Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E973230AA02911F08E1620C2DAE4EC9C.roa
File: E973230AA02911F08E1620C2DAE4EC9C.roa (raw, json)
Hash identifier: VPYxtLZrUJV3yI8r0Me/IHRnGDW94dF3VzSaQnsh214=
Subject key identifier: 30:93:6B:F7:73:C4:91:13:CD:0E:24:59:ED:5B:27:74:78:0D:A4:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E973230AA02911F08E1620C2DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 07:23:52 +0000
ROA not before: Fri 03 Oct 2025 07:23:47 +0000
ROA not after: Sat 08 Nov 2025 07:23:47 +0000
asID: 44559
IP address blocks: 45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.202.198.0/24 maxlen: 24
45.202.200.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97961 (0x17ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 3 07:23:47 2025 GMT
Not After : Nov 8 07:23:47 2025 GMT
Subject: CN=68df7a08-f800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:cf:34:4e:d9:70:b5:20:ff:b4:71:fd:94:
c0:3c:89:13:9a:56:db:f2:d0:e0:ff:e2:a8:6e:3b:
d8:bc:67:cf:a7:8b:e3:7f:d6:55:7c:a9:0e:83:52:
5c:cc:4f:56:2b:7e:f7:cb:fe:c3:7a:2f:16:8f:b9:
3a:78:e1:d9:4e:89:4d:25:b9:90:61:90:d7:ea:46:
a3:58:db:d2:ce:b1:8e:89:e1:57:23:6c:bf:40:7b:
f7:38:9c:07:97:f3:5a:ce:76:2e:3c:7a:c2:49:f0:
ed:3d:35:fd:20:69:8a:83:d6:f6:20:75:6f:91:9f:
bc:83:a8:7d:3a:b0:f6:21:8a:c3:b3:6e:c0:06:f4:
ca:c9:38:22:10:96:0c:34:e6:93:92:90:0d:6d:7c:
0a:d8:67:9b:13:7e:9e:e0:3f:a1:64:5e:ae:07:51:
47:6c:f5:7a:f6:2f:49:c0:4e:ef:db:b1:d4:4d:7d:
5e:d4:12:f1:89:95:a2:c5:d4:7b:c3:97:ff:97:f9:
6f:b2:c7:e5:07:08:ed:65:c6:f6:4e:23:fe:de:a4:
69:de:f7:f2:e3:fe:df:11:cf:94:2b:ac:8e:69:d0:
7c:57:6b:10:83:ea:bc:c8:3e:e5:82:36:c9:93:08:
99:80:21:a1:c7:e3:58:27:ca:3b:01:36:0c:69:49:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:6B:F7:73:C4:91:13:CD:0E:24:59:ED:5B:27:74:78:0D:A4:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E973230AA02911F08E1620C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.192.0/23
45.202.198.0/24
45.202.200.0/24
45.207.161.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
51:10:ca:8d:0f:4f:b8:01:ff:4e:db:a2:e6:85:bc:22:e6:ba:
99:5b:89:79:ee:38:ed:26:e0:18:fc:87:c5:fc:f8:9d:72:1f:
91:20:92:16:cf:06:c1:9e:3d:2b:ab:4d:6b:cf:29:0a:65:7b:
8b:c2:8c:6f:de:cf:d4:78:3b:1b:f9:e3:1c:1a:ea:4d:0c:03:
5a:3e:a8:71:54:85:c6:e0:a1:0d:d3:b8:e1:4b:e9:d3:c4:71:
df:6f:f5:df:28:08:a7:67:26:4f:24:19:8c:69:28:ed:e2:c5:
59:37:51:3b:cd:e5:ee:db:f5:42:9f:09:2d:44:74:b7:e9:ef:
df:83:e6:5c:9f:43:b1:89:87:49:d4:4a:61:18:b1:da:ef:19:
46:02:8b:96:eb:bf:c5:66:8b:6f:cc:e3:37:c9:9c:d5:cd:36:
c7:2c:0f:fb:27:13:30:95:4d:ed:0e:70:50:a5:40:94:25:0d:
c9:41:61:c3:d0:fe:88:f7:5f:0a:2d:a3:d6:8e:0e:64:e6:f9:
41:57:40:e9:08:f3:c7:2a:d0:83:8c:00:c5:66:45:f9:da:34:
e7:9f:3a:da:57:c3:98:eb:f4:3e:4f:62:67:78:9e:8b:a5:9f:
7c:e9:24:4a:ae:cb:26:41:48:bd:02:6d:cf:31:e6:bb:7d:9b:
1a:e2:35:dd
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAX6pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDAzMDcyMzQ3WhcNMjUxMTA4MDcyMzQ3WjAYMRYw
FAYDVQQDEw02OGRmN2EwOC1mODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2EPPNE7ZcLUg/7Rx/ZTAPIkTmlbb8tDg/+KobjvYvGfPp4vjf9ZVfKkO
g1JczE9WK373y/7Dei8Wj7k6eOHZTolNJbmQYZDX6kajWNvSzrGOieFXI2y/QHv3
OJwHl/NaznYuPHrCSfDtPTX9IGmKg9b2IHVvkZ+8g6h9OrD2IYrDs27ABvTKyTgi
EJYMNOaTkpANbXwK2GebE36e4D+hZF6uB1FHbPV69i9JwE7v27HUTX1e1BLxiZWi
xdR7w5f/l/lvssflBwjtZcb2TiP+3qRp3vfy4/7fEc+UK6yOadB8V2sQg+q8yD7l
gjbJkwiZgCGhx+NYJ8o7ATYMaUkQYwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFDCT
a/dzxJETzQ4kWe1bJ3R4DaQGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOTczMjMwQUEwMjkxMUYwOEUxNjIwQzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLcrAAwQALcrGAwQALcrIMAwD
BAAtz6EDBAAtz6IwDQYJKoZIhvcNAQELBQADggEBAFEQyo0PT7gB/07bouaFvCLm
uplbiXnuOO0m4Bj8h8X8+J1yH5EgkhbPBsGePSurTWvPKQple4vCjG/ez9R4Oxv5
4xwa6k0MA1o+qHFUhcbgoQ3TuOFL6dPEcd9v9d8oCKdnJk8kGYxpKO3ixVk3UTvN
5e7b9UKfCS1EdLfp79+D5lyfQ7GJh0nUSmEYsdrvGUYCi5brv8Vmi2/M4zfJnNXN
NscsD/snEzCVTe0OcFClQJQlDclBYcPQ/oj3Xwoto9aODmTm+UFXQOkI88cq0IOM
AMVmRfnaNOefOtpXw5jr9D5PYmd4nouln3zpJEquyyZBSL0Cbc8x5rt9mxriNd0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:57 2025 by rpki-client