Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0861F880297A11F083C2DE7BDAE4EC9C.roa
File: 0861F880297A11F083C2DE7BDAE4EC9C.roa (raw, json)
Hash identifier: yyOf/0+ClRDEi2gt/QLpeMacdQErwHE0OGHzISTA1A0=
Subject key identifier: 2F:45:EB:5C:95:2A:61:85:61:76:43:BA:26:B4:8D:C1:60:C1:9A:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0861F880297A11F083C2DE7BDAE4EC9C.roa
Signing time: Mon 05 May 2025 06:27:36 +0000
ROA not before: Mon 05 May 2025 06:27:31 +0000
ROA not after: Mon 09 Jun 2025 06:27:31 +0000
asID: 141883
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86507 (0x151eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 06:27:31 2025 GMT
Not After : Jun 9 06:27:31 2025 GMT
Subject: CN=68185a57-226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:97:58:21:7b:8a:a4:71:88:81:f8:b0:2b:
a8:17:c7:dc:07:ac:80:15:92:11:dd:00:09:fe:c0:
59:68:fa:30:50:0f:bb:0e:f7:0b:67:32:e4:60:ac:
9e:88:a3:d1:76:76:88:bc:9e:f6:ce:71:a2:3c:e7:
9b:cf:be:43:46:4c:a1:d8:e7:e4:fc:5a:4b:eb:69:
b5:07:c9:56:83:57:91:09:5c:44:1e:86:93:9e:5f:
71:0b:dd:b6:25:8e:3b:b8:ee:19:ef:08:83:4b:fc:
d4:e4:89:d9:24:27:fd:06:2b:56:22:41:5c:65:6a:
0c:ab:34:b4:11:3a:f1:cf:91:43:1f:d7:f3:bf:4f:
93:fe:ba:9f:2a:ae:3b:f7:e7:ea:92:6c:99:6e:bb:
e1:f7:5a:8c:79:5e:cb:ec:87:42:4a:0a:3a:32:63:
01:39:75:8e:6e:99:d5:76:68:3c:c7:b0:04:da:86:
99:0e:47:28:b8:46:d9:94:42:1a:86:96:b6:94:a1:
18:68:4f:e5:7f:6d:81:db:3c:25:2b:b6:fa:9c:7d:
b4:e0:50:ed:84:e4:6e:2b:a1:f1:5d:cf:a0:93:6d:
51:85:e1:ce:61:69:cc:57:f0:61:26:30:a0:57:a0:
ee:6c:a2:aa:5e:de:0a:f9:a8:af:7e:0f:86:36:ac:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:EB:5C:95:2A:61:85:61:76:43:BA:26:B4:8D:C1:60:C1:9A:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0861F880297A11F083C2DE7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1c:8b:df:dc:a3:70:11:96:4d:2a:0a:ee:7a:48:86:ef:d7:
ef:a6:d2:e2:3d:ae:4c:6c:8c:24:1a:3a:c7:58:68:ad:68:1d:
98:2f:ef:87:4a:bf:2f:32:4d:38:3a:a0:ee:b3:d4:26:b7:2c:
22:7c:20:3f:24:2c:6b:ec:96:cb:87:8e:39:5e:7e:3a:6b:15:
fa:27:44:95:fc:c1:5f:b3:b4:b3:7b:85:d1:12:a4:6f:02:7d:
07:f0:1a:bf:a3:fc:d0:1c:6d:54:43:97:34:a7:d4:0a:69:41:
d8:9f:dd:5d:be:84:c0:94:b9:50:e8:ae:ea:a8:ca:8f:25:91:
d0:7d:69:61:52:95:58:ef:4a:4a:f6:8a:93:06:8f:2f:8d:49:
d9:63:ac:84:70:91:ee:3e:84:59:13:1a:91:66:db:91:76:bd:
e4:49:ce:c8:90:d6:9a:6e:4e:43:fe:6a:42:db:2f:09:d7:41:
c5:df:9e:a0:18:a0:e6:c3:c2:46:40:ce:43:0a:f9:06:08:00:
28:62:7a:6d:b6:06:69:8e:a7:f6:f6:8c:41:a9:71:d1:f0:c7:
79:cf:d6:da:13:65:b6:e4:0e:61:55:85:03:af:28:47:fb:4c:
2a:97:1b:35:30:79:e4:53:b7:5c:c2:aa:1d:42:03:4a:e0:b7:
38:5f:1c:18
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAVHrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA1MDYyNzMxWhcNMjUwNjA5MDYyNzMxWjAYMRYw
FAYDVQQDEw02ODE4NWE1Ny0yMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmQyXWCF7iqRxiIH4sCuoF8fcB6yAFZIR3QAJ/sBZaPowUA+7DvcLZzLk
YKyeiKPRdnaIvJ72znGiPOebz75DRkyh2Ofk/FpL62m1B8lWg1eRCVxEHoaTnl9x
C922JY47uO4Z7wiDS/zU5InZJCf9BitWIkFcZWoMqzS0ETrxz5FDH9fzv0+T/rqf
Kq479+fqkmyZbrvh91qMeV7L7IdCSgo6MmMBOXWObpnVdmg8x7AE2oaZDkcouEbZ
lEIahpa2lKEYaE/lf22B2zwlK7b6nH204FDthORuK6HxXc+gk21RheHOYWnMV/Bh
JjCgV6DubKKqXt4K+aivfg+GNqwitwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFC9F
61yVKmGFYXZDuia0jcFgwZo8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wODYxRjg4MDI5N0ExMUYwODNDMkRFN0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAEtyA4DBAYtyAAwDAMEAS3J
1gMEAy3J4AMEBC3J8AMEAC3MADANBgkqhkiG9w0BAQsFAAOCAQEAchyL39yjcBGW
TSoK7npIhu/X76bS4j2uTGyMJBo6x1horWgdmC/vh0q/LzJNODqg7rPUJrcsInwg
PyQsa+yWy4eOOV5+OmsV+idElfzBX7O0s3uF0RKkbwJ9B/Aav6P80BxtVEOXNKfU
CmlB2J/dXb6EwJS5UOiu6qjKjyWR0H1pYVKVWO9KSvaKkwaPL41J2WOshHCR7j6E
WRMakWbbkXa95EnOyJDWmm5OQ/5qQtsvCddBxd+eoBig5sPCRkDOQwr5BggAKGJ6
bbYGaY6n9vaMQalx0fDHec/W2hNltuQOYVWFA68oR/tMKpcbNTB55FO3XMKqHUID
SuC3OF8cGA==
-----END CERTIFICATE-----
Generated at Tue May 13 00:10:28 2025 by rpki-client