Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/741F3D4C9DCB11F08362BAE8DAE4EC9C.roa
File: 741F3D4C9DCB11F08362BAE8DAE4EC9C.roa (raw, json)
Hash identifier: JEIe9VfF5g5vRS/9x+LDWage8ht2G732GmtSjinedzU=
Subject key identifier: 62:18:07:A5:36:69:A3:DF:22:CE:36:17:F0:2E:34:12:B5:5E:AC:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/741F3D4C9DCB11F08362BAE8DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 07:02:41 +0000
ROA not before: Tue 30 Sep 2025 07:02:36 +0000
ROA not after: Tue 28 Oct 2025 07:02:36 +0000
asID: 202656
IP address blocks: 45.192.48.0/24 maxlen: 24
45.192.49.0/24 maxlen: 24
45.192.50.0/24 maxlen: 24
45.192.51.0/24 maxlen: 24
45.192.54.0/24 maxlen: 24
45.192.55.0/24 maxlen: 24
45.192.56.0/24 maxlen: 24
45.192.57.0/24 maxlen: 24
45.192.58.0/24 maxlen: 24
45.192.60.0/24 maxlen: 24
45.195.182.0/24 maxlen: 24
45.195.183.0/24 maxlen: 24
45.195.184.0/24 maxlen: 24
45.195.185.0/24 maxlen: 24
45.195.187.0/24 maxlen: 24
45.195.188.0/24 maxlen: 24
45.195.191.0/24 maxlen: 24
45.199.192.0/24 maxlen: 24
45.199.193.0/24 maxlen: 24
45.199.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97801 (0x17e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 07:02:36 2025 GMT
Not After : Oct 28 07:02:36 2025 GMT
Subject: CN=68db8090-f16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:f8:f7:63:04:fb:4d:77:c3:47:e5:62:6b:
b5:1e:dc:d9:e2:40:cf:3f:89:bf:b0:f8:3c:3f:7a:
0f:b7:03:1c:30:e7:45:3e:18:9a:15:bb:a5:d4:20:
1f:8c:13:57:52:f7:5c:2a:d6:89:3a:f6:c5:94:d9:
60:c0:51:07:82:38:8f:a3:f6:84:56:67:28:9e:0a:
de:65:a9:be:b9:50:eb:02:6b:04:c2:25:52:b0:06:
ed:e3:1a:22:e0:5b:15:a9:be:d4:99:a3:01:d3:bc:
c4:ac:c8:e9:5a:36:4f:0a:52:36:e4:7e:4d:51:21:
22:95:e4:e8:cd:b6:47:2d:e5:39:36:90:1a:fc:2a:
10:75:97:a9:82:74:fc:2d:be:f9:20:b5:88:ff:8d:
63:ea:ec:bc:49:38:64:88:7f:23:e6:ca:34:ac:58:
f8:5f:3c:1e:52:0e:73:a0:80:72:2b:5f:8c:19:9a:
c9:9b:4a:1d:e9:a0:1c:02:fd:ec:e1:7f:5f:3c:bc:
67:de:1d:2e:c4:01:f0:1a:a9:07:ec:68:28:80:0f:
d3:54:43:d6:41:ac:e0:56:11:f4:81:2d:6e:3d:42:
d0:c1:9f:48:80:9a:0c:01:aa:47:97:3c:80:44:00:
d0:df:27:6b:88:0b:60:bd:b0:23:f5:ed:fe:d6:77:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:07:A5:36:69:A3:DF:22:CE:36:17:F0:2E:34:12:B5:5E:AC:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/741F3D4C9DCB11F08362BAE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/22
