Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E834BAA2921511F089099F96DAE4EC9C.roa
File: E834BAA2921511F089099F96DAE4EC9C.roa (raw, json)
Hash identifier: sWmoYYETi3aX+y9gY8IHWBtqQqzB+Ptv7p/E/lBDBH4=
Subject key identifier: EC:7F:2C:67:31:79:A7:A3:4C:CC:F4:77:44:FB:01:26:27:61:7A:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E834BAA2921511F089099F96DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 09:25:24 +0000
ROA not before: Mon 15 Sep 2025 09:25:19 +0000
ROA not after: Sat 06 Dec 2025 09:25:19 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
45.195.69.0/24 maxlen: 24
45.195.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97091 (0x17b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 09:25:19 2025 GMT
Not After : Dec 6 09:25:19 2025 GMT
Subject: CN=68c7db84-d72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:45:16:55:6f:59:16:c7:fe:a0:4a:70:2b:
17:65:c8:5f:12:98:66:c6:a1:f6:a4:db:7c:f2:37:
9c:e1:00:b4:3e:4b:2c:66:21:98:4a:86:be:a8:93:
5c:80:38:1d:6b:fe:1d:79:6f:2b:71:84:84:00:24:
c6:1f:dd:ab:8b:fe:96:64:88:db:00:00:e5:d6:de:
39:df:c4:06:b6:71:85:12:3f:a4:3d:2a:a1:bb:dc:
0a:a0:74:1c:d6:0a:17:93:4f:50:9f:b7:8a:63:18:
3c:f9:7e:7c:f5:45:26:2b:86:90:0b:1b:6f:4c:54:
fb:1f:27:14:6d:48:9d:e3:ca:cb:af:87:b5:5e:79:
ca:e6:07:9f:88:f6:16:fa:74:61:c7:b6:89:db:8e:
47:ea:7b:1a:80:44:3a:31:0e:7f:46:24:6e:02:2b:
73:e4:b9:ed:75:97:b1:5a:32:1d:ca:e8:c8:c5:9c:
c1:b8:a2:a6:29:39:3c:d2:89:e9:19:2f:ee:1b:19:
58:68:ef:6e:8b:93:cd:a3:92:34:f6:91:c7:d8:91:
dd:aa:93:b7:c0:53:21:5d:40:98:d7:4b:d2:d6:18:
a8:52:ba:62:a9:26:c9:ba:aa:a8:c7:f6:17:4f:28:
6c:2a:26:8a:30:eb:ba:15:ad:d7:8d:01:85:28:bd:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:2C:67:31:79:A7:A3:4C:CC:F4:77:44:FB:01:26:27:61:7A:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E834BAA2921511F089099F96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
45.195.69.0/24
45.195.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6a:43:e1:0e:97:74:6e:74:0f:ff:7b:2a:ff:d1:f2:36:31:
77:83:26:4d:cc:46:eb:b6:0c:94:e9:a9:b0:18:27:f8:a8:4e:
9f:b9:f9:31:2e:d3:37:eb:51:80:c5:08:0e:22:7a:8e:ca:45:
03:90:b4:01:36:a3:f5:c9:97:b6:c4:65:59:6b:8b:e7:2c:b8:
56:12:74:17:3d:0c:c8:a4:7e:e1:92:9d:14:f1:6a:06:89:9b:
64:e9:9c:d1:79:38:63:8b:e6:93:a1:0e:68:29:35:01:37:f1:
40:16:bd:2c:0e:97:72:07:83:ce:d8:88:a7:54:70:3c:ab:a1:
03:8f:0c:00:b7:f9:61:86:a8:b4:37:df:87:43:59:3c:c2:6b:
9c:c7:62:bc:e8:8c:3f:4f:fa:dc:b8:fe:1d:63:e1:71:e9:8e:
09:13:cb:8e:73:62:24:c8:dc:ad:46:4a:01:5c:8b:7a:ee:f8:
85:9d:dc:1d:9c:be:5b:01:0c:ca:45:2a:07:e3:7d:1a:ef:79:
44:a9:99:17:1a:db:96:a6:85:ff:75:e7:cb:e9:74:1b:09:75:
10:9d:be:ef:39:99:7c:9e:6d:13:5a:9e:49:a1:a6:57:a3:b5:
4f:85:79:0a:c5:14:d8:f2:bf:f5:00:53:1b:40:0f:e1:77:e3:
49:2f:e4:a4
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAXtDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE1MDkyNTE5WhcNMjUxMjA2MDkyNTE5WjAYMRYw
FAYDVQQDEw02OGM3ZGI4NC1kNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZdFFlVvWRbH/qBKcCsXZchfEphmxqH2pNt88jec4QC0PkssZiGYSoa+
qJNcgDgda/4deW8rcYSEACTGH92ri/6WZIjbAADl1t4538QGtnGFEj+kPSqhu9wK
oHQc1goXk09Qn7eKYxg8+X589UUmK4aQCxtvTFT7HycUbUid48rLr4e1XnnK5gef
iPYW+nRhx7aJ245H6nsagEQ6MQ5/RiRuAitz5LntdZexWjIdyujIxZzBuKKmKTk8
0onpGS/uGxlYaO9ui5PNo5I09pHH2JHdqpO3wFMhXUCY10vS1hioUrpiqSbJuqqo
x/YXTyhsKiaKMOu6Fa3XjQGFKL3hqwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFOx/
LGcxeaejTMz0d0T7ASYnYXphMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FODM0QkFBMjkyMTUxMUYwODkwOTlGOTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALcIbAwQALcNFAwQALcNMMA0G
CSqGSIb3DQEBCwUAA4IBAQCNakPhDpd0bnQP/3sq/9HyNjF3gyZNzEbrtgyU6amw
GCf4qE6fufkxLtM361GAxQgOInqOykUDkLQBNqP1yZe2xGVZa4vnLLhWEnQXPQzI
pH7hkp0U8WoGiZtk6ZzReThji+aToQ5oKTUBN/FAFr0sDpdyB4PO2IinVHA8q6ED
jwwAt/lhhqi0N9+HQ1k8wmucx2K86Iw/T/rcuP4dY+Fx6Y4JE8uOc2IkyNytRkoB
XIt67viFndwdnL5bAQzKRSoH430a73lEqZkXGtuWpoX/defL6XQbCXUQnb7vOZl8
nm0TWp5JoaZXo7VPhXkKxRTY8r/1AFMbQA/hd+NJL+Sk
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:15 2025 by rpki-client