Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74EBF53EAA8311F085B19F96DAE4EC9C.roa
File: 74EBF53EAA8311F085B19F96DAE4EC9C.roa (raw, json)
Hash identifier: c+BlTcq5kgfmO9mPTvGZpsqOuLT1xWK4TZgQAD9/ZPM=
Subject key identifier: 44:4D:30:49:D0:FC:15:94:95:AF:60:0D:94:22:15:0E:C6:4E:EC:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01812C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74EBF53EAA8311F085B19F96DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:30:03 +0000
ROA not before: Thu 16 Oct 2025 11:29:58 +0000
ROA not after: Wed 19 Nov 2025 11:29:58 +0000
asID: 52468
IP address blocks: 45.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98604 (0x1812c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 11:29:58 2025 GMT
Not After : Nov 19 11:29:58 2025 GMT
Subject: CN=68f0d73b-9478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:a9:88:d9:b5:9e:71:d1:8d:52:2b:6e:03:
10:57:be:29:8b:da:9f:08:dd:b1:b0:5a:4f:1f:64:
c8:ac:bb:b6:1d:a2:74:86:7f:df:a4:7c:9f:18:ca:
94:db:86:2a:85:cf:6c:68:e0:a9:ba:e1:44:77:11:
74:ba:7b:c5:ec:4e:13:7b:6d:4e:a6:df:d7:66:4e:
58:a1:0f:a1:b9:c0:77:f7:0a:37:90:2f:6c:e0:10:
11:b9:4d:3b:92:dc:f9:ab:90:3d:4e:e3:fc:b3:cf:
5f:78:5e:34:85:e7:52:d5:a4:75:ff:78:b6:0f:1a:
6e:64:cd:b7:76:14:03:c7:1e:5d:4b:27:f6:a8:38:
15:8f:44:76:0c:4e:e4:55:99:7c:04:49:3c:00:83:
18:04:24:64:cb:49:2e:17:29:0b:b9:db:b8:16:d6:
2b:20:f1:5f:e3:67:09:5c:b8:03:e5:65:c3:46:7c:
45:5a:6c:5d:7c:f7:c3:b9:6b:7a:6d:1d:b5:47:38:
6a:19:aa:0a:eb:cc:b0:b4:bc:f2:20:f7:b1:18:d7:
9b:37:05:79:f3:f3:20:8f:d7:1a:f9:cf:35:38:98:
a3:3d:6d:65:7b:b6:0c:95:79:40:53:ff:eb:b5:ba:
46:bf:f1:67:6d:4b:6d:7b:7b:3b:e8:a1:10:f7:f6:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:30:49:D0:FC:15:94:95:AF:60:0D:94:22:15:0E:C6:4E:EC:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74EBF53EAA8311F085B19F96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:46:74:2a:3a:fe:ab:17:01:85:fd:c6:8c:6b:db:29:73:43:
33:d3:81:3a:d4:4e:39:b0:ca:a8:cc:89:26:5f:95:c8:c8:8e:
76:ad:88:38:08:4b:90:38:90:f0:83:52:be:22:84:ef:90:70:
e2:73:dc:ee:0a:6a:b0:37:4e:63:9b:c1:7d:87:a0:b2:88:7d:
14:b1:bc:b2:db:b4:18:1c:7d:70:9b:ae:96:be:1c:5b:a3:00:
84:79:0c:03:07:98:90:ac:ec:07:49:c8:8c:0b:d6:c6:b4:34:
d4:6e:73:f7:fb:58:41:e3:84:ea:14:07:23:39:07:19:db:c2:
ad:62:31:58:b6:61:21:1e:22:5d:45:f4:97:e5:f0:d4:6e:87:
80:62:0f:93:95:22:18:41:20:2b:ad:e4:5f:07:71:b0:50:e6:
8f:7c:ac:28:d0:c1:3d:b2:53:7a:bc:6e:99:6b:da:d9:73:0b:
e0:26:12:d2:4e:53:c3:03:f3:f3:c0:e6:78:f4:f9:4b:d1:50:
e6:f2:8d:30:dc:8c:cb:d6:36:75:0c:2e:99:50:df:92:ed:2b:
7b:30:39:ab:e5:20:e7:65:2d:9f:53:07:08:63:17:e8:47:8b:
65:70:03:c4:78:5e:a0:e3:89:b8:db:c3:1c:49:c7:d2:5b:fd:
1a:f0:74:ed
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYEsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDE2MTEyOTU4WhcNMjUxMTE5MTEyOTU4WjAYMRYw
FAYDVQQDEw02OGYwZDczYi05NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0dipiNm1nnHRjVIrbgMQV74pi9qfCN2xsFpPH2TIrLu2HaJ0hn/fpHyf
GMqU24Yqhc9saOCpuuFEdxF0unvF7E4Te21Opt/XZk5YoQ+hucB39wo3kC9s4BAR
uU07ktz5q5A9TuP8s89feF40hedS1aR1/3i2DxpuZM23dhQDxx5dSyf2qDgVj0R2
DE7kVZl8BEk8AIMYBCRky0kuFykLudu4FtYrIPFf42cJXLgD5WXDRnxFWmxdfPfD
uWt6bR21RzhqGaoK68ywtLzyIPexGNebNwV58/Mgj9ca+c81OJijPW1le7YMlXlA
U//rtbpGv/FnbUtte3s76KEQ9/bBawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFERN
MEnQ/BWUla9gDZQiFQ7GTux0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NEVCRjUzRUFBODMxMUYwODVCMTlGOTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNfMA0GCSqGSIb3DQEBCwUA
A4IBAQCcRnQqOv6rFwGF/caMa9spc0Mz04E61E45sMqozIkmX5XIyI52rYg4CEuQ
OJDwg1K+IoTvkHDic9zuCmqwN05jm8F9h6CyiH0Usbyy27QYHH1wm66WvhxbowCE
eQwDB5iQrOwHSciMC9bGtDTUbnP3+1hB44TqFAcjOQcZ28KtYjFYtmEhHiJdRfSX
5fDUboeAYg+TlSIYQSArreRfB3GwUOaPfKwo0ME9slN6vG6Za9rZcwvgJhLSTlPD
A/PzwOZ49PlL0VDm8o0w3IzL1jZ1DC6ZUN+S7St7MDmr5SDnZS2fUwcIYxfoR4tl
cAPEeF6g44m428McScfSW/0a8HTt
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:58 2025 by rpki-client