Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCDA982283F011F0B8E8FC7EDAE4EC9C.roa
File: CCDA982283F011F0B8E8FC7EDAE4EC9C.roa (raw, json)
Hash identifier: AceT08VMd5PPpj+BUrBgfhN1xpN/XkuGDTt2t0+g7NE=
Subject key identifier: EE:61:70:AA:9F:EC:0C:12:38:05:CF:75:49:87:D0:17:B2:A8:08:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017264
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCDA982283F011F0B8E8FC7EDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:24:30 +0000
ROA not before: Thu 28 Aug 2025 09:24:25 +0000
ROA not after: Sun 28 Sep 2025 09:24:25 +0000
asID: 202656
IP address blocks: 45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
45.199.255.0/24 maxlen: 24
45.200.160.0/24 maxlen: 24
45.200.161.0/24 maxlen: 24
45.200.162.0/24 maxlen: 24
45.200.163.0/24 maxlen: 24
45.200.164.0/24 maxlen: 24
45.200.165.0/24 maxlen: 24
45.200.166.0/24 maxlen: 24
45.200.167.0/24 maxlen: 24
45.200.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94820 (0x17264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 09:24:25 2025 GMT
Not After : Sep 28 09:24:25 2025 GMT
Subject: CN=68b0204e-6266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:a5:30:b2:f5:9b:da:61:19:e7:75:1e:b6:
70:eb:fc:02:88:db:24:2f:9c:d1:0a:bc:66:21:82:
9c:ae:af:37:bb:e2:ba:06:38:f1:d1:67:d6:70:67:
9e:74:c6:73:ed:40:05:89:45:e7:f7:d0:0c:d3:ee:
6b:5b:44:a2:dc:1b:af:af:d8:7c:49:c8:a0:de:96:
55:74:90:3d:04:8f:a8:7c:df:03:42:b9:6a:e2:02:
9f:55:45:8a:a3:8a:5e:dc:8d:26:b9:69:f0:12:b5:
70:78:9e:1c:d0:ec:95:61:e8:4c:bd:d3:85:00:aa:
d0:05:b9:76:e9:60:44:6c:00:94:f7:cb:80:09:67:
3a:81:30:39:83:ca:a8:fa:17:b8:89:76:f6:fb:b7:
d3:d3:69:a1:67:29:66:c5:ea:27:79:17:f4:7c:53:
c2:3e:10:73:53:4a:25:11:5b:bd:12:91:57:b6:ed:
af:99:89:4c:61:77:cd:f1:af:13:7b:4f:ce:44:92:
85:99:35:15:0c:85:a9:e3:d2:2e:4b:63:1a:d4:46:
a3:5a:81:43:d5:16:f3:30:ac:cf:a8:98:35:fb:04:
16:68:fe:71:f6:58:a7:f5:9e:ed:78:64:47:a7:bd:
1a:be:7b:90:4d:b6:1c:39:c5:23:bb:4c:02:be:e0:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:70:AA:9F:EC:0C:12:38:05:CF:75:49:87:D0:17:B2:A8:08:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCDA982283F011F0B8E8FC7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.229.0-45.199.230.255
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.199.252.0/24
45.199.255.0/24
45.200.160.0-45.200.168.255
Signature Algorithm: sha256WithRSAEncryption
93:16:e5:b0:41:4d:5e:1e:b7:d9:ca:03:03:ae:dd:bb:47:3c:
57:7e:14:ee:60:90:3b:49:49:1d:1f:8c:13:7e:62:a0:9c:11:
9d:40:ba:51:c9:81:e4:1e:6f:77:75:38:0c:dd:74:30:9a:6a:
51:99:8d:a9:0b:b1:02:2b:da:2f:f9:4e:3e:7a:4b:40:11:e8:
1d:df:29:99:c3:b6:16:cd:b8:53:14:16:70:0f:1a:21:a1:07:
83:9e:92:2e:cb:2a:6c:10:c3:fa:e2:76:b1:65:8e:f3:51:03:
a9:34:f7:f3:fd:99:81:ea:9e:eb:56:76:1e:5c:c7:d8:9b:18:
c0:c5:30:52:3a:34:4b:e5:fc:7e:82:60:d4:f2:b9:18:a4:88:
11:4f:e9:7a:e8:0e:96:69:68:ee:6d:54:d7:e3:07:37:b4:43:
b0:aa:a1:04:a5:61:58:d7:8c:6b:25:f8:72:7b:35:3c:ba:b7:
24:45:b7:3f:67:5c:f5:d8:ca:40:78:4b:c9:26:26:ef:e0:68:
54:1b:3c:8b:77:3b:c8:2e:9e:1b:42:76:1d:bc:cc:c6:8f:6b:
a8:a3:21:b3:2b:23:3c:93:21:a2:db:4f:52:9a:7b:d1:2e:e0:
b3:00:17:55:b7:16:d4:8e:c1:1e:c7:bd:19:12:09:c3:7d:e1:
d9:7d:b8:44
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIDAXJkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MDkyNDI1WhcNMjUwOTI4MDkyNDI1WjAYMRYw
FAYDVQQDEw02OGIwMjA0ZS02MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwQGlMLL1m9phGed1HrZw6/wCiNskL5zRCrxmIYKcrq83u+K6Bjjx0WfW
cGeedMZz7UAFiUXn99AM0+5rW0Si3Buvr9h8Scig3pZVdJA9BI+ofN8DQrlq4gKf
VUWKo4pe3I0muWnwErVweJ4c0OyVYehMvdOFAKrQBbl26WBEbACU98uACWc6gTA5
g8qo+he4iXb2+7fT02mhZylmxeoneRf0fFPCPhBzU0olEVu9EpFXtu2vmYlMYXfN
8a8Te0/ORJKFmTUVDIWp49IuS2Ma1EajWoFD1RbzMKzPqJg1+wQWaP5x9lin9Z7t
eGRHp70avnuQTbYcOcUju0wCvuAaFwIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFO5h
cKqf7AwSOAXPdUmH0BeyqAh8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQ0RBOTgyMjgzRjAxMUYwQjhFOEZDN0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBAAtx+UDBAAtx+YwDAMEAC3H
8QMEAS3H9DAMAwQALcf5AwQALcf6AwQALcf8AwQALcf/MAwDBAUtyKADBAAtyKgw
DQYJKoZIhvcNAQELBQADggEBAJMW5bBBTV4et9nKAwOu3btHPFd+FO5gkDtJSR0f
jBN+YqCcEZ1AulHJgeQeb3d1OAzddDCaalGZjakLsQIr2i/5Tj56S0AR6B3fKZnD
thbNuFMUFnAPGiGhB4Oeki7LKmwQw/ridrFljvNRA6k09/P9mYHqnutWdh5cx9ib
GMDFMFI6NEvl/H6CYNTyuRikiBFP6XroDpZpaO5tVNfjBze0Q7CqoQSlYVjXjGsl
+HJ7NTy6tyRFtz9nXPXYykB4S8kmJu/gaFQbPIt3O8gunhtCdh28zMaPa6ijIbMr
IzyTIaLbT1Kae9Eu4LMAF1W3FtSOwR7HvRkSCcN94dl9uEQ=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:29 2025 by rpki-client