Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BFABD48E2311F08D5C288ADAE4EC9C.roa
File: C6BFABD48E2311F08D5C288ADAE4EC9C.roa (raw, json)
Hash identifier: /qa740MBmzz+dKOrZs7BUSy8T5ygKJzezdzngJzc47E=
Subject key identifier: 13:CD:BA:43:49:F3:0B:5D:48:57:75:24:80:E3:E1:EC:8D:E3:1E:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BFABD48E2311F08D5C288ADAE4EC9C.roa
Signing time: Wed 10 Sep 2025 08:54:36 +0000
ROA not before: Wed 10 Sep 2025 08:54:31 +0000
ROA not after: Wed 22 Oct 2025 08:54:31 +0000
asID: 273986
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96866 (0x17a62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 10 08:54:31 2025 GMT
Not After : Oct 22 08:54:31 2025 GMT
Subject: CN=68c13ccc-6433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:2c:71:03:40:dc:1e:ac:d3:a3:c7:8b:10:
cd:3d:82:d6:25:75:ff:1e:e6:80:b3:af:0f:41:ad:
83:1b:93:fe:9b:bb:76:1d:60:e1:a8:e8:8e:e3:b9:
7d:d0:2e:29:f7:b2:3e:4d:34:92:8b:f4:4e:bc:ec:
eb:d5:6b:71:9e:f6:29:a9:a4:25:c0:5d:9b:45:6f:
13:35:d9:e0:48:a7:80:6e:9b:e1:f9:1f:be:71:d5:
b0:0b:80:0d:d2:ad:24:e8:a4:86:cb:72:3e:d3:2e:
bc:81:77:d3:dd:9a:43:fb:a6:2c:84:8a:96:98:69:
8b:60:61:8a:5a:b8:40:3d:be:8d:a7:19:7f:39:b8:
af:b3:f7:d9:83:61:20:a4:12:20:75:d3:03:cc:3c:
85:97:e8:b6:69:2b:fc:ac:a3:c7:f7:34:d3:3e:50:
94:b6:19:3f:5c:b2:41:60:15:7e:03:90:0e:ce:76:
59:18:3c:4b:95:1b:06:eb:b4:82:9c:1f:3c:bd:b9:
ad:be:1d:7a:c6:d0:ca:eb:13:27:84:53:38:fe:38:
22:4f:a5:e6:24:92:47:5e:16:58:f2:55:5d:e0:10:
ee:61:48:ec:48:5c:d2:15:4e:99:5d:a1:b7:b8:b1:
ce:13:2c:6e:1a:fc:4f:27:49:c6:1a:9a:09:9a:23:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CD:BA:43:49:F3:0B:5D:48:57:75:24:80:E3:E1:EC:8D:E3:1E:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BFABD48E2311F08D5C288ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:88:e0:be:9d:8c:a9:21:bc:40:e3:9b:52:26:35:c3:60:1d:
7b:25:0f:c1:de:d8:6a:b2:e6:72:1d:dd:4d:11:78:e6:ea:d4:
7f:d9:12:09:4f:da:65:ef:80:4e:f8:be:67:f2:f4:52:88:7f:
4f:1b:e0:d2:52:e4:0a:56:f1:df:68:c2:38:18:66:94:35:e3:
37:d9:94:ea:62:0d:8e:88:fa:d1:03:c7:98:92:1c:49:36:c4:
1c:b7:d8:ab:7a:5b:85:87:a1:60:19:91:ff:3c:66:94:3c:12:
4a:b8:2e:1b:8c:74:3e:3c:46:97:5d:37:ad:2b:ec:9f:26:95:
05:31:be:53:ce:b8:da:48:82:b1:1f:4d:40:dd:93:11:eb:76:
01:6d:7f:45:96:c4:31:d4:81:c6:4d:33:de:e8:eb:9e:cf:ef:
fe:71:a4:01:5f:fa:93:2a:7d:59:56:98:2d:76:00:ac:f3:a5:
cc:4f:12:fb:f7:7f:93:73:1a:57:de:94:fb:15:a1:cf:85:b6:
b7:ec:fa:fa:2b:b4:29:34:13:a9:f1:c0:f2:2d:80:dd:71:9f:
57:b2:b8:2c:43:2b:d7:79:f9:cf:af:25:b4:5f:e3:ac:85:7f:
a6:58:ce:06:06:e5:2e:27:76:dd:97:14:ab:6a:33:b6:9d:a4:
19:08:49:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXpiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTEwMDg1NDMxWhcNMjUxMDIyMDg1NDMxWjAYMRYw
FAYDVQQDEw02OGMxM2NjYy02NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvWQscQNA3B6s06PHixDNPYLWJXX/HuaAs68PQa2DG5P+m7t2HWDhqOiO
47l90C4p97I+TTSSi/ROvOzr1WtxnvYpqaQlwF2bRW8TNdngSKeAbpvh+R++cdWw
C4AN0q0k6KSGy3I+0y68gXfT3ZpD+6YshIqWmGmLYGGKWrhAPb6Npxl/Obivs/fZ
g2EgpBIgddMDzDyFl+i2aSv8rKPH9zTTPlCUthk/XLJBYBV+A5AOznZZGDxLlRsG
67SCnB88vbmtvh16xtDK6xMnhFM4/jgiT6XmJJJHXhZY8lVd4BDuYUjsSFzSFU6Z
XaG3uLHOEyxuGvxPJ0nGGpoJmiOXlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBPN
ukNJ8wtdSFd1JIDj4eyN4x6uMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNkJGQUJENDhFMjMxMUYwOEQ1QzI4OEFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ3MA0GCSqGSIb3DQEBCwUA
A4IBAQAfiOC+nYypIbxA45tSJjXDYB17JQ/B3thqsuZyHd1NEXjm6tR/2RIJT9pl
74BO+L5n8vRSiH9PG+DSUuQKVvHfaMI4GGaUNeM32ZTqYg2OiPrRA8eYkhxJNsQc
t9ireluFh6FgGZH/PGaUPBJKuC4bjHQ+PEaXXTetK+yfJpUFMb5TzrjaSIKxH01A
3ZMR63YBbX9FlsQx1IHGTTPe6Ouez+/+caQBX/qTKn1ZVpgtdgCs86XMTxL793+T
cxpX3pT7FaHPhba37Pr6K7QpNBOp8cDyLYDdcZ9XsrgsQyvXefnPryW0X+OshX+m
WM4GBuUuJ3bdlxSrajO2naQZCEmU
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:10 2025 by rpki-client