Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/983E9824873E11F0B15C318BDAE4EC9C.roa
File: 983E9824873E11F0B15C318BDAE4EC9C.roa (raw, json)
Hash identifier: ZbeHRwNn+kB9mjOG7Y9onVGc4f054UE7fx1wMMcwZ0M=
Subject key identifier: 96:4D:31:32:2B:61:C2:B0:72:52:BB:DE:50:13:28:88:63:39:A0:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01758F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/983E9824873E11F0B15C318BDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 14:18:56 +0000
ROA not before: Mon 01 Sep 2025 14:18:51 +0000
ROA not after: Sun 28 Sep 2025 14:18:51 +0000
asID: 401783
IP address blocks: 45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95631 (0x1758f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 14:18:51 2025 GMT
Not After : Sep 28 14:18:51 2025 GMT
Subject: CN=68b5ab50-1eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:55:1c:cd:d6:51:12:e2:77:b2:a1:2a:6c:
d3:87:c5:de:dd:65:0b:ad:2c:6a:e2:ce:f5:1c:77:
1b:b8:b9:2b:43:3a:6d:fb:e4:ab:7b:81:9a:14:88:
7d:a9:8d:f9:48:b7:ab:04:1c:44:dc:b1:e7:e6:03:
5e:b1:44:93:4f:2a:a3:52:9b:7f:41:a2:83:22:ac:
57:d8:3f:09:4f:4b:c5:90:04:58:2e:04:ec:cd:01:
5a:90:54:24:3c:16:59:d1:6b:1f:d9:9d:a0:f7:8c:
62:79:87:12:29:e5:ca:ae:47:83:ec:16:7f:cf:46:
1f:90:aa:7d:13:bf:71:b6:f0:72:7b:2b:50:87:66:
eb:f8:5e:10:a6:65:81:a7:52:88:ca:38:89:19:b1:
4b:82:48:96:74:0e:cf:f8:8e:be:82:e2:82:e5:dd:
56:4f:58:9c:58:09:4d:27:68:cd:59:3f:7a:04:02:
5a:54:75:cb:65:67:16:ce:86:d0:c1:a1:be:61:28:
77:b1:90:d3:70:c1:df:3f:6d:0f:af:f0:88:cf:9c:
4b:d4:12:af:ac:c1:ab:87:33:c7:79:4a:0d:ff:b9:
1b:03:65:c0:ac:15:56:0a:19:e3:c0:4b:33:21:9e:
0c:a2:69:d1:d1:ae:62:9f:31:9b:c5:89:44:5a:ce:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:31:32:2B:61:C2:B0:72:52:BB:DE:50:13:28:88:63:39:A0:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/983E9824873E11F0B15C318BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
156.231.128.0/23
156.231.133.0/24
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.183.0/24
156.249.185.0/24
156.249.187.0/24
156.249.190.0/23
Signature Algorithm: sha256WithRSAEncryption
53:48:f4:f2:40:a4:ac:ae:2a:52:a1:49:7a:bc:56:3a:51:a8:
da:fe:7d:57:0b:1f:a8:9f:69:60:68:9b:85:e6:7c:bd:cd:06:
ca:45:53:2c:0a:40:49:b2:fd:02:51:99:ed:39:31:5d:87:6c:
e9:61:f5:12:7c:c0:b9:9c:14:fe:51:11:c1:e1:07:00:48:28:
0c:80:64:26:41:66:a0:4c:2c:66:4c:e7:2b:54:c4:97:57:5f:
59:f4:12:6c:97:5a:82:32:b5:e9:1a:2f:df:79:89:2e:75:d7:
de:d0:2b:eb:49:03:61:c6:31:a9:8a:17:d9:85:af:94:31:73:
d4:99:ff:bb:8a:14:a2:39:1e:61:8f:a4:a8:1c:7c:65:5a:0a:
f0:f9:e4:c1:a6:de:65:ae:1b:17:19:47:3e:b8:2e:05:63:7e:
19:f4:5e:56:f3:10:af:bc:92:d2:ec:c4:af:e9:9d:70:45:94:
98:5d:da:5b:8b:eb:cc:bd:14:dd:f6:38:f5:b7:5e:eb:a0:54:
d7:48:b5:e7:38:47:07:13:d8:6d:51:b2:dd:7f:1d:34:55:0b:
32:5d:d9:a4:c1:c1:f4:42:13:8e:ea:17:41:d0:15:74:56:6d:
0b:7f:bd:15:dd:99:56:81:3e:96:d4:03:eb:a5:ce:e0:38:d0:
4e:4f:0f:4f
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIDAXWPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTAxMTQxODUxWhcNMjUwOTI4MTQxODUxWjAYMRYw
FAYDVQQDEw02OGI1YWI1MC0xZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs8BVHM3WURLid7KhKmzTh8Xe3WULrSxq4s71HHcbuLkrQzpt++Sre4Ga
FIh9qY35SLerBBxE3LHn5gNesUSTTyqjUpt/QaKDIqxX2D8JT0vFkARYLgTszQFa
kFQkPBZZ0Wsf2Z2g94xieYcSKeXKrkeD7BZ/z0YfkKp9E79xtvByeytQh2br+F4Q
pmWBp1KIyjiJGbFLgkiWdA7P+I6+guKC5d1WT1icWAlNJ2jNWT96BAJaVHXLZWcW
zobQwaG+YSh3sZDTcMHfP20Pr/CIz5xL1BKvrMGrhzPHeUoN/7kbA2XArBVWChnj
wEszIZ4MomnR0a5inzGbxYlEWs4wyQIDAQABo4IDBzCCAwMwHQYDVR0OBBYEFJZN
MTIrYcKwclK73lATKIhjOaDgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85ODNFOTgyNDg3M0UxMUYwQjE1QzMxOEJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAC3JIzAMAwQALckpAwQALckq
AwQALckwAwQALck9AwQBnOeAAwQAnOeFAwQAnPmFMAwDBACc+ZkDBACc+ZoDBACc
+aIDBAGc+aYDBACc+aoDBACc+bcDBACc+bkDBACc+bsDBAGc+b4wDQYJKoZIhvcN
AQELBQADggEBAFNI9PJApKyuKlKhSXq8VjpRqNr+fVcLH6ifaWBom4XmfL3NBspF
UywKQEmy/QJRme05MV2HbOlh9RJ8wLmcFP5REcHhBwBIKAyAZCZBZqBMLGZM5ytU
xJdXX1n0EmyXWoIytekaL995iS51197QK+tJA2HGMamKF9mFr5Qxc9SZ/7uKFKI5
HmGPpKgcfGVaCvD55MGm3mWuGxcZRz64LgVjfhn0XlbzEK+8ktLsxK/pnXBFlJhd
2luL68y9FN32OPW3XuugVNdItec4RwcT2G1Rst1/HTRVCzJd2aTBwfRCE47qF0HQ
FXRWbQt/vRXdmVaBPpbUA+ulzuA40E5PD08=
-----END CERTIFICATE-----
Generated at Thu Sep 4 05:10:04 2025 by rpki-client