Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D2BE4E4889611F081792DC6DAE4EC9C.roa
File: 6D2BE4E4889611F081792DC6DAE4EC9C.roa (raw, json)
Hash identifier: ek8PKtbU4sAJR8K32EGRtekLlHa9ewjlWT+/7Wvb0nA=
Subject key identifier: D6:82:E7:39:7C:D2:F8:78:81:EE:1A:80:D2:83:DA:E9:3E:B6:6F:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01774A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D2BE4E4889611F081792DC6DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:20:11 +0000
ROA not before: Wed 03 Sep 2025 07:20:06 +0000
ROA not after: Thu 09 Oct 2025 07:20:06 +0000
asID: 215391
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96074 (0x1774a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 07:20:06 2025 GMT
Not After : Oct 9 07:20:06 2025 GMT
Subject: CN=68b7ec2b-7831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:d0:e4:a9:0b:e5:77:8a:91:84:14:f8:d3:
76:be:cc:98:88:01:99:e3:40:4d:78:bc:c0:f9:e2:
84:c5:7f:3d:c3:e7:04:96:fb:b9:39:a0:41:7f:31:
c3:bf:f7:90:67:86:9b:62:e2:6f:3c:67:c7:20:a9:
95:72:4f:d7:be:c8:b9:83:12:37:28:e1:a1:bb:14:
71:54:ec:85:de:ae:78:fe:1d:92:0c:72:9b:13:34:
e5:77:41:20:90:b7:0b:6b:d3:d2:97:fa:7e:70:bb:
53:f0:07:62:72:90:ce:08:2a:b2:ae:05:74:42:2f:
d6:16:1b:0d:9f:98:f5:6a:63:32:63:cd:a6:7a:fd:
4b:2c:d6:59:f7:81:0c:44:0b:f4:ae:88:67:5b:05:
08:1e:2c:01:10:f0:e1:1a:b7:28:08:6f:5f:8b:41:
0d:65:0c:88:38:7e:4e:ef:d4:fa:62:cb:de:75:8a:
6b:5f:69:0c:de:b8:68:a5:12:0e:b9:d2:4d:f0:94:
02:3a:0c:a4:56:84:20:52:20:7e:cb:44:69:72:a5:
51:05:df:5d:af:69:81:b7:d8:77:88:b9:e6:5d:21:
bd:0d:11:8b:ac:de:a0:6b:e9:87:17:84:55:57:e4:
2a:3d:53:87:03:e6:00:ac:4c:c6:90:43:07:0a:24:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:E7:39:7C:D2:F8:78:81:EE:1A:80:D2:83:DA:E9:3E:B6:6F:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D2BE4E4889611F081792DC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:aa:d8:f4:95:e5:dc:71:29:ee:c5:c0:ca:6e:29:96:68:eb:
20:41:74:c9:c2:77:34:e6:ab:4a:15:1d:71:59:ae:af:de:c0:
86:17:08:75:bd:9e:da:ec:4d:05:40:4d:18:58:67:e4:ec:5f:
6a:9d:fb:72:46:1d:d5:d5:aa:9c:56:56:9a:85:fc:3d:01:62:
61:07:e0:ea:25:67:1d:ab:96:70:1c:75:d8:53:69:a2:52:f2:
93:13:2a:d6:9f:ce:f2:77:ee:53:04:f4:4e:c0:6c:88:6e:f3:
3f:94:ac:4c:f4:4d:c0:9e:c2:45:b9:c1:bb:a7:7e:b5:4b:51:
9c:ce:f2:22:ff:b9:e6:c7:3c:09:d7:d9:f4:d3:70:36:01:28:
fb:a3:b9:e2:81:8f:b6:ae:9a:98:ec:a4:25:13:7e:b4:66:3c:
82:52:ec:72:be:d9:35:e4:e8:ba:25:4f:82:53:4a:8f:ef:46:
4d:47:24:9e:35:85:1d:ce:55:1b:69:a2:af:84:2a:d4:5e:3f:
be:0b:ba:dc:a4:3d:45:8f:d6:bc:2b:e0:40:e0:4a:6c:ec:5c:
f6:2a:6d:f1:bb:8b:e2:cb:eb:9d:54:6f:59:95:5c:7d:a2:aa:
6a:e8:18:60:4c:e7:78:62:f2:73:9b:2b:a5:67:0e:ae:bc:a6:
c6:08:ee:29
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXdKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAzMDcyMDA2WhcNMjUxMDA5MDcyMDA2WjAYMRYw
FAYDVQQDEw02OGI3ZWMyYi03ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnJHQ5KkL5XeKkYQU+NN2vsyYiAGZ40BNeLzA+eKExX89w+cElvu5OaBB
fzHDv/eQZ4abYuJvPGfHIKmVck/Xvsi5gxI3KOGhuxRxVOyF3q54/h2SDHKbEzTl
d0EgkLcLa9PSl/p+cLtT8AdicpDOCCqyrgV0Qi/WFhsNn5j1amMyY82mev1LLNZZ
94EMRAv0rohnWwUIHiwBEPDhGrcoCG9fi0ENZQyIOH5O79T6YsvedYprX2kM3rho
pRIOudJN8JQCOgykVoQgUiB+y0RpcqVRBd9dr2mBt9h3iLnmXSG9DRGLrN6ga+mH
F4RVV+QqPVOHA+YArEzGkEMHCiR6bQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNaC
5zl80vh4ge4agNKD2uk+tm/5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RDJCRTRFNDg4OTYxMUYwODE3OTJEQzZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcATMA0GCSqGSIb3DQEBCwUA
A4IBAQBdqtj0leXccSnuxcDKbimWaOsgQXTJwnc05qtKFR1xWa6v3sCGFwh1vZ7a
7E0FQE0YWGfk7F9qnftyRh3V1aqcVlaahfw9AWJhB+DqJWcdq5ZwHHXYU2miUvKT
EyrWn87yd+5TBPROwGyIbvM/lKxM9E3AnsJFucG7p361S1GczvIi/7nmxzwJ19n0
03A2ASj7o7nigY+2rpqY7KQlE360ZjyCUuxyvtk15Oi6JU+CU0qP70ZNRySeNYUd
zlUbaaKvhCrUXj++C7rcpD1Fj9a8K+BA4Eps7Fz2Km3xu4viy+udVG9ZlVx9oqpq
6BhgTOd4YvJzmyulZw6uvKbGCO4p
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:56 2025 by rpki-client