Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/637F94148EEE11F0A176DBABDAE4EC9C.roa
File: 637F94148EEE11F0A176DBABDAE4EC9C.roa (raw, json)
Hash identifier: DrOHpy6jMtNdkZBmH4Zrm1owBzDIUkos9XAOWAn5wMg=
Subject key identifier: 15:0B:65:9E:14:8D:60:10:C6:64:1E:B9:86:2F:96:31:3A:4A:41:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017ABF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/637F94148EEE11F0A176DBABDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 09:04:57 +0000
ROA not before: Thu 11 Sep 2025 09:04:53 +0000
ROA not after: Fri 17 Oct 2025 09:04:53 +0000
asID: 54600
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 17 Sep 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96959 (0x17abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 09:04:53 2025 GMT
Not After : Oct 17 09:04:53 2025 GMT
Subject: CN=68c290b9-0e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:06:1c:1b:ed:a0:b6:fd:93:25:f1:0d:9d:
d7:56:2a:a7:ea:36:c0:34:b9:f5:bf:57:68:01:26:
e0:92:a7:4f:f6:f8:dc:4b:91:09:4f:39:a1:1d:bf:
39:d0:31:01:c7:87:cd:ca:d7:6a:0f:16:0b:ed:10:
2e:04:4b:ae:42:bb:27:c2:48:73:53:0f:44:9e:dc:
ce:bc:d3:f8:e4:1c:e6:37:df:07:08:ea:4f:1b:ef:
21:89:cc:b5:a8:73:b2:9e:0c:8f:d7:4c:84:5c:b0:
68:d5:90:7b:2b:18:96:c4:41:cd:45:29:52:4d:3f:
34:7c:c2:19:f9:8a:06:b9:54:b1:9f:54:10:e3:9d:
8a:75:4c:9c:bf:fa:ac:05:92:b6:f2:e2:ee:65:32:
79:28:f5:0e:9a:b4:55:ab:f0:a7:bc:89:74:72:f3:
f8:b9:fa:b3:07:13:4a:c6:53:f7:a8:e8:a4:e1:7d:
09:f2:83:5a:6c:21:2f:b9:18:7b:38:be:61:df:e4:
a8:5c:52:90:57:e4:42:bf:e9:e5:b7:54:50:6c:97:
50:7a:f0:1b:26:bb:7f:1d:e3:db:82:06:30:da:a1:
5a:ec:d6:09:ab:bd:5f:fe:3c:72:ff:c5:f3:61:e4:
ca:ec:b1:98:cf:f6:db:93:e6:a1:96:28:9b:33:04:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0B:65:9E:14:8D:60:10:C6:64:1E:B9:86:2F:96:31:3A:4A:41:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/637F94148EEE11F0A176DBABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:6d:a8:63:25:3a:b7:9e:aa:23:02:61:91:d4:e7:f7:ce:06:
81:3d:53:0e:71:ef:c9:83:00:9c:90:33:b9:43:97:11:13:47:
79:ca:56:41:10:2b:69:38:85:b1:41:f1:3a:8d:ad:b5:83:94:
ff:71:ae:89:4e:29:57:57:e2:67:d5:35:9c:e5:b1:9a:89:3a:
d6:d2:b6:c7:2c:24:7d:a1:0a:33:6c:34:c6:2e:2e:98:61:68:
6a:85:ed:0c:5d:79:43:84:2a:e6:89:b2:80:f0:f2:24:1a:aa:
e8:df:d8:5b:19:09:d7:ee:cb:67:ba:fa:83:69:d5:3a:c8:d7:
32:b5:02:a7:d5:d1:7a:03:60:7a:55:b5:ba:78:4a:12:72:c2:
85:8b:e3:e4:43:8c:42:d4:a6:77:d8:3f:86:a8:a7:f6:79:30:
81:91:bf:1c:10:e2:43:5b:5c:f9:30:80:2c:a9:dc:e4:d2:51:
c9:8a:d9:88:ea:5c:3d:87:87:28:ce:8f:35:89:80:de:c9:b4:
eb:0f:7c:31:b9:13:35:a1:15:dc:67:3c:eb:af:ff:d7:22:3c:
48:64:b7:e8:40:d6:57:3e:ad:a7:7a:59:d6:d3:0d:7d:cb:9f:
c4:68:90:37:c4:38:49:56:31:e7:49:d9:9e:1c:e0:63:50:fb:
15:17:95:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXq/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTExMDkwNDUzWhcNMjUxMDE3MDkwNDUzWjAYMRYw
FAYDVQQDEw02OGMyOTBiOS0wZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1D4GHBvtoLb9kyXxDZ3XViqn6jbANLn1v1doASbgkqdP9vjcS5EJTzmh
Hb850DEBx4fNytdqDxYL7RAuBEuuQrsnwkhzUw9EntzOvNP45BzmN98HCOpPG+8h
icy1qHOyngyP10yEXLBo1ZB7KxiWxEHNRSlSTT80fMIZ+YoGuVSxn1QQ452KdUyc
v/qsBZK28uLuZTJ5KPUOmrRVq/CnvIl0cvP4ufqzBxNKxlP3qOik4X0J8oNabCEv
uRh7OL5h3+SoXFKQV+RCv+nlt1RQbJdQevAbJrt/HePbggYw2qFa7NYJq71f/jxy
/8XzYeTK7LGYz/bbk+ahliibMwTqCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBUL
ZZ4UjWAQxmQeuYYvljE6SkEiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MzdGOTQxNDhFRUUxMUYwQTE3NkRCQUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcjAMA0GCSqGSIb3DQEBCwUA
A4IBAQC8bahjJTq3nqojAmGR1Of3zgaBPVMOce/JgwCckDO5Q5cRE0d5ylZBECtp
OIWxQfE6ja21g5T/ca6JTilXV+Jn1TWc5bGaiTrW0rbHLCR9oQozbDTGLi6YYWhq
he0MXXlDhCrmibKA8PIkGqro39hbGQnX7stnuvqDadU6yNcytQKn1dF6A2B6VbW6
eEoScsKFi+PkQ4xC1KZ32D+GqKf2eTCBkb8cEOJDW1z5MIAsqdzk0lHJitmI6lw9
h4cozo81iYDeybTrD3wxuRM1oRXcZzzrr//XIjxIZLfoQNZXPq2nelnW0w19y5/E
aJA3xDhJVjHnSdmeHOBjUPsVF5Um
-----END CERTIFICATE-----
Generated at Mon Sep 15 05:07:43 2025 by rpki-client