Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81637216BF1311F0AD7E1878DAE4EC9C.roa
File: 81637216BF1311F0AD7E1878DAE4EC9C.roa (raw, json)
Hash identifier: pa1y72IQ0k4Wlir6r4DlqQgNpg8JEO6NjY0YlFasbOk=
Subject key identifier: 52:44:E5:B7:7C:A4:D0:93:0E:A3:A9:CD:01:23:30:DB:31:40:F5:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018682
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81637216BF1311F0AD7E1878DAE4EC9C.roa
Signing time: Tue 11 Nov 2025 15:31:35 +0000
ROA not before: Tue 11 Nov 2025 15:31:30 +0000
ROA not after: Tue 16 Dec 2025 15:31:30 +0000
asID: 51142
IP address blocks: 45.195.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 13 Nov 2025 04:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99970 (0x18682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 11 15:31:30 2025 GMT
Not After : Dec 16 15:31:30 2025 GMT
Subject: CN=691356d7-e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:df:d7:78:af:00:b4:fb:8f:89:46:83:c3:
73:56:a6:e1:c7:89:20:c9:ba:67:3c:dd:8b:15:a2:
87:7c:47:8a:82:8e:71:0b:14:b9:b1:95:76:15:54:
45:72:50:c6:af:52:48:70:d6:94:41:2e:ab:17:6e:
21:54:55:ff:6a:d5:f0:eb:bc:10:0e:7b:c6:9d:ae:
da:58:94:a9:0d:6e:a0:4b:b8:ed:72:37:63:9e:d1:
af:d2:75:e0:3f:b3:7d:27:f3:d6:13:c4:33:91:9a:
64:7c:99:28:45:6e:c8:4f:ef:e5:ab:d5:24:f4:b2:
3a:1d:cc:7a:7d:67:6f:0c:01:29:7e:db:ef:ec:2b:
b8:5b:3f:23:99:61:9e:39:ed:19:f1:9c:d8:a6:6e:
ec:d8:fe:21:49:cb:ec:9b:36:68:6e:93:eb:ed:e9:
5b:45:4b:20:51:7d:45:18:7c:06:f0:f3:3d:51:06:
f5:1d:ea:06:8b:3e:8a:7d:6e:7e:63:24:21:34:07:
24:7b:0d:48:62:7a:73:e1:0e:08:8b:26:62:fc:fe:
86:b1:c0:f3:44:b9:9d:c9:c2:bb:10:fe:67:b1:a7:
b5:e0:d2:e0:c6:3f:66:e5:34:65:9c:42:6f:64:91:
77:87:0a:0e:f5:f2:12:a1:0f:74:9a:ba:55:76:fc:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:E5:B7:7C:A4:D0:93:0E:A3:A9:CD:01:23:30:DB:31:40:F5:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81637216BF1311F0AD7E1878DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8d:fa:b2:e5:53:e6:0c:f2:67:ee:cc:00:dd:5a:e1:cd:49:
a7:01:4b:8c:4c:75:1c:d5:89:8c:da:16:3e:0d:71:f2:46:ec:
ef:8a:8b:a9:27:71:fd:b5:48:79:e0:10:c2:49:06:36:04:c8:
42:cc:3f:9a:21:0e:dc:fd:d5:a6:d2:b9:08:5a:1a:59:4a:04:
8f:5f:44:fb:e0:ef:95:5c:3f:28:49:2a:cf:af:0b:b6:85:42:
93:32:dd:c1:f3:f9:fb:c8:ce:9e:9b:7a:64:b8:4a:7d:fe:0b:
22:4c:e5:d4:7d:ac:ab:f8:9e:e2:e7:47:6d:c4:f0:07:6c:cc:
39:29:af:9e:53:6b:b5:04:fe:64:75:fb:7a:3a:69:30:bb:9b:
a9:2b:9a:6f:22:26:a6:c3:81:32:6b:69:48:04:55:23:ee:dd:
87:c2:96:96:24:2a:f6:a7:3e:c4:bb:29:8c:59:7f:26:81:5b:
a9:68:b5:98:48:23:1f:0b:84:1d:46:44:7b:00:81:8b:dd:83:
56:5e:69:4b:49:3a:a2:75:6c:fd:fb:a6:31:03:65:3f:2e:0a:
dd:3a:df:93:b9:3c:30:2f:f4:76:8b:98:27:b3:a4:7a:c6:65:
d2:97:71:92:9e:56:18:62:d7:52:68:13:bf:e7:cf:30:87:31:
d0:df:03:98
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYaCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTExMTUzMTMwWhcNMjUxMjE2MTUzMTMwWjAYMRYw
FAYDVQQDEw02OTEzNTZkNy1lMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvCbf13ivALT7j4lGg8NzVqbhx4kgybpnPN2LFaKHfEeKgo5xCxS5sZV2
FVRFclDGr1JIcNaUQS6rF24hVFX/atXw67wQDnvGna7aWJSpDW6gS7jtcjdjntGv
0nXgP7N9J/PWE8QzkZpkfJkoRW7IT+/lq9Uk9LI6Hcx6fWdvDAEpftvv7Cu4Wz8j
mWGeOe0Z8ZzYpm7s2P4hScvsmzZobpPr7elbRUsgUX1FGHwG8PM9UQb1HeoGiz6K
fW5+YyQhNAckew1IYnpz4Q4IiyZi/P6GscDzRLmdycK7EP5nsae14NLgxj9m5TRl
nEJvZJF3hwoO9fISoQ90mrpVdvwKrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFJE
5bd8pNCTDqOpzQEjMNsxQPVvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MTYzNzIxNkJGMTMxMUYwQUQ3RTE4NzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOLMA0GCSqGSIb3DQEBCwUA
A4IBAQCVjfqy5VPmDPJn7swA3VrhzUmnAUuMTHUc1YmM2hY+DXHyRuzvioupJ3H9
tUh54BDCSQY2BMhCzD+aIQ7c/dWm0rkIWhpZSgSPX0T74O+VXD8oSSrPrwu2hUKT
Mt3B8/n7yM6em3pkuEp9/gsiTOXUfayr+J7i50dtxPAHbMw5Ka+eU2u1BP5kdft6
Omkwu5upK5pvIiamw4Eya2lIBFUj7t2HwpaWJCr2pz7EuymMWX8mgVupaLWYSCMf
C4QdRkR7AIGL3YNWXmlLSTqidWz9+6YxA2U/LgrdOt+TuTwwL/R2i5gns6R6xmXS
l3GSnlYYYtdSaBO/588whzHQ3wOY
-----END CERTIFICATE-----
Generated at Tue Nov 11 19:48:09 2025 by rpki-client