Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56F3C9C84C5D11F08B7C0782DAE4EC9C.roa
File: 56F3C9C84C5D11F08B7C0782DAE4EC9C.roa (raw, json)
Hash identifier: rMXBCSsw/lnQNHGffMJEj7m1bJTS9YOhD93QqmX3edo=
Subject key identifier: A7:7B:45:A1:DD:18:D7:6A:8B:73:AA:7C:DF:94:F5:CB:8D:BA:E1:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56F3C9C84C5D11F08B7C0782DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 16:00:23 +0000
ROA not before: Wed 18 Jun 2025 16:00:18 +0000
ROA not after: Wed 30 Jul 2025 16:00:18 +0000
asID: 399195
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89361 (0x15d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 16:00:18 2025 GMT
Not After : Jul 30 16:00:18 2025 GMT
Subject: CN=6852e297-97e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:ba:66:eb:cf:82:08:18:cb:ad:23:bc:1e:
80:38:37:cb:fe:68:85:89:67:69:d4:1e:61:d7:15:
78:44:4b:5a:07:dd:28:88:35:0f:03:30:a0:51:11:
4b:1f:7d:6a:8b:0b:90:65:db:b9:9f:03:d7:f8:e5:
09:99:67:25:2f:7d:f0:d1:9c:06:9a:1a:3a:85:fa:
1f:fc:0d:6e:a3:7b:3f:76:79:cc:a1:78:e1:97:56:
68:60:dd:52:5f:d6:dd:cf:91:05:c7:3f:3c:f1:f7:
e4:65:81:78:2c:5a:02:07:1e:1e:e8:db:bb:89:ce:
3c:88:7c:29:37:d8:3b:06:99:b8:fc:62:a6:0d:65:
ea:a5:29:3c:43:e5:96:46:ca:3f:b7:30:5f:aa:72:
11:9c:b9:9b:d2:76:9c:37:73:f9:7b:9e:89:98:7b:
74:8d:fc:d1:33:52:c1:11:2a:64:29:76:2b:7a:c4:
9a:0e:ba:90:49:2d:fc:da:7e:27:83:8e:d2:73:3a:
8a:e4:13:da:76:d0:9a:d7:65:40:ef:9c:ae:e2:58:
82:fa:3f:75:18:52:6d:8a:27:a8:9c:3e:ac:21:07:
3d:e9:62:9d:be:35:8f:16:27:87:58:f8:a2:3a:02:
4f:df:db:78:b3:b0:3f:49:6a:77:7a:48:ab:c6:e0:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:45:A1:DD:18:D7:6A:8B:73:AA:7C:DF:94:F5:CB:8D:BA:E1:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56F3C9C84C5D11F08B7C0782DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
04:80:85:cd:32:8c:99:19:88:0d:16:e2:83:8e:e8:50:db:87:
e3:bb:47:a2:db:36:5e:5e:76:ff:b9:82:24:e6:b4:09:ce:9b:
70:8e:a5:d2:0b:70:c9:da:e7:79:74:8a:35:1c:20:6d:62:ed:
75:79:30:d1:b6:bf:39:96:96:10:12:07:45:2f:ef:96:88:f4:
88:9e:e1:ee:c1:ad:4c:d1:8a:df:5f:bd:a3:59:e9:dc:16:07:
70:23:e4:bd:ba:f7:09:82:36:94:5f:ee:c8:7b:58:cb:f5:04:
ca:d5:95:6a:38:47:6a:5e:9f:73:04:fd:f8:87:35:dd:2d:24:
46:f2:7b:a6:d6:72:37:d4:60:f4:cf:dc:a9:d0:a3:c8:34:8d:
b6:ff:45:0a:6f:4f:51:db:da:b8:93:de:0b:6a:e3:e8:85:5f:
6f:39:4d:47:d7:ef:4f:43:d8:c3:ac:89:b5:96:ed:d6:d5:97:
e9:7a:e2:f3:9e:56:bf:38:f1:92:7a:ea:7c:a1:be:5a:b2:94:
24:c2:fa:55:33:5e:4b:3a:fc:d5:f2:ef:7f:08:72:71:8f:05:
27:80:a9:43:57:31:92:39:ea:79:ab:bf:cf:f0:eb:cb:e9:da:
57:43:8a:0f:e1:8d:2c:c1:c5:b4:80:e1:36:d2:d8:99:24:2d:
2e:67:37:ab
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV0RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE4MTYwMDE4WhcNMjUwNzMwMTYwMDE4WjAYMRYw
FAYDVQQDEw02ODUyZTI5Ny05N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqkC6ZuvPgggYy60jvB6AODfL/miFiWdp1B5h1xV4REtaB90oiDUPAzCg
URFLH31qiwuQZdu5nwPX+OUJmWclL33w0ZwGmho6hfof/A1uo3s/dnnMoXjhl1Zo
YN1SX9bdz5EFxz888ffkZYF4LFoCBx4e6Nu7ic48iHwpN9g7Bpm4/GKmDWXqpSk8
Q+WWRso/tzBfqnIRnLmb0nacN3P5e56JmHt0jfzRM1LBESpkKXYresSaDrqQSS38
2n4ng47SczqK5BPadtCa12VA75yu4liC+j91GFJtiieonD6sIQc96WKdvjWPFieH
WPiiOgJP39t4s7A/SWp3ekirxuDwfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKd7
RaHdGNdqi3OqfN+U9cuNuuH0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NkYzQzlDODRDNUQxMUYwOEI3QzA3ODJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQAEgIXNMoyZGYgNFuKDjuhQ24fju0ei2zZeXnb/uYIk5rQJzptwjqXSC3DJ
2ud5dIo1HCBtYu11eTDRtr85lpYQEgdFL++WiPSInuHuwa1M0YrfX72jWencFgdw
I+S9uvcJgjaUX+7Ie1jL9QTK1ZVqOEdqXp9zBP34hzXdLSRG8num1nI31GD0z9yp
0KPINI22/0UKb09R29q4k94LauPohV9vOU1H1+9PQ9jDrIm1lu3W1ZfpeuLznla/
OPGSeup8ob5aspQkwvpVM15LOvzV8u9/CHJxjwUngKlDVzGSOep5q7/P8OvL6dpX
Q4oP4Y0swcW0gOE20tiZJC0uZzer
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:27:26 2025 by rpki-client