Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCAF9456A35011F08A3B42BCDAE4EC9C.roa
File: FCAF9456A35011F08A3B42BCDAE4EC9C.roa (raw, json)
Hash identifier: nH++2jP+yBu9rcgVZHZH4CwytD4FioW6Mmg2NeJ6ayo=
Subject key identifier: 46:DB:BE:0E:E2:19:A9:52:37:52:89:0C:0D:9D:D3:31:B5:4B:51:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCAF9456A35011F08A3B42BCDAE4EC9C.roa
Signing time: Tue 07 Oct 2025 07:41:08 +0000
ROA not before: Tue 07 Oct 2025 07:41:03 +0000
ROA not after: Thu 13 Nov 2025 07:41:03 +0000
asID: 141718
IP address blocks: 45.194.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98086 (0x17f26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 07:41:03 2025 GMT
Not After : Nov 13 07:41:03 2025 GMT
Subject: CN=68e4c414-fd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:1f:11:3b:fa:af:50:a6:dd:9e:f6:3c:bb:
ca:e5:b1:c8:ae:70:23:91:b6:8e:07:fa:05:d7:a4:
ad:45:99:1d:ce:ad:39:61:24:19:d0:f9:56:c5:6a:
09:76:2c:c5:03:8c:0b:98:f8:6d:d0:96:e9:8f:63:
61:1a:8a:87:18:fc:af:0b:ff:ba:1d:6d:65:03:8a:
cc:0e:c4:4b:89:f9:e8:fd:90:8e:c8:19:a8:af:90:
01:0a:85:ff:e9:7e:96:68:27:27:68:5b:d5:24:cf:
45:8f:5f:03:03:a7:ef:4b:1d:5f:11:1b:7f:53:52:
26:6b:97:3b:9c:c0:6e:37:89:2a:6f:e1:9b:81:6c:
d4:9d:0b:9b:66:00:0f:47:40:9b:30:25:95:4d:ba:
9b:57:54:23:0e:eb:7d:b5:4d:0f:79:fb:af:6a:49:
f6:12:5e:01:c7:27:7d:c3:1b:e0:2e:97:79:bd:df:
36:43:82:9e:c6:f7:e0:26:80:28:f3:6d:c6:7f:b4:
86:a1:00:9f:43:0d:10:b6:ad:8c:e9:35:59:3b:82:
7e:88:ad:c3:5a:7f:30:ae:b7:69:f3:ce:bd:75:49:
37:4c:38:52:03:21:75:42:2d:de:e5:da:4d:3a:29:
a0:81:75:83:8d:ac:0e:c2:b7:de:46:e4:70:90:91:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:BE:0E:E2:19:A9:52:37:52:89:0C:0D:9D:D3:31:B5:4B:51:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCAF9456A35011F08A3B42BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ff:6e:50:ca:0c:ec:a7:62:21:24:6e:2a:98:7a:0c:c7:7d:
77:90:1d:61:c8:ca:8e:05:4c:89:11:69:d7:b3:9a:d6:6d:51:
19:24:ec:4a:e9:50:e9:98:bb:b5:f3:b4:a0:cd:ff:da:2d:47:
7a:36:29:6d:08:f5:e2:ed:c7:e5:d4:1b:96:36:66:d9:8c:90:
58:b9:9b:20:4a:be:f4:8c:dc:d6:70:52:f0:e4:77:de:5e:77:
eb:d4:22:d4:4f:a9:53:dc:01:fa:e9:80:cc:0d:47:87:26:c9:
54:41:00:f9:ea:95:cb:14:55:ef:77:cc:c8:6d:82:e3:50:31:
c5:4c:b8:b2:26:e2:9c:e7:48:49:66:fb:ff:0c:54:ec:d7:8a:
db:12:30:98:91:77:ba:32:1e:cc:20:36:32:04:ee:67:d8:88:
30:b6:54:21:31:2b:ae:ea:43:2c:12:29:be:2e:ad:c9:be:77:
f7:f8:22:c3:07:c0:79:a7:8f:bc:c9:16:c8:2e:44:83:03:67:
7f:4d:98:ea:39:c6:12:71:66:f9:26:a8:65:7a:d3:75:3a:16:
04:80:8a:38:ed:ad:dd:bc:fa:8d:a3:1a:b9:3f:54:c1:3a:b3:
91:53:d1:f0:e6:42:5b:ff:75:21:54:a8:6a:63:e9:43:33:c7:
3d:09:14:b8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX8mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDA3MDc0MTAzWhcNMjUxMTEzMDc0MTAzWjAYMRYw
FAYDVQQDEw02OGU0YzQxNC1mZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3EgfETv6r1Cm3Z72PLvK5bHIrnAjkbaOB/oF16StRZkdzq05YSQZ0PlW
xWoJdizFA4wLmPht0Jbpj2NhGoqHGPyvC/+6HW1lA4rMDsRLifno/ZCOyBmor5AB
CoX/6X6WaCcnaFvVJM9Fj18DA6fvSx1fERt/U1Ima5c7nMBuN4kqb+GbgWzUnQub
ZgAPR0CbMCWVTbqbV1QjDut9tU0Pefuvakn2El4Bxyd9wxvgLpd5vd82Q4Kexvfg
JoAo823Gf7SGoQCfQw0Qtq2M6TVZO4J+iK3DWn8wrrdp8869dUk3TDhSAyF1Qi3e
5dpNOimggXWDjawOwrfeRuRwkJHjsQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEbb
vg7iGalSN1KJDA2d0zG1S1GiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQ0FGOTQ1NkEzNTAxMUYwOEEzQjQyQkNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJWMA0GCSqGSIb3DQEBCwUA
A4IBAQBS/25Qygzsp2IhJG4qmHoMx313kB1hyMqOBUyJEWnXs5rWbVEZJOxK6VDp
mLu187Sgzf/aLUd6NiltCPXi7cfl1BuWNmbZjJBYuZsgSr70jNzWcFLw5HfeXnfr
1CLUT6lT3AH66YDMDUeHJslUQQD56pXLFFXvd8zIbYLjUDHFTLiyJuKc50hJZvv/
DFTs14rbEjCYkXe6Mh7MIDYyBO5n2IgwtlQhMSuu6kMsEim+Lq3Jvnf3+CLDB8B5
p4+8yRbILkSDA2d/TZjqOcYScWb5JqhletN1OhYEgIo47a3dvPqNoxq5P1TBOrOR
U9Hw5kJb/3UhVKhqY+lDM8c9CRS4
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:53 2025 by rpki-client