Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/228E2924774D11F080791EF4DAE4EC9C.roa
File: 228E2924774D11F080791EF4DAE4EC9C.roa (raw, json)
Hash identifier: Ks+IM1oGZQhmYE0ZlMqk1GIUJfqub0Aw0h2oAkTODoE=
Subject key identifier: 77:05:01:30:8C:FE:0B:00:33:E7:86:01:E3:26:B9:87:D9:B4:28:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/228E2924774D11F080791EF4DAE4EC9C.roa
Signing time: Tue 12 Aug 2025 07:22:43 +0000
ROA not before: Tue 12 Aug 2025 07:22:38 +0000
ROA not after: Fri 19 Sep 2025 07:22:38 +0000
asID: 6079
IP address blocks: 45.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92798 (0x16a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 07:22:38 2025 GMT
Not After : Sep 19 07:22:38 2025 GMT
Subject: CN=689aebc3-e085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:4c:9c:18:a9:31:6b:30:75:28:53:9e:54:
ea:30:18:f6:54:9a:02:60:14:c5:6c:56:5a:e5:54:
76:dc:98:76:e2:95:d7:80:be:8e:eb:27:45:54:c4:
35:a4:4a:a4:15:d7:02:d0:8b:4a:60:66:d7:f1:af:
61:34:67:fb:01:a7:f9:43:2d:5c:70:ba:51:d4:f1:
a4:11:4a:e4:8f:98:99:3a:e3:26:ae:d2:3c:0a:e9:
f2:55:ef:40:3a:05:6e:8f:44:2d:02:9f:35:02:b9:
af:8b:1a:5c:a3:5c:39:b8:26:a5:b8:46:80:bc:52:
3b:6d:06:e4:a6:0f:13:c4:ce:6a:2f:f8:6a:03:23:
67:ac:b6:0a:02:cb:98:f4:58:dc:52:d5:9d:7a:36:
db:94:af:c3:f4:20:57:35:17:5a:29:5f:78:8a:b4:
51:e7:35:1f:f1:a4:ab:4f:eb:8d:fb:df:31:dd:74:
ac:f6:d8:1e:01:6e:9a:65:48:ec:73:08:b6:6a:3c:
6d:9c:e0:f9:11:c3:b0:96:dd:19:f6:a0:c6:95:e8:
9d:51:0b:e0:93:2c:d3:2f:65:3a:94:9e:aa:cf:3a:
7b:21:6f:b7:b5:71:a9:8b:ff:f6:64:39:7f:bf:b7:
9e:d0:03:3d:ee:0b:56:0b:95:a2:63:6d:8b:ec:1f:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:01:30:8C:FE:0B:00:33:E7:86:01:E3:26:B9:87:D9:B4:28:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/228E2924774D11F080791EF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:13:45:a5:a7:ed:cf:cb:10:9e:57:9f:7b:08:90:0b:22:ca:
f3:01:b9:b1:a5:6e:0f:a4:0e:b0:7a:b8:6e:ee:a6:85:be:b1:
b9:6d:db:f5:4d:e3:cc:d3:84:82:02:21:c1:72:d8:9f:7e:70:
5a:e2:09:1f:dd:c6:42:93:cd:9b:03:fb:45:cc:34:08:0d:19:
0c:d9:83:7d:3c:01:d2:7c:62:84:c8:87:3e:57:9e:ed:ae:3e:
38:ef:c3:b8:66:0c:c2:c8:55:7a:29:d4:7f:24:04:43:fb:15:
66:0d:27:e1:31:ed:08:19:6d:8a:ed:26:7d:3e:25:b6:89:6e:
f2:29:78:e7:f7:27:ff:8d:81:1a:32:64:c2:d9:05:81:90:95:
2c:18:9a:57:f2:0a:8f:a2:1d:b2:ff:50:f9:37:45:34:3c:c0:
2b:35:88:4f:35:ba:8a:48:49:97:c4:40:35:0c:a3:65:15:ee:
2c:c0:22:c0:88:6f:a9:df:7d:a7:5e:cf:b9:c3:fb:6c:ab:f4:
6d:8f:7e:59:7d:39:03:b4:d5:7d:b6:d4:38:54:6f:42:9e:d6:
cd:7f:42:b3:3c:c0:d3:18:d2:6f:6a:f8:11:5f:a9:eb:08:d6:
3a:d5:ed:59:c6:b2:5f:2c:fa:7e:8f:99:07:69:5c:40:28:a4:
e1:4c:81:9c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWp+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODEyMDcyMjM4WhcNMjUwOTE5MDcyMjM4WjAYMRYw
FAYDVQQDEw02ODlhZWJjMy1lMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnh9MnBipMWswdShTnlTqMBj2VJoCYBTFbFZa5VR23Jh24pXXgL6O6ydF
VMQ1pEqkFdcC0ItKYGbX8a9hNGf7Aaf5Qy1ccLpR1PGkEUrkj5iZOuMmrtI8Cuny
Ve9AOgVuj0QtAp81Armvixpco1w5uCaluEaAvFI7bQbkpg8TxM5qL/hqAyNnrLYK
AsuY9FjcUtWdejbblK/D9CBXNRdaKV94irRR5zUf8aSrT+uN+98x3XSs9tgeAW6a
ZUjscwi2ajxtnOD5EcOwlt0Z9qDGleidUQvgkyzTL2U6lJ6qzzp7IW+3tXGpi//2
ZDl/v7ee0AM97gtWC5WiY22L7B+wUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHcF
ATCM/gsAM+eGAeMmuYfZtCgNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMjhFMjkyNDc3NEQxMUYwODA3OTFFRjREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpEMA0GCSqGSIb3DQEBCwUA
A4IBAQCxE0Wlp+3PyxCeV597CJALIsrzAbmxpW4PpA6werhu7qaFvrG5bdv1TePM
04SCAiHBctiffnBa4gkf3cZCk82bA/tFzDQIDRkM2YN9PAHSfGKEyIc+V57trj44
78O4ZgzCyFV6KdR/JARD+xVmDSfhMe0IGW2K7SZ9PiW2iW7yKXjn9yf/jYEaMmTC
2QWBkJUsGJpX8gqPoh2y/1D5N0U0PMArNYhPNbqKSEmXxEA1DKNlFe4swCLAiG+p
332nXs+5w/tsq/Rtj35ZfTkDtNV9ttQ4VG9CntbNf0KzPMDTGNJvavgRX6nrCNY6
1e1ZxrJfLPp+j5kHaVxAKKThTIGc
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:47 2025 by rpki-client