da:c3:b2:8b:
c9:dc:70:95:ab:93:3c:5b:cc:56:d2:e4:08:f8:13:01:68:7d:
48:0a:34:cf:ca:76:ad:d3:ce:a6:bf:bc:d5:c1:7a:ce:10:55:
06:5f:45:7f:f6:19:e3:40:a3:a5:c2:bf:a2:a3:02:e7:55:31:
3a:0f:0b:2c:a0:97:e1:f7:92:d6:56:c9:39:28:d2:98:71:3c:
75:02:57:da:cc:4f:e3:a1:79:cd:f2:1f:9f:e5:19:0d:b8:71:
99:7c:bf:8a:4b:6a:5f:f1:ad:2f:21:04:b9:22:c2:df:c6:50:
da:c8:66:85:0c:dc:92:62:15:94:21:6b:7f:95:f6:4e:63:26:
25:93:eb:c7:4f:74:4b:b5:ab:63:62:20:a0:d7:f5:24:cc:67:
58:f3:c4:4e:0c:18:ff:ae:4b:05:a7:e4:9e:a0:e2:59:6c:1b:
53:c0:29:dd:80:df:48:f0:c5:fd:19:08:9d:49:3a:98:fb:ad:
10:d7:10:4e:81:92:f7:b6:f5:14:cf:44:de:5e:22:43:10:64:
9a:6d:89:33:25:8d:90:87:08:87:70:17:16:e5:d1:f2:c8:52:
c1:b6:5f:6e:28:9f:d1:89:91:ae:0f:26:e4:3d:11:0b:6e:d6:
bd:37:dc:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAW8RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIzMTIzMzIwWhcNMjUwOTI3MTIzMzIwWjAYMRYw
FAYDVQQDEw02OGE5YjUxNy1lOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAok5bNOeOoYARZlx1crowzCtm+A5GZYOt+pRJIa33kd8hcLvmxnWqYsRo
VrtxSfJOUjPQ47lDVknuvyN7PTbC45ARlU+v4lDdxNcW2KWVUYTIgYM8Fop4r89i
kITDNn6LLGVRfMoV5BtlhlDgKyTJ5aX5fSTxCTaYJVn10Ehd8Y0qKbFeTv81AxlH
2lA9UvQfYADMOuFM4v+55YqgGW8RTApYWYdELmxc9nMtUipE6lH+NXP24hZ50LaO
vy9LKmma5ychYLzRDVhUw+k4GQf/Ceouua+mT/wIJIH73d6KIudbXWOk+XgwULr+
YmW9EVESqOEGdTS2AlrhWp1ooZUx5wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC7B
UqiCoRJsVtLF9R9zO9xrabl2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81REUwMDlEODgwMUQxMUYwQkMwQjVFOTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcaiMA0GCSqGSIb3DQEBCwUA
A4IBAQBlXkjtV0YKVf48Bclo2trDsovJ3HCVq5M8W8xW0uQI+BMBaH1ICjTPynat
086mv7zVwXrOEFUGX0V/9hnjQKOlwr+iowLnVTE6DwssoJfh95LWVsk5KNKYcTx1
AlfazE/joXnN8h+f5RkNuHGZfL+KS2pf8a0vIQS5IsLfxlDayGaFDNySYhWUIWt/
lfZOYyYlk+vHT3RLtatjYiCg1/UkzGdY88RODBj/rksFp+SeoOJZbBtTwCndgN9I
8MX9GQidSTqY+60Q1xBOgZL3tvUUz0TeXiJDEGSabYkzJY2QhwiHcBcW5dHyyFLB
tl9uKJ/RiZGuDybkPRELbta9N9y+
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:11:08 2025 by rpki-client