Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97334380354F11F094B8E5A7DAE4EC9C.roa
File: 97334380354F11F094B8E5A7DAE4EC9C.roa (raw, json)
Hash identifier: wPgWePfIXQx6kbdNaCuV63FBDWczWSs6x+PlwTvmQKQ=
Subject key identifier: 7F:01:3C:5A:8A:C8:0A:C3:C8:CB:20:15:45:BD:AA:D3:15:77:C3:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015601
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97334380354F11F094B8E5A7DAE4EC9C.roa
Signing time: Tue 20 May 2025 07:54:01 +0000
ROA not before: Tue 20 May 2025 07:53:56 +0000
ROA not after: Wed 25 Jun 2025 07:53:56 +0000
asID: 2914
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87553 (0x15601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 07:53:56 2025 GMT
Not After : Jun 25 07:53:56 2025 GMT
Subject: CN=682c3519-7750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:63:73:66:48:a6:d6:a2:ca:8b:9a:65:c6:e8:
2c:f4:8f:82:70:06:e7:06:a6:a6:ac:d0:ed:ff:3a:
b2:0b:34:61:1a:54:c8:d3:78:71:63:f0:9d:2d:7b:
63:7c:3b:97:d7:da:21:d7:c5:5d:a0:aa:e1:54:85:
49:f9:79:3a:38:da:22:f5:51:a2:81:b1:2c:19:96:
8b:63:f8:e9:b6:e8:01:ce:ea:c5:ac:b5:63:04:af:
5b:47:67:d6:d8:7d:7d:ca:2b:e5:b2:bc:ba:2f:9b:
e2:0b:e4:73:f6:3a:9b:3d:0d:6b:54:31:e7:0e:53:
25:9b:3d:7b:d4:de:fb:b4:3b:5d:b1:81:91:69:7f:
78:21:b6:77:44:0a:2a:9c:e3:db:69:cf:38:1f:2b:
0e:e6:64:db:e5:dd:ff:5c:24:22:da:4b:d0:79:34:
92:78:62:70:ed:bf:06:5e:73:8b:59:62:4d:86:fc:
73:9e:8b:82:b4:0f:f8:73:00:e7:d7:7d:62:e0:43:
dd:1a:8c:00:0b:cd:88:eb:72:9f:44:56:4f:7b:68:
94:99:40:b1:31:4b:ed:18:93:23:5a:2e:0e:fa:d8:
49:05:52:43:a3:3c:24:86:ef:14:3d:74:21:1a:4d:
8a:ab:68:95:de:06:87:9c:4e:39:27:4f:13:e7:9f:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:3C:5A:8A:C8:0A:C3:C8:CB:20:15:45:BD:AA:D3:15:77:C3:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97334380354F11F094B8E5A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a9:cf:2b:1f:bc:07:09:80:db:cb:c1:d8:3e:a0:c5:0c:d2:
e5:8c:ed:2f:51:4e:9a:f5:fa:e8:4e:25:11:f6:8b:c9:18:68:
13:f7:8f:d6:06:a1:1c:85:8e:cc:d1:49:9f:31:b2:c1:72:0c:
36:88:b5:af:b1:81:1f:43:6f:05:94:39:bc:95:93:e3:4d:5d:
87:2d:6c:71:cc:b1:9c:7e:a5:e5:a2:37:d6:8b:44:90:31:3f:
22:2d:be:68:09:f2:69:f3:bf:b7:c2:47:61:56:f0:7e:f8:48:
38:ac:90:49:49:4b:cb:47:b2:29:a0:e0:dd:d3:5e:4f:89:f5:
08:aa:62:97:a2:93:de:97:a7:6f:bf:f7:74:29:83:e6:53:6c:
a0:ae:96:fa:4c:82:e3:58:87:7b:03:c8:61:8f:15:e1:10:84:
8b:4e:ba:ee:93:6c:8a:ac:3b:a4:55:4b:d9:48:2e:86:77:c6:
56:ec:25:c9:8c:59:43:9b:a9:ae:47:03:d4:f2:62:60:7b:5c:
f1:5c:09:9e:44:e1:c8:a9:36:01:4f:49:41:03:28:fc:07:8a:
ee:26:de:2f:a5:fe:31:83:b7:a0:86:64:b1:95:de:83:71:62:
18:6a:f4:37:58:d7:01:1b:f0:79:d8:41:30:4c:3c:08:fe:10:
9f:96:00:13
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVYBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIwMDc1MzU2WhcNMjUwNjI1MDc1MzU2WjAYMRYw
FAYDVQQDEw02ODJjMzUxOS03NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA72NzZkim1qLKi5plxugs9I+CcAbnBqamrNDt/zqyCzRhGlTI03hxY/Cd
LXtjfDuX19oh18VdoKrhVIVJ+Xk6ONoi9VGigbEsGZaLY/jptugBzurFrLVjBK9b
R2fW2H19yivlsry6L5viC+Rz9jqbPQ1rVDHnDlMlmz171N77tDtdsYGRaX94IbZ3
RAoqnOPbac84HysO5mTb5d3/XCQi2kvQeTSSeGJw7b8GXnOLWWJNhvxznouCtA/4
cwDn131i4EPdGowAC82I63KfRFZPe2iUmUCxMUvtGJMjWi4O+thJBVJDozwkhu8U
PXQhGk2Kq2iV3gaHnE45J08T55/0bQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH8B
PFqKyArDyMsgFUW9qtMVd8POMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NzMzNDM4MDM1NEYxMUYwOTRCOEU1QTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpKMA0GCSqGSIb3DQEBCwUA
A4IBAQBeqc8rH7wHCYDby8HYPqDFDNLljO0vUU6a9froTiUR9ovJGGgT94/WBqEc
hY7M0UmfMbLBcgw2iLWvsYEfQ28FlDm8lZPjTV2HLWxxzLGcfqXlojfWi0SQMT8i
Lb5oCfJp87+3wkdhVvB++Eg4rJBJSUvLR7IpoODd015PifUIqmKXopPel6dvv/d0
KYPmU2ygrpb6TILjWId7A8hhjxXhEISLTrruk2yKrDukVUvZSC6Gd8ZW7CXJjFlD
m6muRwPU8mJge1zxXAmeROHIqTYBT0lBAyj8B4ruJt4vpf4xg7eghmSxld6DcWIY
avQ3WNcBG/B52EEwTDwI/hCflgAT
-----END CERTIFICATE-----
Generated at Tue Jun 3 09:17:14 2025 by rpki-client