Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/333C4AE872DA11F083A78FEFDAE4EC9C.roa
File: 333C4AE872DA11F083A78FEFDAE4EC9C.roa (raw, json)
Hash identifier: /YqC17bUT1L8776QsdQex9Z6Z2f4CFW8rMc+iQnumXs=
Subject key identifier: 6E:F2:65:E0:11:82:D1:9D:83:54:03:68:6F:80:D4:47:B2:C3:4F:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016956
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/333C4AE872DA11F083A78FEFDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 15:29:54 +0000
ROA not before: Wed 06 Aug 2025 15:29:48 +0000
ROA not after: Sat 30 Aug 2025 15:29:48 +0000
asID: 395793
IP address blocks: 45.192.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92502 (0x16956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 15:29:48 2025 GMT
Not After : Aug 30 15:29:48 2025 GMT
Subject: CN=689374f2-e559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:8f:cb:56:2b:b6:4b:3a:64:11:c2:a4:13:
8e:04:47:3c:64:0c:2b:ce:5e:d5:6c:7b:ef:27:0f:
dc:f4:0e:98:21:85:a0:c7:88:b1:b3:d4:3d:39:26:
8c:77:0a:34:4f:1c:d6:8d:cc:ac:03:6a:a1:8f:7a:
26:87:86:9a:c4:fc:d9:c8:ae:0f:a6:ba:86:d6:94:
5a:1e:c5:43:b9:e5:fa:06:5d:71:e4:d3:f3:4b:be:
3b:d5:d7:33:5c:a3:b9:7d:fb:a0:5e:70:bf:dd:f2:
23:c2:55:32:79:45:81:3f:1f:0c:f7:62:7e:89:ce:
11:29:5a:fc:7e:5b:58:0d:26:a6:28:51:df:0b:0f:
2d:2f:16:be:3a:18:b4:ef:1a:b2:75:c8:93:86:1e:
bb:5f:83:71:e2:b7:de:ea:be:1e:48:fa:23:02:eb:
ee:cd:ab:7e:a3:d2:64:7f:31:4e:84:6d:7d:4e:50:
1b:9a:7c:62:a8:aa:38:96:5c:a1:67:ba:bc:5d:0b:
da:96:13:b8:cc:a8:23:af:90:eb:ae:ae:e0:3e:bb:
07:99:5c:5e:e4:d5:43:f0:b2:22:6e:52:31:b8:d8:
c9:a0:7d:85:20:ab:7b:d1:91:b2:7a:04:a6:62:2d:
29:bf:14:85:7e:1e:c6:f4:eb:a4:4b:d1:bc:de:e2:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F2:65:E0:11:82:D1:9D:83:54:03:68:6F:80:D4:47:B2:C3:4F:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/333C4AE872DA11F083A78FEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
Signature Algorithm: sha256WithRSAEncryption
11:08:5a:4b:f0:03:2f:8f:28:a7:eb:d2:90:d5:48:05:c1:5c:
b0:3c:1b:03:6c:7a:bf:da:69:2b:b7:f3:31:68:1d:3a:e2:37:
31:c0:74:5e:41:bd:79:de:ef:bc:d2:1a:b8:87:ee:2a:0d:d4:
bc:fc:a8:72:a4:24:c2:6b:82:15:83:97:4a:9c:50:55:57:79:
90:45:97:50:bc:5a:c2:e8:9b:ea:48:60:a3:dd:13:c4:3e:4b:
22:19:8a:95:63:9f:a3:51:94:4f:8b:87:f4:45:70:8c:c6:1d:
57:96:e4:2c:1a:1c:04:10:14:4f:ec:8f:c3:77:4c:2f:d3:25:
5a:2b:bb:d1:39:c4:57:01:4d:2f:70:84:d4:23:ba:29:9b:4a:
cd:fc:46:42:c7:4e:ba:50:87:f8:59:50:37:42:90:e0:bb:ca:
4f:df:a5:fe:9c:97:1f:14:0d:7e:6b:ad:57:c3:7b:94:62:f8:
7f:23:7b:c9:86:ec:49:ec:fb:08:1c:46:aa:53:d8:c2:29:54:
63:6d:90:e6:ae:61:f9:11:e3:65:29:bb:9a:ef:94:92:5e:3f:
73:e4:d9:08:35:54:98:d4:0c:b4:c5:b7:97:6a:82:4e:f5:dc:
fc:16:1b:37:31:f5:02:01:e3:dd:08:17:f0:a3:2a:dc:43:e1:
bf:1e:8b:33
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWlWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA2MTUyOTQ4WhcNMjUwODMwMTUyOTQ4WjAYMRYw
FAYDVQQDEw02ODkzNzRmMi1lNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAskmPy1Yrtks6ZBHCpBOOBEc8ZAwrzl7VbHvvJw/c9A6YIYWgx4ixs9Q9
OSaMdwo0TxzWjcysA2qhj3omh4aaxPzZyK4PprqG1pRaHsVDueX6Bl1x5NPzS747
1dczXKO5ffugXnC/3fIjwlUyeUWBPx8M92J+ic4RKVr8fltYDSamKFHfCw8tLxa+
Ohi07xqydciThh67X4Nx4rfe6r4eSPojAuvuzat+o9JkfzFOhG19TlAbmnxiqKo4
llyhZ7q8XQvalhO4zKgjr5Drrq7gPrsHmVxe5NVD8LIiblIxuNjJoH2FIKt70ZGy
egSmYi0pvxSFfh7G9OukS9G83uJhpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG7y
ZeARgtGdg1QDaG+A1Eeyw0/FMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzNDNEFFODcyREExMUYwODNBNzhGRUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDsMA0GCSqGSIb3DQEBCwUA
A4IBAQARCFpL8AMvjyin69KQ1UgFwVywPBsDbHq/2mkrt/MxaB064jcxwHReQb15
3u+80hq4h+4qDdS8/KhypCTCa4IVg5dKnFBVV3mQRZdQvFrC6JvqSGCj3RPEPksi
GYqVY5+jUZRPi4f0RXCMxh1XluQsGhwEEBRP7I/Dd0wv0yVaK7vROcRXAU0vcITU
I7opm0rN/EZCx066UIf4WVA3QpDgu8pP36X+nJcfFA1+a61Xw3uUYvh/I3vJhuxJ
7PsIHEaqU9jCKVRjbZDmrmH5EeNlKbua75SSXj9z5NkINVSY1Ay0xbeXaoJO9dz8
Fhs3MfUCAePdCBfwoyrcQ+G/Hosz
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:01 2025 by rpki-client