Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7972E79E79B811F08278F1BCDAE4EC9C.roa
File: 7972E79E79B811F08278F1BCDAE4EC9C.roa (raw, json)
Hash identifier: sk4XLitpMIdgJlBg3/0Zhwoi0l1e+PQ6tDzLg9am/pA=
Subject key identifier: 2F:5D:55:BE:78:13:A8:E4:F4:6F:79:94:16:36:40:B0:9F:7A:51:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7972E79E79B811F08278F1BCDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 09:16:07 +0000
ROA not before: Fri 15 Aug 2025 09:16:01 +0000
ROA not after: Sat 20 Sep 2025 09:16:01 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92986 (0x16b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 09:16:01 2025 GMT
Not After : Sep 20 09:16:01 2025 GMT
Subject: CN=689efad7-09f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:40:a9:ee:fa:bb:c5:f4:5a:cc:a2:92:a5:
a3:b2:31:c1:29:f4:b1:c2:52:02:38:99:d8:61:4c:
91:61:41:03:56:61:f0:c5:64:c9:4f:2b:b8:9e:98:
13:a4:4a:f9:02:21:1b:56:1d:9a:2c:74:d4:a1:e9:
e7:80:06:56:84:b0:7a:10:2f:7f:f6:46:5d:10:df:
96:6d:4f:eb:a4:61:b7:5e:6e:63:da:59:aa:43:63:
cd:f2:37:39:bd:a7:be:51:4d:9b:79:46:2f:f9:75:
c4:5b:2b:0d:76:ad:62:b0:2b:e3:df:46:1f:0f:6d:
ee:69:ba:bc:27:cc:75:c3:f9:78:71:91:f2:07:83:
e0:5d:cd:b1:e6:cd:9c:c5:0a:91:17:ad:83:e6:43:
99:50:7f:65:c5:71:33:5a:16:f1:95:0a:8e:85:98:
cf:73:cd:2f:a2:5c:1a:ef:f4:2c:11:7d:c2:81:17:
e5:6e:ca:72:bc:d0:fb:0d:43:8a:a4:41:8c:a6:ca:
46:71:4f:8c:74:5a:ef:4d:9b:b8:52:ee:57:6a:78:
a4:da:bc:94:c4:78:34:bd:78:02:ab:20:ed:cc:c1:
ad:16:43:1f:12:ba:6a:66:78:d7:c4:81:0d:7c:bb:
a8:ab:0b:95:88:a2:e6:b9:14:d0:f6:8e:99:05:3e:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:55:BE:78:13:A8:E4:F4:6F:79:94:16:36:40:B0:9F:7A:51:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7972E79E79B811F08278F1BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
13:23:69:93:02:5d:cb:9c:9f:6e:f2:00:94:b7:7d:04:fa:92:
05:d8:9e:7a:9b:8a:2d:38:f8:78:bd:a6:4f:89:64:5e:90:fb:
24:76:21:b9:91:95:6f:55:3b:ce:f9:7c:c5:31:8e:77:3d:02:
5b:5e:2f:5d:42:c0:3f:8d:0f:19:b3:0d:97:90:f4:49:fe:2c:
6f:60:e8:72:1d:5d:72:b0:47:b4:f1:fa:f2:c0:d0:e5:f6:c5:
fe:1f:9e:43:0c:bc:4d:19:61:f8:31:16:74:9d:58:ac:0e:83:
68:8e:91:e4:6e:36:a3:47:26:cc:f1:d5:a1:4a:0d:71:61:82:
8f:df:56:17:4d:b2:4a:20:f8:ef:62:7c:23:12:ae:2c:16:68:
66:a9:7b:93:ea:f3:8c:43:53:68:4b:d1:bb:d2:a5:62:51:51:
05:8a:11:b6:bf:8e:0f:f2:cb:b3:36:91:22:1a:7f:32:bd:44:
67:03:07:58:1a:01:e0:a7:92:07:2d:b7:0c:45:e4:ca:b2:c7:
4c:78:32:ba:1e:06:84:c8:e5:68:d3:7c:ab:2a:92:3d:d3:16:
5b:2e:06:85:31:b3:a9:59:33:49:f3:57:db:1c:ca:64:b4:df:
af:2f:28:fa:f4:3f:3c:b8:48:75:9d:61:f1:2c:92:27:2f:6a:
0d:e0:b8:6f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWs6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODE1MDkxNjAxWhcNMjUwOTIwMDkxNjAxWjAYMRYw
FAYDVQQDEw02ODllZmFkNy0wOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw/ZAqe76u8X0WsyikqWjsjHBKfSxwlICOJnYYUyRYUEDVmHwxWTJTyu4
npgTpEr5AiEbVh2aLHTUoenngAZWhLB6EC9/9kZdEN+WbU/rpGG3Xm5j2lmqQ2PN
8jc5vae+UU2beUYv+XXEWysNdq1isCvj30YfD23uabq8J8x1w/l4cZHyB4PgXc2x
5s2cxQqRF62D5kOZUH9lxXEzWhbxlQqOhZjPc80volwa7/QsEX3CgRflbspyvND7
DUOKpEGMpspGcU+MdFrvTZu4Uu5Xanik2ryUxHg0vXgCqyDtzMGtFkMfErpqZnjX
xIENfLuoqwuViKLmuRTQ9o6ZBT45lQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC9d
Vb54E6jk9G95lBY2QLCfelEmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OTcyRTc5RTc5QjgxMUYwODI3OEYxQkNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcI2MA0GCSqGSIb3DQEBCwUA
A4IBAQATI2mTAl3LnJ9u8gCUt30E+pIF2J56m4otOPh4vaZPiWRekPskdiG5kZVv
VTvO+XzFMY53PQJbXi9dQsA/jQ8Zsw2XkPRJ/ixvYOhyHV1ysEe08frywNDl9sX+
H55DDLxNGWH4MRZ0nVisDoNojpHkbjajRybM8dWhSg1xYYKP31YXTbJKIPjvYnwj
Eq4sFmhmqXuT6vOMQ1NoS9G70qViUVEFihG2v44P8suzNpEiGn8yvURnAwdYGgHg
p5IHLbcMReTKssdMeDK6HgaEyOVo03yrKpI90xZbLgaFMbOpWTNJ81fbHMpktN+v
Lyj69D88uEh1nWHxLJInL2oN4Lhv
-----END CERTIFICATE-----
Generated at Thu Aug 21 11:09:55 2025 by rpki-client