Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EFB6C50996E11F08FC39E98DAE4EC9C.roa
File: 8EFB6C50996E11F08FC39E98DAE4EC9C.roa (raw, json)
Hash identifier: FSz1vvtraDZicL4HpfNwbYhauIEWvjNQ3sWohZ5OxGo=
Subject key identifier: 7F:4E:B0:4E:35:A4:A9:2A:0F:4E:27:88:96:A4:21:E3:51:16:1E:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EFB6C50996E11F08FC39E98DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 17:47:38 +0000
ROA not before: Wed 24 Sep 2025 17:47:33 +0000
ROA not after: Thu 30 Oct 2025 17:47:33 +0000
asID: 398823
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97537 (0x17d01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 17:47:33 2025 GMT
Not After : Oct 30 17:47:33 2025 GMT
Subject: CN=68d42eb9-2a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:11:00:3f:9b:e6:1d:49:fe:b7:fc:16:81:
da:91:71:b5:cd:91:86:83:a6:ac:70:7e:8f:e7:71:
73:71:b1:84:ac:89:de:76:dd:f2:dd:45:cc:e5:19:
20:52:dc:bb:f2:d4:70:6d:0c:5d:56:d1:14:51:be:
a9:49:9f:e2:f9:ae:50:7f:4c:23:33:d7:57:a9:80:
6a:9d:59:2a:77:ba:91:56:a3:da:13:93:cb:c1:6b:
d7:ee:bf:fc:db:57:45:0c:88:d1:18:d2:28:2b:2d:
6d:d2:10:c8:14:66:84:dc:0a:d6:93:5d:fb:ff:bd:
55:9f:10:6e:39:45:ef:94:f8:af:7d:b8:89:6e:8d:
63:7c:68:72:67:db:95:bd:d6:a2:61:95:0b:9a:97:
49:95:f7:d5:13:59:0d:78:20:63:19:08:22:97:ed:
c8:90:77:36:19:7c:8a:ba:15:b2:4b:95:cb:94:2c:
29:ff:62:4b:ce:a4:41:c8:fe:ee:ff:67:e4:c8:01:
da:dd:36:d4:9a:2a:a3:42:6a:e2:ee:e9:b3:b4:7f:
c6:46:a8:e0:70:00:f4:ae:9d:f4:b8:60:74:80:86:
7e:7e:03:40:c9:8f:dd:0c:47:9f:23:4f:b8:72:b9:
0a:77:38:f8:0b:73:a3:10:90:80:2b:4f:60:7f:d9:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:B0:4E:35:A4:A9:2A:0F:4E:27:88:96:A4:21:E3:51:16:1E:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EFB6C50996E11F08FC39E98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:df:1f:20:04:e7:ec:a6:f7:42:0a:00:6b:29:d2:10:99:c1:
d6:29:db:27:75:13:34:22:5e:d0:e2:52:4f:b5:71:53:ac:2d:
50:c8:cd:ff:c2:e5:04:f1:db:67:25:63:c6:d6:f6:3a:0b:9c:
70:a5:8a:52:eb:e9:8d:80:09:d8:f3:e8:79:3f:dd:ed:01:df:
96:d8:6a:57:aa:cc:92:a4:e5:7d:53:f3:ec:79:52:28:5e:16:
a3:f7:4a:3a:f6:fc:ff:d0:69:fb:67:a9:89:76:bf:d8:87:1b:
b5:70:5b:13:2b:c3:27:1f:f6:e1:48:7d:ac:79:57:cd:c4:a6:
9a:89:d5:6b:f0:2e:d0:e2:80:5f:92:07:e5:44:b9:9b:4e:b7:
d6:ee:a9:3e:15:4f:d7:c1:78:b3:22:c3:f4:15:ef:d7:1b:9b:
6e:05:ec:06:66:97:75:bc:52:50:02:5e:97:13:44:e6:31:b5:
93:d5:a8:61:6d:e0:81:75:b5:77:33:bb:7e:00:0b:c8:cd:68:
87:36:68:76:7b:ca:f2:95:d4:bf:15:b6:f3:41:23:4c:ee:be:
eb:d4:82:8a:03:10:a0:35:81:8e:d3:a9:18:02:6f:5a:fe:2b:
40:e8:06:ea:8c:7e:b3:ac:07:89:53:1e:00:d5:6b:30:d4:6f:
67:6e:a9:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX0BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI0MTc0NzMzWhcNMjUxMDMwMTc0NzMzWjAYMRYw
FAYDVQQDEw02OGQ0MmViOS0yYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2NoRAD+b5h1J/rf8FoHakXG1zZGGg6ascH6P53FzcbGErInedt3y3UXM
5RkgUty78tRwbQxdVtEUUb6pSZ/i+a5Qf0wjM9dXqYBqnVkqd7qRVqPaE5PLwWvX
7r/821dFDIjRGNIoKy1t0hDIFGaE3ArWk137/71VnxBuOUXvlPivfbiJbo1jfGhy
Z9uVvdaiYZULmpdJlffVE1kNeCBjGQgil+3IkHc2GXyKuhWyS5XLlCwp/2JLzqRB
yP7u/2fkyAHa3TbUmiqjQmri7umztH/GRqjgcAD0rp30uGB0gIZ+fgNAyY/dDEef
I0+4crkKdzj4C3OjEJCAK09gf9kuRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH9O
sE41pKkqD04niJakIeNRFh6KMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RUZCNkM1MDk5NkUxMUYwOEZDMzlFOThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQB/3x8gBOfspvdCCgBrKdIQmcHWKdsndRM0Il7Q4lJPtXFTrC1QyM3/wuUE
8dtnJWPG1vY6C5xwpYpS6+mNgAnY8+h5P93tAd+W2GpXqsySpOV9U/PseVIoXhaj
90o69vz/0Gn7Z6mJdr/Yhxu1cFsTK8MnH/bhSH2seVfNxKaaidVr8C7Q4oBfkgfl
RLmbTrfW7qk+FU/XwXizIsP0Fe/XG5tuBewGZpd1vFJQAl6XE0TmMbWT1ahhbeCB
dbV3M7t+AAvIzWiHNmh2e8ryldS/FbbzQSNM7r7r1IKKAxCgNYGO06kYAm9a/itA
6AbqjH6zrAeJUx4A1Wsw1G9nbql8
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:59 2025 by rpki-client