Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9CAF41483E311F0BEC2FDA9DAE4EC9C.roa
File: B9CAF41483E311F0BEC2FDA9DAE4EC9C.roa (raw, json)
Hash identifier: EpQxyRTo9qUqyzIhcAxN2XPdp6zd5a+9bNsA+bs3Dqw=
Subject key identifier: 5B:BD:87:42:F5:92:61:04:8B:DF:CA:5F:51:14:E8:B7:1B:B9:D8:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017247
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9CAF41483E311F0BEC2FDA9DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 07:50:55 +0000
ROA not before: Thu 28 Aug 2025 07:50:50 +0000
ROA not after: Sun 21 Sep 2025 07:50:50 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.168.0/24 maxlen: 24
45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.195.189.0/24 maxlen: 24
45.195.190.0/24 maxlen: 24
45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94791 (0x17247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 07:50:50 2025 GMT
Not After : Sep 21 07:50:50 2025 GMT
Subject: CN=68b00a5f-010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:b1:d9:4e:49:6d:81:c4:cf:34:62:af:6d:
14:b8:fb:f0:b6:04:d2:57:e8:76:27:98:ef:30:5f:
64:6f:f0:d2:bc:60:c0:97:ce:68:44:77:d5:fa:55:
3d:aa:28:86:4b:0b:78:ba:9e:8d:f9:a2:a9:ec:1f:
4f:b4:d2:6f:96:90:cd:e3:a9:81:0d:14:f4:5f:b6:
e4:46:be:97:65:44:83:ec:54:4a:18:39:3f:8a:d0:
6b:18:9c:9a:0c:50:19:36:26:3d:34:28:4f:25:2e:
0a:0a:d4:a0:6e:16:9b:0c:2d:2f:43:d5:51:81:7a:
e3:a3:45:3e:86:92:61:c4:9f:3f:2f:3b:55:80:56:
e3:63:38:fd:5b:eb:f6:e0:80:c3:e4:63:a1:54:0e:
de:44:77:b9:93:eb:29:27:5e:50:c7:9d:53:10:f4:
a2:9f:cf:47:dd:61:3c:fe:0a:89:95:df:b0:6f:6a:
e1:bf:67:6e:6f:98:05:f3:7f:99:99:7c:50:e7:d8:
89:7f:25:78:5f:d4:03:99:3e:1c:5c:85:df:8e:6b:
4d:47:d8:22:9c:15:85:91:9d:f7:3f:4f:69:7e:e9:
33:c8:8b:f7:81:cc:7d:09:39:c5:cc:7d:7e:61:99:
11:5c:64:9f:b7:ce:0e:03:01:90:00:97:c8:86:03:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:87:42:F5:92:61:04:8B:DF:CA:5F:51:14:E8:B7:1B:B9:D8:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9CAF41483E311F0BEC2FDA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.195.162.0-45.195.165.255
45.195.167.0-45.195.168.255
45.195.170.0/24
45.195.174.0-45.195.177.255
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.195.189.0-45.195.190.255
45.199.207.0-45.199.220.255
45.199.231.0-45.199.240.255
45.199.246.0-45.199.248.255
45.199.251.0/24
45.199.253.0-45.199.254.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
95:53:42:45:1b:82:6c:59:03:3e:ea:11:66:39:4e:56:9e:bc:
d2:ae:8d:10:8a:04:c2:23:8d:44:73:29:df:c2:7c:a3:12:42:
ca:55:45:2d:40:31:16:45:94:1b:ee:58:11:0a:be:d5:0d:f4:
5f:4f:e7:dc:9a:ca:b6:fc:78:49:bb:5b:5d:29:4c:c9:5b:e8:
f6:8b:ba:bb:cd:9e:76:96:4b:e2:91:4c:99:54:48:d8:75:9b:
42:4d:39:61:b2:cf:fe:65:5c:90:e4:0f:10:32:a4:45:e6:a6:
5e:76:76:ae:b9:98:95:b8:c7:70:e6:9b:d9:24:09:0b:37:eb:
07:a3:07:ca:0a:d5:e6:d3:1a:f2:d3:f6:f1:92:37:7b:98:de:
24:df:ec:31:93:48:a7:10:7f:9d:22:b4:b3:0c:7a:9b:68:fd:
2b:dd:95:11:7d:2a:84:df:2a:f4:72:b1:82:0a:f2:60:71:8f:
96:e4:49:c3:fb:f3:07:c9:39:51:a6:e7:24:c5:77:d7:44:5c:
a5:15:43:8f:0b:64:8c:9e:10:eb:54:07:91:06:a2:ff:b0:37:
2e:c9:e2:ea:7f:43:fb:b5:13:8b:54:32:e2:2c:2b:a3:4d:06:
d2:ec:9c:5e:36:e5:92:66:da:95:dd:ab:6d:47:b8:f8:27:1b:
a0:e3:4b:df
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIDAXJHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MDc1MDUwWhcNMjUwOTIxMDc1MDUwWjAYMRYw
FAYDVQQDEw02OGIwMGE1Zi0wMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0jCx2U5JbYHEzzRir20UuPvwtgTSV+h2J5jvMF9kb/DSvGDAl85oRHfV
+lU9qiiGSwt4up6N+aKp7B9PtNJvlpDN46mBDRT0X7bkRr6XZUSD7FRKGDk/itBr
GJyaDFAZNiY9NChPJS4KCtSgbhabDC0vQ9VRgXrjo0U+hpJhxJ8/LztVgFbjYzj9
W+v24IDD5GOhVA7eRHe5k+spJ15Qx51TEPSin89H3WE8/gqJld+wb2rhv2dub5gF
83+ZmXxQ59iJfyV4X9QDmT4cXIXfjmtNR9ginBWFkZ33P09pfukzyIv3gcx9CTnF
zH1+YZkRXGSft84OAwGQAJfIhgONRQIDAQABo4IDQzCCAz8wHQYDVR0OBBYEFFu9
h0L1kmEEi9/KX1EU6LcbudgqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COUNBRjQxNDgzRTMxMUYwQkVDMkZEQTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAEtwDQwDAMEAS3DogME
AS3DpDAMAwQALcOnAwQALcOoAwQALcOqMAwDBAEtw64DBAEtw7ADBAAtw7MDBAAt
w7UDBAAtw7owDAMEAC3DvQMEAC3DvjAMAwQALcfPAwQALcfcMAwDBAAtx+cDBAAt
x/AwDAMEAS3H9gMEAC3H+AMEAC3H+zAMAwQALcf9AwQALcf+MAwDBAAtyLMDBAAt
yLQwDQYJKoZIhvcNAQELBQADggEBAJVTQkUbgmxZAz7qEWY5TlaevNKujRCKBMIj
jURzKd/CfKMSQspVRS1AMRZFlBvuWBEKvtUN9F9P59yayrb8eEm7W10pTMlb6PaL
urvNnnaWS+KRTJlUSNh1m0JNOWGyz/5lXJDkDxAypEXmpl52dq65mJW4x3Dmm9kk
CQs36wejB8oK1ebTGvLT9vGSN3uY3iTf7DGTSKcQf50itLMMepto/SvdlRF9KoTf
KvRysYIK8mBxj5bkScP78wfJOVGm5yTFd9dEXKUVQ48LZIyeEOtUB5EGov+wNy7J
4up/Q/u1E4tUMuIsK6NNBtLsnF425ZJm2pXdq21HuPgnG6DjS98=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:03 2025 by rpki-client