Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B5F7D544C5011F0B02E50ACDAE4EC9C.roa
File: 3B5F7D544C5011F0B02E50ACDAE4EC9C.roa (raw, json)
Hash identifier: o8WtQHbRuUEhBipw5tug+PwQkTqJbg9DrLpZ1XnAUn8=
Subject key identifier: AB:40:DF:C2:E1:CE:77:31:D0:D9:32:DE:83:4F:56:CF:1B:2F:3F:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B5F7D544C5011F0B02E50ACDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 14:26:33 +0000
ROA not before: Wed 18 Jun 2025 14:26:28 +0000
ROA not after: Fri 25 Jul 2025 14:26:28 +0000
asID: 7018
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89320 (0x15ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 14:26:28 2025 GMT
Not After : Jul 25 14:26:28 2025 GMT
Subject: CN=6852cc99-28c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:29:00:8e:5f:1b:c1:43:7b:97:56:f3:a9:
16:8b:8d:7e:08:9b:83:ea:d1:ff:84:07:83:f7:d4:
bb:8c:f3:8c:16:20:84:a9:e9:85:3f:e2:ea:e8:0e:
c2:e5:b2:7a:31:70:1e:29:f6:24:2f:00:88:b5:f4:
bd:cb:08:5f:e1:46:9e:5f:cb:57:ec:86:b1:00:2c:
7a:76:11:d4:24:1f:5f:65:83:39:d2:d5:72:1d:ce:
e1:f7:37:f0:32:74:e6:0a:5d:19:b2:8e:3c:1a:19:
3e:9a:f8:f0:f2:50:2c:30:28:0e:e7:16:ef:46:9e:
37:95:93:3f:ed:81:bc:29:dd:bb:9f:45:0d:20:16:
e8:31:b5:0a:e4:a7:b0:7a:14:8e:44:47:a9:b0:08:
92:b8:c5:69:84:f6:32:8c:2e:d6:4c:e0:2d:f5:1c:
8b:3e:f8:55:99:f6:98:0b:d9:6b:62:e2:1e:f3:66:
30:5e:6b:84:28:ac:fc:ac:52:30:a8:fe:18:1e:84:
18:4d:dd:84:29:8f:d3:1d:9a:d3:47:ea:6e:52:08:
f9:93:02:db:90:8a:30:83:41:39:cc:49:fe:72:a7:
c1:4a:14:a2:83:30:d0:d7:fe:76:80:9f:e9:b1:47:
e4:88:70:53:e3:84:4b:55:46:b8:80:15:ea:bc:d6:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:40:DF:C2:E1:CE:77:31:D0:D9:32:DE:83:4F:56:CF:1B:2F:3F:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B5F7D544C5011F0B02E50ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
06:18:79:81:e1:52:e8:8b:9c:85:6b:f4:6a:c6:37:cc:8a:87:
d1:10:52:c9:73:18:ad:85:6e:aa:4e:9f:42:a6:af:61:07:50:
07:fd:8b:6e:e0:4d:a6:36:3e:84:e0:df:d5:55:75:d3:bc:95:
98:30:b1:06:47:1e:e3:25:67:2d:16:d9:f8:59:38:10:9e:8b:
5a:6e:3d:84:46:25:68:36:a2:f1:da:94:cd:92:58:48:ab:91:
b0:33:14:f7:0e:48:75:86:3b:2d:6a:e0:07:b7:31:96:f5:66:
78:86:5e:d1:03:ea:07:49:bc:43:fe:db:e0:04:7b:a7:c3:cf:
13:7a:18:8e:d3:7f:a0:4c:a4:d8:82:31:f4:95:e0:76:cd:88:
63:04:08:55:de:7b:6a:c8:c6:d5:54:39:97:79:e7:fd:36:d6:
fd:2f:2d:8d:63:46:ee:3f:f8:45:d3:f8:31:a2:f7:2a:a4:83:
fe:55:79:fd:01:7b:d0:b9:68:c2:e3:db:e0:2b:3b:fd:be:66:
5f:c2:0a:10:8c:da:84:a0:08:01:9f:1f:49:96:c0:71:6c:3c:
e6:2e:4b:ad:56:99:2b:5d:4a:dc:d7:8b:17:42:c1:a5:bc:54:
94:ef:0f:93:13:af:86:c9:d5:fa:2f:28:1a:ff:2f:d4:5d:14:
e0:ac:0e:cb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVzoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE4MTQyNjI4WhcNMjUwNzI1MTQyNjI4WjAYMRYw
FAYDVQQDEw02ODUyY2M5OS0yOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwkwpAI5fG8FDe5dW86kWi41+CJuD6tH/hAeD99S7jPOMFiCEqemFP+Lq
6A7C5bJ6MXAeKfYkLwCItfS9ywhf4UaeX8tX7IaxACx6dhHUJB9fZYM50tVyHc7h
9zfwMnTmCl0Zso48Ghk+mvjw8lAsMCgO5xbvRp43lZM/7YG8Kd27n0UNIBboMbUK
5KewehSOREepsAiSuMVphPYyjC7WTOAt9RyLPvhVmfaYC9lrYuIe82YwXmuEKKz8
rFIwqP4YHoQYTd2EKY/THZrTR+puUgj5kwLbkIowg0E5zEn+cqfBShSigzDQ1/52
gJ/psUfkiHBT44RLVUa4gBXqvNa5kwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKtA
38Lhzncx0Nky3oNPVs8bLz+2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjVGN0Q1NDRDNTAxMUYwQjAyRTUwQUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpKMA0GCSqGSIb3DQEBCwUA
A4IBAQAGGHmB4VLoi5yFa/RqxjfMiofREFLJcxithW6qTp9Cpq9hB1AH/Ytu4E2m
Nj6E4N/VVXXTvJWYMLEGRx7jJWctFtn4WTgQnotabj2ERiVoNqLx2pTNklhIq5Gw
MxT3Dkh1hjstauAHtzGW9WZ4hl7RA+oHSbxD/tvgBHunw88TehiO03+gTKTYgjH0
leB2zYhjBAhV3ntqyMbVVDmXeef9Ntb9Ly2NY0buP/hF0/gxovcqpIP+VXn9AXvQ
uWjC49vgKzv9vmZfwgoQjNqEoAgBnx9JlsBxbDzmLkutVpkrXUrc14sXQsGlvFSU
7w+TE6+GydX6Lyga/y/UXRTgrA7L
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:57:44 2025 by rpki-client