Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75A2EF52733B11F0992913E7DAE4EC9C.roa
File: 75A2EF52733B11F0992913E7DAE4EC9C.roa (raw, json)
Hash identifier: k9sdXWiZ95bDLjnM558Lq8Gc+3MWOArj3VJjADd1G3I=
Subject key identifier: D4:F8:4F:B6:92:A3:41:C2:49:72:DE:E1:1C:0D:3C:68:83:42:67:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01695F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75A2EF52733B11F0992913E7DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 03:06:06 +0000
ROA not before: Thu 07 Aug 2025 03:06:02 +0000
ROA not after: Sat 30 Aug 2025 03:06:02 +0000
asID: 395793
IP address blocks: 45.192.238.0/24 maxlen: 24
45.192.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92511 (0x1695f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 7 03:06:02 2025 GMT
Not After : Aug 30 03:06:02 2025 GMT
Subject: CN=6894181e-c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:55:b5:73:bb:85:78:bd:66:28:bd:03:06:
3a:31:51:4a:96:5a:ac:b9:05:75:2a:86:e8:03:c2:
d2:76:48:11:44:5d:66:57:12:2a:d6:f5:db:d3:91:
65:a1:66:63:43:73:ae:c3:99:28:b2:39:8e:9a:43:
75:b8:48:6b:ae:4e:87:50:d8:d2:3f:db:4c:ba:a8:
f0:fd:64:47:ec:9e:1f:a3:3d:d2:2c:cb:6b:fe:8d:
5e:4d:87:b5:61:33:c7:55:74:84:75:66:91:f5:95:
a0:1e:2b:2d:d3:ca:f5:09:94:ae:26:f6:7f:61:42:
51:5f:67:74:34:4e:f4:18:24:a0:9f:c4:ee:72:ba:
95:17:ba:2c:63:aa:42:3f:18:bc:4e:61:2c:24:cb:
44:36:f8:05:f0:6e:3b:c1:81:98:ff:4a:61:f0:dd:
c5:0d:34:c2:8e:db:8c:c1:38:24:cf:e5:fd:55:d4:
7e:64:11:1b:da:8a:16:a2:15:f4:f6:77:cd:f9:5c:
94:94:2a:2b:73:88:97:09:d6:84:06:ac:cd:ec:2b:
0b:43:dc:f8:2e:bb:17:04:d5:23:51:30:f8:ab:a0:
32:7a:a8:cc:f3:a4:c7:c6:7e:08:52:c5:21:c8:79:
30:fe:55:ce:f0:b3:77:f2:90:60:4f:b0:38:86:35:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:4F:B6:92:A3:41:C2:49:72:DE:E1:1C:0D:3C:68:83:42:67:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75A2EF52733B11F0992913E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:1d:01:88:fa:9a:37:f7:dd:2b:52:cd:ca:d6:88:58:b4:2d:
26:6d:ad:5d:eb:2f:4b:6f:af:9b:aa:c9:35:54:60:f1:05:1b:
3e:f9:4b:1d:a3:19:a2:90:59:23:97:6b:d8:bf:65:00:5a:7b:
19:d3:0d:4c:49:fe:f4:42:f3:94:42:fd:f1:79:9b:b3:bb:c2:
ca:96:68:cd:4a:36:58:b4:e8:d9:e1:67:24:68:f1:71:07:c5:
5d:78:0b:e0:5b:a9:08:f2:6d:23:cf:ba:90:5c:25:91:08:e7:
f0:21:85:87:5d:99:13:43:aa:64:1f:7a:0f:2c:5b:e2:ca:d1:
f2:39:52:3b:34:5f:c9:33:a9:e8:78:f9:4c:81:b9:2c:f4:82:
56:b3:e0:67:2f:40:42:37:e7:0e:29:fe:ff:84:99:da:71:32:
ae:a9:be:0e:f6:07:6f:25:b8:8c:80:81:ea:e3:1a:49:03:e6:
50:b5:9f:37:70:79:aa:9d:74:14:3f:1a:5d:a1:35:96:b6:16:
7e:2d:d3:17:3a:fa:92:4a:d9:59:ad:59:cb:cc:84:08:e9:f2:
be:80:8a:20:7a:9f:9f:d8:d8:02:fa:28:d6:8b:df:e9:92:8f:
77:b7:dd:6a:ed:87:88:f8:cc:f6:7e:11:d3:47:1f:ec:5b:3a:
65:84:d3:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWlfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODA3MDMwNjAyWhcNMjUwODMwMDMwNjAyWjAYMRYw
FAYDVQQDEw02ODk0MTgxZS1jMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmMpVtXO7hXi9Zii9AwY6MVFKllqsuQV1KoboA8LSdkgRRF1mVxIq1vXb
05FloWZjQ3Ouw5kosjmOmkN1uEhrrk6HUNjSP9tMuqjw/WRH7J4foz3SLMtr/o1e
TYe1YTPHVXSEdWaR9ZWgHist08r1CZSuJvZ/YUJRX2d0NE70GCSgn8TucrqVF7os
Y6pCPxi8TmEsJMtENvgF8G47wYGY/0ph8N3FDTTCjtuMwTgkz+X9VdR+ZBEb2ooW
ohX09nfN+VyUlCorc4iXCdaEBqzN7CsLQ9z4LrsXBNUjUTD4q6AyeqjM86THxn4I
UsUhyHkw/lXO8LN38pBgT7A4hjWHjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNT4
T7aSo0HCSXLe4RwNPGiDQmdIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NUEyRUY1MjczM0IxMUYwOTkyOTEzRTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcDuMA0GCSqGSIb3DQEBCwUA
A4IBAQBNHQGI+po3990rUs3K1ohYtC0mba1d6y9Lb6+bqsk1VGDxBRs++Usdoxmi
kFkjl2vYv2UAWnsZ0w1MSf70QvOUQv3xeZuzu8LKlmjNSjZYtOjZ4WckaPFxB8Vd
eAvgW6kI8m0jz7qQXCWRCOfwIYWHXZkTQ6pkH3oPLFviytHyOVI7NF/JM6noePlM
gbks9IJWs+BnL0BCN+cOKf7/hJnacTKuqb4O9gdvJbiMgIHq4xpJA+ZQtZ83cHmq
nXQUPxpdoTWWthZ+LdMXOvqSStlZrVnLzIQI6fK+gIogep+f2NgC+ijWi9/pko93
t91q7YeI+Mz2fhHTRx/sWzplhNNn
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:12 2025 by rpki-client