Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9CAFC9A3E1E11F0B47858C3DAE4EC9C.roa
File: F9CAFC9A3E1E11F0B47858C3DAE4EC9C.roa (raw, json)
Hash identifier: p3r97+OyqCIgrIGtemhSpLSXWBfRShK4hFnGjdfBwAQ=
Subject key identifier: 13:11:9F:BB:D2:E5:DB:FF:27:51:28:E7:6D:BD:63:2A:A2:7A:2D:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015908
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9CAFC9A3E1E11F0B47858C3DAE4EC9C.roa
Signing time: Sat 31 May 2025 12:58:41 +0000
ROA not before: Sat 31 May 2025 12:58:36 +0000
ROA not after: Thu 12 Jun 2025 12:58:36 +0000
asID: 401701
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88328 (0x15908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 12:58:36 2025 GMT
Not After : Jun 12 12:58:36 2025 GMT
Subject: CN=683afd01-cc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:90:5c:31:dc:94:fa:5b:3b:3e:c2:06:6e:
5b:f8:9c:de:42:d6:5e:c7:ba:21:33:7b:47:d7:44:
b1:21:74:52:88:e4:34:68:7b:a7:4f:81:4e:7e:08:
d8:a8:ee:37:e5:98:62:df:91:03:32:93:9d:f2:2e:
24:ff:02:bc:b9:f9:19:7d:09:ea:42:b4:d6:1e:06:
64:97:24:0e:67:dc:64:fc:7a:12:10:9b:8d:6c:da:
35:ed:7e:74:67:45:fc:39:00:d9:21:22:a9:d3:65:
fb:4c:19:b2:3e:3a:e8:99:97:a5:3c:6f:3c:e8:70:
6e:74:b2:fa:ec:03:87:73:f6:bf:12:be:58:6d:46:
f2:86:8e:7f:0f:10:ce:e6:56:a8:2e:c2:3c:6f:ff:
05:99:38:1d:f8:11:93:4b:ec:65:06:9b:cd:c7:3a:
64:4b:6c:9a:85:be:46:1e:9d:90:bd:3b:c3:95:3d:
c0:56:b8:72:74:8e:aa:91:39:ba:f5:1f:6b:66:9c:
49:2d:a9:4e:30:e6:fc:79:d0:7e:07:8f:56:64:f5:
97:04:3f:26:1d:c2:4f:1d:29:1a:a9:1a:0f:95:5e:
0d:9f:10:e6:db:44:df:37:93:a7:77:d5:33:a0:76:
95:8d:59:ba:34:05:dd:d7:17:50:4d:70:66:7c:a3:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:9F:BB:D2:E5:DB:FF:27:51:28:E7:6D:BD:63:2A:A2:7A:2D:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9CAFC9A3E1E11F0B47858C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b4:b8:ee:73:4f:b2:e3:4c:c7:fe:41:f2:a2:52:28:6c:97:25:
1b:00:55:08:3d:e1:1b:f2:bf:7a:72:a5:4a:bb:1d:88:03:76:
db:6d:53:b7:65:f3:16:34:24:7a:27:de:1e:71:4a:60:12:ce:
6d:67:73:64:1e:d4:b7:b2:ff:99:4b:75:f5:b4:10:67:0c:4a:
f5:5f:e7:b7:7f:78:71:70:dc:c1:7a:b6:ec:09:0a:60:00:fc:
81:4a:8f:9a:48:e9:c0:b9:2b:6c:0d:91:e9:b2:4a:9e:e6:67:
ba:d5:59:21:ad:23:1a:6c:69:72:10:6b:41:d7:1e:69:bb:76:
ba:81:fc:13:12:ab:30:fc:b9:18:f9:3a:a5:aa:d2:33:10:c0:
48:4d:26:da:fa:4b:ab:89:39:11:69:3c:68:9b:95:a5:f1:ae:
30:9c:64:46:bc:8e:cd:3a:67:b8:cf:d1:92:d1:cd:e5:5d:ba:
3d:80:93:f5:11:04:8e:6c:c6:71:e2:25:ce:3b:08:52:e6:78:
5a:da:26:a9:0d:51:c9:60:8a:9b:76:03:da:d2:28:b3:00:21:
f6:46:3b:99:57:a3:0d:1e:63:53:fd:a7:38:bd:89:4a:e4:4c:
22:17:cd:c5:d0:b7:1b:16:98:a1:36:1f:7d:47:ef:3e:3a:23:
67:6e:11:0d
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAVkIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTMxMTI1ODM2WhcNMjUwNjEyMTI1ODM2WjAYMRYw
FAYDVQQDEw02ODNhZmQwMS1jYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv1qQXDHclPpbOz7CBm5b+JzeQtZex7ohM3tH10SxIXRSiOQ0aHunT4FO
fgjYqO435Zhi35EDMpOd8i4k/wK8ufkZfQnqQrTWHgZklyQOZ9xk/HoSEJuNbNo1
7X50Z0X8OQDZISKp02X7TBmyPjromZelPG886HBudLL67AOHc/a/Er5YbUbyho5/
DxDO5laoLsI8b/8FmTgd+BGTS+xlBpvNxzpkS2yahb5GHp2QvTvDlT3AVrhydI6q
kTm69R9rZpxJLalOMOb8edB+B49WZPWXBD8mHcJPHSkaqRoPlV4NnxDm20TfN5On
d9UzoHaVjVm6NAXd1xdQTXBmfKNczQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFBMR
n7vS5dv/J1Eo5229Yyqiei1dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOUNBRkM5QTNFMUUxMUYwQjQ3ODU4QzNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELcBgAwQELc0QAwQFLc/AMA0G
CSqGSIb3DQEBCwUAA4IBAQC0uO5zT7LjTMf+QfKiUihslyUbAFUIPeEb8r96cqVK
ux2IA3bbbVO3ZfMWNCR6J94ecUpgEs5tZ3NkHtS3sv+ZS3X1tBBnDEr1X+e3f3hx
cNzBerbsCQpgAPyBSo+aSOnAuStsDZHpskqe5me61VkhrSMabGlyEGtB1x5pu3a6
gfwTEqsw/LkY+TqlqtIzEMBITSba+kuriTkRaTxom5Wl8a4wnGRGvI7NOme4z9GS
0c3lXbo9gJP1EQSObMZx4iXOOwhS5nha2iapDVHJYIqbdgPa0iizACH2RjuZV6MN
HmNT/ac4vYlK5EwiF83F0LcbFpihNh99R+8+OiNnbhEN
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:52:30 2025 by rpki-client