Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FC45F094FF11F0896FF1E5DAE4EC9C.roa
File: 87FC45F094FF11F0896FF1E5DAE4EC9C.roa (raw, json)
Hash identifier: apcDmeo2eMV9Q8Bs8oNp26S9qu3tYWoizNQmtVNm/ek=
Subject key identifier: DD:8C:B2:F2:F2:27:D7:1B:AE:25:E5:2C:7D:0B:22:AE:59:6B:2C:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FC45F094FF11F0896FF1E5DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 02:22:47 +0000
ROA not before: Fri 19 Sep 2025 02:22:41 +0000
ROA not after: Tue 06 Oct 2026 02:22:41 +0000
asID: 29779
IP address blocks: 45.199.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97321 (0x17c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 02:22:41 2025 GMT
Not After : Oct 6 02:22:41 2026 GMT
Subject: CN=68ccbe77-7b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:83:c3:f7:58:01:0b:d3:f2:a5:ec:77:5c:
52:d7:c7:ab:23:38:5c:c7:17:bf:0d:22:46:fa:79:
57:1c:a6:64:f8:0c:0e:d5:1b:5b:2c:6a:4e:a7:6f:
44:0f:53:76:fb:82:01:51:ca:9a:49:44:b4:e1:ff:
d9:f3:f8:68:33:95:77:f1:f7:d1:ec:b1:02:d5:69:
f3:d6:29:11:9b:c9:6d:25:52:fa:38:8e:06:23:ac:
0c:0e:fc:38:9d:f6:0f:50:b2:1a:8f:ac:92:d2:a8:
38:3d:39:94:c8:56:c9:4c:05:fe:67:97:58:ba:9f:
f7:e9:0f:e8:73:31:d6:b5:16:54:8d:bf:8d:ed:32:
44:3d:02:1e:08:39:66:65:d3:6b:d5:ad:4a:04:e4:
d5:80:8f:80:ac:da:25:ab:a0:16:71:04:41:5c:f3:
74:a7:a7:93:1d:da:cf:8f:a0:d3:78:12:00:26:41:
89:57:45:23:91:b7:7f:fa:80:6e:a6:d4:f2:96:ba:
a8:14:4a:7a:52:c8:87:8f:6c:59:6f:8f:28:1b:45:
8c:1e:52:87:6d:ef:70:51:a3:fe:42:da:ef:ee:b7:
39:e6:cb:24:7c:70:f0:b0:be:a7:31:c2:50:49:c1:
fd:b1:e9:a9:49:a7:c0:65:e7:5b:fc:ba:54:cb:24:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:B2:F2:F2:27:D7:1B:AE:25:E5:2C:7D:0B:22:AE:59:6B:2C:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FC45F094FF11F0896FF1E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a9:d1:7b:b4:af:f9:88:7e:df:4e:5e:27:99:96:96:ef:1a:
3b:04:29:29:60:6f:3f:3d:2b:38:32:32:54:bb:98:1d:99:6e:
4f:5b:5c:19:45:61:3c:b3:d3:70:61:76:4a:b4:f9:85:42:06:
2a:7c:bc:16:71:0b:85:47:f9:e3:86:d0:2b:4a:30:a2:18:99:
78:3c:a1:d2:51:1c:44:9a:68:5f:15:69:b1:7b:b2:cb:89:1c:
ba:97:6f:65:9b:69:11:58:91:f5:44:bd:95:f4:1b:41:2e:a2:
bf:ea:66:1d:6e:bf:d4:15:35:bb:44:c8:89:e0:aa:03:4d:b3:
f2:9c:4c:76:d6:20:7a:8d:3d:7b:2f:9f:da:54:44:71:57:a2:
39:50:38:b0:27:27:11:e2:46:76:9a:c3:9c:2c:09:db:b4:01:
c5:06:66:de:c1:79:40:09:c7:ec:23:30:e8:a9:0b:64:32:09:
c6:fa:1e:70:22:8f:eb:ec:0b:b2:32:b0:d5:06:43:48:5d:89:
ed:08:24:00:32:a7:6c:f8:d4:16:2b:ab:1e:6f:24:b4:03:a9:
ec:53:a5:40:94:d2:bd:ed:78:52:42:17:ea:81:cc:f7:ee:45:
09:0c:3f:e0:38:56:7b:70:15:57:4a:25:b3:9e:a1:22:ea:6a:
b4:c4:c7:f2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXwpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE5MDIyMjQxWhcNMjYxMDA2MDIyMjQxWjAYMRYw
FAYDVQQDEw02OGNjYmU3Ny03YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7EaDw/dYAQvT8qXsd1xS18erIzhcxxe/DSJG+nlXHKZk+AwO1RtbLGpO
p29ED1N2+4IBUcqaSUS04f/Z8/hoM5V38ffR7LEC1Wnz1ikRm8ltJVL6OI4GI6wM
Dvw4nfYPULIaj6yS0qg4PTmUyFbJTAX+Z5dYup/36Q/oczHWtRZUjb+N7TJEPQIe
CDlmZdNr1a1KBOTVgI+ArNolq6AWcQRBXPN0p6eTHdrPj6DTeBIAJkGJV0Ujkbd/
+oBuptTylrqoFEp6UsiHj2xZb48oG0WMHlKHbe9wUaP+Qtrv7rc55sskfHDwsL6n
McJQScH9sempSafAZedb/LpUyyR+mwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN2M
svLyJ9cbriXlLH0LIq5ZayyYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84N0ZDNDVGMDk0RkYxMUYwODk2RkYxRTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceuMA0GCSqGSIb3DQEBCwUA
A4IBAQB+qdF7tK/5iH7fTl4nmZaW7xo7BCkpYG8/PSs4MjJUu5gdmW5PW1wZRWE8
s9NwYXZKtPmFQgYqfLwWcQuFR/njhtArSjCiGJl4PKHSURxEmmhfFWmxe7LLiRy6
l29lm2kRWJH1RL2V9BtBLqK/6mYdbr/UFTW7RMiJ4KoDTbPynEx21iB6jT17L5/a
VERxV6I5UDiwJycR4kZ2msOcLAnbtAHFBmbewXlACcfsIzDoqQtkMgnG+h5wIo/r
7AuyMrDVBkNIXYntCCQAMqds+NQWK6sebyS0A6nsU6VAlNK97XhSQhfqgcz37kUJ
DD/gOFZ7cBVXSiWznqEi6mq0xMfy
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:24 2025 by rpki-client