Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951E7888A5C711F0AA2724ADDAE4EC9C.roa
File: 951E7888A5C711F0AA2724ADDAE4EC9C.roa (raw, json)
Hash identifier: X6oPr9/HsB7d9fP7mkHjKv8EjfQWAYmRaxLBN+fHRDQ=
Subject key identifier: B9:4A:F6:01:C6:C4:35:E0:55:CD:8D:9D:DF:67:46:75:E7:2E:E4:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018002
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951E7888A5C711F0AA2724ADDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 10:55:07 +0000
ROA not before: Fri 10 Oct 2025 10:54:59 +0000
ROA not after: Sat 22 Nov 2025 10:54:59 +0000
asID: 273986
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98306 (0x18002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 10:54:59 2025 GMT
Not After : Nov 22 10:54:59 2025 GMT
Subject: CN=68e8e60b-4540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:34:6e:f1:ad:b8:be:11:2b:5c:28:e8:79:
c6:94:54:78:26:3f:f3:76:c9:aa:88:a5:ca:4a:1a:
30:7f:bb:09:de:ee:06:22:70:f5:78:9d:27:fe:f2:
f8:d4:27:7b:76:62:b0:12:9b:a5:4f:c7:64:a5:81:
33:8a:e2:f7:cb:11:f4:72:26:30:51:c9:47:c8:50:
a9:71:ef:e9:17:18:5c:ed:fe:a5:87:49:21:c0:1f:
5f:02:a9:e2:5b:ed:dc:bc:bd:bb:26:16:91:60:fc:
f7:40:51:79:9e:f7:4a:59:a3:33:bd:e5:ca:23:cc:
89:e1:fb:f5:08:19:9f:69:5f:19:60:6e:e8:d7:30:
2e:ee:38:e2:21:97:eb:ab:59:b0:2c:c6:cc:22:39:
0b:3b:3e:50:92:79:11:b6:b5:e6:89:18:c1:41:f0:
80:54:fa:07:4f:57:15:fd:67:c6:10:05:61:27:56:
2a:fd:8a:db:ec:3d:c2:d6:a1:d2:a9:b6:cc:fd:57:
91:81:5d:53:b8:ae:01:e5:b1:49:c4:3b:93:98:16:
23:1c:c6:c1:ac:9a:15:e9:49:62:66:36:05:f4:f6:
f9:ec:6b:d1:cf:c6:2e:d6:ea:83:6b:85:ec:e3:76:
16:cf:4c:0d:a2:f4:1f:5f:c6:f4:8d:8e:36:d1:bd:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4A:F6:01:C6:C4:35:E0:55:CD:8D:9D:DF:67:46:75:E7:2E:E4:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951E7888A5C711F0AA2724ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:db:cc:ac:93:5d:52:34:65:84:85:b8:d9:4c:a3:0e:9c:16:
69:7d:39:ba:9c:d8:4c:45:ef:f7:29:c2:dd:31:e6:af:ef:8c:
11:e9:c6:c2:ee:6f:75:1b:dc:26:96:c7:76:76:1b:78:a9:84:
e0:18:7e:ad:f7:a8:2a:fc:b3:48:fb:54:24:d1:87:d3:5d:1d:
d9:0d:d8:5a:c2:1b:ce:35:c5:2c:49:8c:0b:3f:c0:26:44:64:
42:7e:e7:05:24:c7:00:fa:93:5e:a4:ee:e2:d4:e7:c8:41:05:
e4:77:40:63:62:8d:34:cc:4d:1b:74:61:fd:90:75:c2:3c:d1:
5c:75:74:62:c3:66:88:e3:42:e9:6c:fb:59:2e:4a:e8:d9:25:
96:45:c9:e4:16:0b:fc:05:7d:bd:a8:1c:2b:13:c7:00:f2:fd:
b8:b5:bc:9a:7f:96:b1:10:f4:22:b5:82:e4:25:00:de:8f:ea:
76:ed:61:93:62:ef:98:b6:22:37:50:f5:e4:06:52:f1:aa:6e:
0c:2d:cf:18:7f:77:31:49:d0:be:16:b7:ae:29:2d:0c:41:e3:
08:4e:68:39:23:4b:00:ff:0a:8d:69:ba:2d:85:95:42:80:21:
ae:67:95:aa:25:99:f2:58:8d:0e:2c:a3:8f:13:f5:46:af:73:
ed:32:c8:96
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYACMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDEwMTA1NDU5WhcNMjUxMTIyMTA1NDU5WjAYMRYw
FAYDVQQDEw02OGU4ZTYwYi00NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1CA0bvGtuL4RK1wo6HnGlFR4Jj/zdsmqiKXKShowf7sJ3u4GInD1eJ0n
/vL41Cd7dmKwEpulT8dkpYEziuL3yxH0ciYwUclHyFCpce/pFxhc7f6lh0khwB9f
AqniW+3cvL27JhaRYPz3QFF5nvdKWaMzveXKI8yJ4fv1CBmfaV8ZYG7o1zAu7jji
IZfrq1mwLMbMIjkLOz5QknkRtrXmiRjBQfCAVPoHT1cV/WfGEAVhJ1Yq/Yrb7D3C
1qHSqbbM/VeRgV1TuK4B5bFJxDuTmBYjHMbBrJoV6UliZjYF9Pb57GvRz8Yu1uqD
a4Xs43YWz0wNovQfX8b0jY420b0V+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLlK
9gHGxDXgVc2Nnd9nRnXnLuTMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTFFNzg4OEE1QzcxMUYwQUEyNzI0QUREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ3MA0GCSqGSIb3DQEBCwUA
A4IBAQB/28ysk11SNGWEhbjZTKMOnBZpfTm6nNhMRe/3KcLdMeav74wR6cbC7m91
G9wmlsd2dht4qYTgGH6t96gq/LNI+1Qk0YfTXR3ZDdhawhvONcUsSYwLP8AmRGRC
fucFJMcA+pNepO7i1OfIQQXkd0BjYo00zE0bdGH9kHXCPNFcdXRiw2aI40LpbPtZ
Lkro2SWWRcnkFgv8BX29qBwrE8cA8v24tbyaf5axEPQitYLkJQDej+p27WGTYu+Y
tiI3UPXkBlLxqm4MLc8Yf3cxSdC+FreuKS0MQeMITmg5I0sA/wqNabothZVCgCGu
Z5WqJZnyWI0OLKOPE/VGr3PtMsiW
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:09 2025 by rpki-client