Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0ABB5EF8753A11F09F7E5DE7DAE4EC9C.roa
File: 0ABB5EF8753A11F09F7E5DE7DAE4EC9C.roa (raw, json)
Hash identifier: nEUw/rqOWI9OeSZmoUglHnaHV+9BLOpQ/dob0pitz9Y=
Subject key identifier: 82:80:81:C7:5B:6E:0F:A0:D2:D2:5E:E6:80:54:A8:A2:AD:5D:1E:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0ABB5EF8753A11F09F7E5DE7DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 16:01:00 +0000
ROA not before: Sat 09 Aug 2025 16:00:53 +0000
ROA not after: Mon 22 Sep 2025 16:00:53 +0000
asID: 395886
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92668 (0x169fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 16:00:53 2025 GMT
Not After : Sep 22 16:00:53 2025 GMT
Subject: CN=689770bc-9929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:eb:50:f5:6f:8b:04:1a:a8:fd:dd:6a:e4:1f:
85:30:c3:39:a0:ca:2a:c7:56:4e:de:a2:c9:4c:d8:
ac:46:c6:69:47:98:30:ad:09:56:8a:43:b7:2c:e1:
b8:a7:79:8c:56:f2:44:c3:14:ae:b8:eb:a5:45:54:
cf:98:ac:62:b7:46:f6:de:cd:aa:c7:ab:41:42:db:
1d:a6:3b:c6:35:39:a0:e6:16:51:dd:23:c9:3d:ac:
49:81:f8:f3:fb:77:e7:f0:a6:75:64:8d:32:3b:27:
c9:fd:23:55:c2:8f:cd:b5:f7:f2:1c:e8:25:d1:b1:
35:c4:b4:6e:e6:01:02:8f:d6:5b:7b:65:0b:77:bf:
4c:b4:91:db:b1:5c:27:ad:b2:00:12:5a:34:8b:8d:
bf:e5:8a:43:be:b2:fe:38:ba:0b:a8:10:a7:a6:61:
97:df:98:5e:cf:e8:88:5a:ec:6b:26:03:76:42:b7:
84:fd:17:bf:4b:df:41:c4:05:e7:50:2c:2d:32:b4:
6d:2b:d4:87:41:31:e0:2e:4d:77:84:ca:a9:a8:3a:
ef:ef:0d:80:e8:ab:e6:48:2c:aa:62:6f:de:88:a8:
40:56:4b:8a:65:e4:f6:95:62:79:ca:39:39:41:d6:
f0:b5:d0:6d:8c:aa:c4:1e:57:c8:dc:61:13:f0:d6:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:80:81:C7:5B:6E:0F:A0:D2:D2:5E:E6:80:54:A8:A2:AD:5D:1E:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0ABB5EF8753A11F09F7E5DE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
18:4a:f1:60:69:32:fc:08:2e:d0:b0:6a:f7:18:b6:f3:fc:f6:
6d:a8:59:85:97:ed:89:bb:02:83:d9:f1:f4:b1:4a:56:1f:de:
ce:c1:09:63:31:ec:3d:e0:1d:49:4d:3c:3f:74:5e:d0:85:b2:
fe:03:4a:d7:77:0e:3c:5b:ea:43:b1:7a:48:d3:1e:a5:ba:a2:
2a:bc:23:fb:0d:ed:af:4c:c9:e2:f6:ea:c0:4e:77:50:c2:27:
79:e1:58:b6:e3:62:0d:7b:97:a7:17:33:c6:93:29:78:d5:14:
d0:c9:e7:08:ff:2d:1b:f4:72:ad:74:52:cd:72:2e:a7:b2:3c:
c9:61:ea:2b:be:b5:27:9b:5e:5f:db:48:93:dc:dd:1c:fc:e2:
cc:8c:c4:ec:fb:27:52:50:f7:60:eb:68:b6:37:de:cf:0e:ef:
b2:2a:21:87:92:df:b6:95:fc:97:de:d0:10:e9:d0:ec:7e:35:
66:28:f5:ce:43:7c:01:5c:ad:62:50:c5:61:e0:06:ee:ff:8e:
5f:4b:75:6c:82:52:8a:27:fc:32:3f:14:d4:f4:07:67:65:ac:
05:45:8f:20:34:7d:cf:72:f3:50:25:fc:9c:49:89:c6:4c:c4:
63:da:c8:37:a6:74:6b:43:73:8e:5c:c8:a7:a1:fb:38:f0:af:
a3:bf:e8:b2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWn8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA5MTYwMDUzWhcNMjUwOTIyMTYwMDUzWjAYMRYw
FAYDVQQDEw02ODk3NzBiYy05OTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9+tQ9W+LBBqo/d1q5B+FMMM5oMoqx1ZO3qLJTNisRsZpR5gwrQlWikO3
LOG4p3mMVvJEwxSuuOulRVTPmKxit0b23s2qx6tBQtsdpjvGNTmg5hZR3SPJPaxJ
gfjz+3fn8KZ1ZI0yOyfJ/SNVwo/NtffyHOgl0bE1xLRu5gECj9Zbe2ULd79MtJHb
sVwnrbIAElo0i42/5YpDvrL+OLoLqBCnpmGX35hez+iIWuxrJgN2QreE/Re/S99B
xAXnUCwtMrRtK9SHQTHgLk13hMqpqDrv7w2A6KvmSCyqYm/eiKhAVkuKZeT2lWJ5
yjk5QdbwtdBtjKrEHlfI3GET8NaYmwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIKA
gcdbbg+g0tJe5oBUqKKtXR6iMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQUJCNUVGODc1M0ExMUYwOUY3RTVERTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQAYSvFgaTL8CC7QsGr3GLbz/PZtqFmFl+2JuwKD2fH0sUpWH97OwQljMew9
4B1JTTw/dF7QhbL+A0rXdw48W+pDsXpI0x6luqIqvCP7De2vTMni9urATndQwid5
4Vi242INe5enFzPGkyl41RTQyecI/y0b9HKtdFLNci6nsjzJYeorvrUnm15f20iT
3N0c/OLMjMTs+ydSUPdg62i2N97PDu+yKiGHkt+2lfyX3tAQ6dDsfjVmKPXOQ3wB
XK1iUMVh4Abu/45fS3VsglKKJ/wyPxTU9AdnZawFRY8gNH3PcvNQJfycSYnGTMRj
2sg3pnRrQ3OOXMinofs48K+jv+iy
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:45 2025 by rpki-client