Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC39C510946111F090ED1DF5DAE4EC9C.roa
File: CC39C510946111F090ED1DF5DAE4EC9C.roa (raw, json)
Hash identifier: AqzAq96Sw5EUbCDD8ggzfHHOMoMO3xTc7faizvSq3tI=
Subject key identifier: D4:10:AA:97:21:A8:FC:CA:DF:5A:CD:D6:FE:B6:D6:E3:A8:C3:6A:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC39C510946111F090ED1DF5DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 07:33:41 +0000
ROA not before: Thu 18 Sep 2025 07:33:37 +0000
ROA not after: Fri 24 Oct 2025 07:33:37 +0000
asID: 6079
IP address blocks: 45.203.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97237 (0x17bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 07:33:37 2025 GMT
Not After : Oct 24 07:33:37 2025 GMT
Subject: CN=68cbb5d5-47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:02:82:13:19:41:32:ad:fd:02:a8:42:52:
3c:7f:46:18:c2:27:25:ac:9c:c1:01:67:8a:6c:f0:
54:5d:c9:4a:49:c8:b6:72:64:5d:68:bf:19:f6:85:
31:ac:b0:6b:1a:42:27:9a:ab:a5:51:46:25:67:f0:
60:b1:4d:98:88:94:29:1e:b0:a5:ca:39:8e:d0:b6:
66:64:5a:b7:9a:55:b9:cf:c5:ae:b5:50:c6:c2:36:
ca:62:08:0d:7c:de:25:b5:6d:c6:da:f1:ba:71:1d:
10:0c:4c:ba:f6:93:d4:05:df:65:ff:7a:da:3b:1b:
b9:cc:87:f9:4b:8e:57:d8:83:0b:39:01:58:9a:f5:
ab:a8:6f:35:b7:2a:a3:02:ad:80:46:db:20:b7:e0:
98:40:2f:1c:6b:83:87:84:52:ea:75:7e:f8:12:da:
98:84:b8:80:d3:e9:03:a2:05:3f:0a:bb:a3:e1:4f:
54:49:bf:3e:0a:c7:8a:c8:b4:94:a2:4e:4e:03:59:
3f:66:ea:bc:fa:ed:3d:64:a6:05:68:91:37:42:d0:
ff:a5:1b:d4:2d:75:e4:9b:7d:8e:6d:04:2d:60:7d:
14:2c:8b:4c:64:7d:9c:b7:19:1c:35:2b:e8:ea:68:
52:13:ce:28:cf:ae:86:c2:ee:35:5e:aa:23:1c:7a:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:AA:97:21:A8:FC:CA:DF:5A:CD:D6:FE:B6:D6:E3:A8:C3:6A:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC39C510946111F090ED1DF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:23:4c:74:f3:5f:31:ba:29:89:2c:fe:23:2b:f1:ca:fd:16:
4b:f8:5a:cd:2a:88:74:0d:32:c4:c3:03:c5:17:60:90:06:e6:
7c:79:d2:5c:b3:4d:a3:34:70:df:58:ac:db:ac:28:25:8b:63:
1f:4b:90:21:0a:8a:55:57:7a:5f:34:33:f3:28:98:da:d7:9b:
1a:43:36:2d:a6:ec:93:27:07:ee:bf:a0:94:a4:ff:6e:8b:6b:
d9:cc:98:80:30:ae:4e:d9:b8:c5:89:c4:f7:51:b3:32:eb:19:
e3:94:f5:d4:c2:3e:31:30:63:43:16:a7:a5:73:9f:7d:5a:34:
cc:b3:ae:09:d2:b9:3f:32:e4:cc:ae:63:3e:e3:7b:a1:ea:f3:
21:56:a0:91:55:59:c2:7c:88:b3:a9:69:e5:39:1c:f0:8c:24:
b4:ef:04:27:c7:85:8a:51:81:42:bb:7e:03:b5:2c:62:da:96:
a8:fa:25:0d:3d:b4:05:98:1a:bd:0d:0c:b5:a4:75:f2:e8:4b:
8d:ac:3f:76:74:15:03:35:d4:6b:28:42:18:67:25:c2:cf:f1:
30:6a:2e:73:18:7e:91:af:61:02:eb:f7:b9:59:2d:49:e1:bb:
bf:f4:43:af:f9:e9:93:6b:be:32:24:36:6f:18:e8:9f:9b:c7:
f6:f8:bf:dd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXvVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE4MDczMzM3WhcNMjUxMDI0MDczMzM3WjAYMRYw
FAYDVQQDEw02OGNiYjVkNS00N2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0tYCghMZQTKt/QKoQlI8f0YYwiclrJzBAWeKbPBUXclKSci2cmRdaL8Z
9oUxrLBrGkInmqulUUYlZ/BgsU2YiJQpHrClyjmO0LZmZFq3mlW5z8WutVDGwjbK
YggNfN4ltW3G2vG6cR0QDEy69pPUBd9l/3raOxu5zIf5S45X2IMLOQFYmvWrqG81
tyqjAq2ARtsgt+CYQC8ca4OHhFLqdX74EtqYhLiA0+kDogU/Cruj4U9USb8+CseK
yLSUok5OA1k/Zuq8+u09ZKYFaJE3QtD/pRvULXXkm32ObQQtYH0ULItMZH2ctxkc
NSvo6mhSE84oz66Gwu41XqojHHoLHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNQQ
qpchqPzK31rN1v621uOow2q4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQzM5QzUxMDk0NjExMUYwOTBFRDFERjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcsAMA0GCSqGSIb3DQEBCwUA
A4IBAQB9I0x0818xuimJLP4jK/HK/RZL+FrNKoh0DTLEwwPFF2CQBuZ8edJcs02j
NHDfWKzbrCgli2MfS5AhCopVV3pfNDPzKJja15saQzYtpuyTJwfuv6CUpP9ui2vZ
zJiAMK5O2bjFicT3UbMy6xnjlPXUwj4xMGNDFqelc599WjTMs64J0rk/MuTMrmM+
43uh6vMhVqCRVVnCfIizqWnlORzwjCS07wQnx4WKUYFCu34DtSxi2pao+iUNPbQF
mBq9DQy1pHXy6EuNrD92dBUDNdRrKEIYZyXCz/Ewai5zGH6Rr2EC6/e5WS1J4bu/
9EOv+emTa74yJDZvGOifm8f2+L/d
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:40 2025 by rpki-client