45.192.54.0-45.192.58.255
45.192.60.0/24
45.195.182.0-45.195.185.255
45.195.187.0-45.195.188.255
45.195.191.0/24
45.199.192.0-45.199.194.255
Signature Algorithm: sha256WithRSAEncryption
42:52:09:40:c0:e7:fc:a5:03:c4:81:17:60:f7:be:14:c6:5a:
c3:68:43:eb:38:a1:50:91:73:c9:b0:5e:8a:ba:06:a3:43:e7:
b0:2b:0e:00:b7:a3:81:0a:b0:33:a9:52:5d:b6:5b:bc:e0:87:
75:de:6f:ed:aa:7a:eb:65:79:dd:df:eb:f5:a9:6c:c3:14:0e:
f8:81:2b:17:b7:8d:1b:2f:94:bb:24:3a:81:3d:bb:46:b8:7a:
c0:3a:21:75:69:eb:67:f8:82:91:a3:34:15:ec:95:a3:0c:56:
43:d4:85:f8:cf:22:40:bf:46:a9:5c:28:9c:38:ba:27:c9:5d:
25:05:04:c7:de:f4:e9:3e:86:28:9c:ce:5c:26:a6:32:96:aa:
7a:58:f1:59:7a:bd:58:bd:00:e2:4a:70:b0:00:f3:a0:cb:1b:
4c:4f:82:c5:a8:fc:39:7b:fc:c3:ff:86:d5:73:87:49:8c:00:
e4:3b:6a:30:a1:e6:83:69:3c:98:a4:ef:d8:37:ec:46:6c:39:
d1:a7:8f:67:8a:01:d8:ce:45:36:7b:77:1d:fe:a5:54:53:55:
15:8a:0c:70:0f:11:45:5d:68:2b:54:6e:6c:66:29:9a:b1:72:
4e:d2:6f:75:f9:91:94:79:29:57:66:14:09:31:ea:c2:b9:c1:
e7:44:c9:51
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIDAX4JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTMwMDcwMjM2WhcNMjUxMDI4MDcwMjM2WjAYMRYw
FAYDVQQDEw02OGRiODA5MC1mMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4qD492ME+013w0flYmu1HtzZ4kDPP4m/sPg8P3oPtwMcMOdFPhiaFbul
1CAfjBNXUvdcKtaJOvbFlNlgwFEHgjiPo/aEVmcongreZam+uVDrAmsEwiVSsAbt
4xoi4FsVqb7UmaMB07zErMjpWjZPClI25H5NUSEileTozbZHLeU5NpAa/CoQdZep
gnT8Lb75ILWI/41j6uy8SThkiH8j5so0rFj4XzweUg5zoIByK1+MGZrJm0od6aAc
Av3s4X9fPLxn3h0uxAHwGqkH7GgogA/TVEPWQazgVhH0gS1uPULQwZ9IgJoMAapH
lzyARADQ3ydriAtgvbAj9e3+1neAewIDAQABo4IC5jCCAuIwHQYDVR0OBBYEFGIY
B6U2aaPfIs42F/AuNBK1XqxTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDFGM0Q0QzlEQ0IxMUYwODM2MkJBRThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQCLcAwMAwDBAEtwDYDBAAtwDoD
BAAtwDwwDAMEAS3DtgMEAS3DuDAMAwQALcO7AwQALcO8AwQALcO/MAwDBAYtx8AD
BAAtx8IwDQYJKoZIhvcNAQELBQADggEBAEJSCUDA5/ylA8SBF2D3vhTGWsNoQ+s4
oVCRc8mwXoq6BqND57ArDgC3o4EKsDOpUl22W7zgh3Xeb+2qeutled3f6/WpbMMU
DviBKxe3jRsvlLskOoE9u0a4esA6IXVp62f4gpGjNBXslaMMVkPUhfjPIkC/Rqlc
KJw4uifJXSUFBMfe9Ok+hiiczlwmpjKWqnpY8Vl6vVi9AOJKcLAA86DLG0xPgsWo
/Dl7/MP/htVzh0mMAOQ7ajCh5oNpPJik79g37EZsOdGnj2eKAdjORTZ7dx3+pVRT
VRWKDHAPEUVdaCtUbmxmKZqxck7Sb3X5kZR5KVdmFAkx6sK5wedEyVE=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:14 2025 by rpki-client