Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0473062580B11F093F3FC7CDAE4EC9C.roa
File: D0473062580B11F093F3FC7CDAE4EC9C.roa (raw, json)
Hash identifier: vj8NWeGpWipBsiuBOQGdA50NVFidsc3KzxZJxpg3eAM=
Subject key identifier: C5:80:88:9F:D9:C6:E2:B7:2A:CD:52:3F:C3:39:5C:BE:88:9B:14:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016082
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0473062580B11F093F3FC7CDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:47:01 +0000
ROA not before: Thu 03 Jul 2025 12:46:56 +0000
ROA not after: Wed 08 Jul 2026 12:46:56 +0000
asID: 132537
IP address blocks: 45.192.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90242 (0x16082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:46:56 2025 GMT
Not After : Jul 8 12:46:56 2026 GMT
Subject: CN=68667bc5-6fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:1a:96:48:da:de:74:13:a9:66:33:a8:bb:
8e:ff:4d:5e:18:f3:de:68:67:8c:3d:02:e3:08:25:
53:4e:0f:97:80:74:04:19:ea:a6:87:ed:c6:ec:a6:
15:e0:f1:e6:2a:8d:09:29:3b:da:8b:09:4c:ec:79:
1f:ca:75:66:76:63:27:c7:5d:c2:4c:b3:34:a7:a4:
9a:75:a6:b5:0e:6a:ae:67:52:de:03:9d:fe:a1:b4:
2d:b7:70:e4:63:77:68:a0:4d:b8:56:66:de:87:67:
11:79:58:63:fd:4f:c6:a2:05:f5:46:52:1a:e0:88:
f9:78:af:90:30:32:ae:86:7c:92:5b:43:12:42:c3:
8d:bf:1c:1b:43:6e:a4:e1:2c:88:14:9f:c5:3c:0a:
39:b1:92:18:e9:44:d1:81:87:e9:52:c3:e9:54:2c:
73:7f:3f:8d:9c:5f:68:24:3d:5b:22:50:9b:16:b3:
d4:3f:cf:4a:64:70:f4:ae:68:dd:5e:55:30:f4:eb:
c9:f4:c7:3b:5f:28:81:a4:eb:08:c4:3f:26:65:0e:
e4:75:f7:f9:c4:bc:dd:48:47:44:db:aa:93:60:8b:
87:7b:28:51:a1:81:c0:c6:57:23:b5:9b:f3:0a:23:
7d:27:23:40:a0:3f:dc:7f:14:a6:f3:ef:e4:90:7b:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:88:9F:D9:C6:E2:B7:2A:CD:52:3F:C3:39:5C:BE:88:9B:14:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0473062580B11F093F3FC7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.22.0/23
Signature Algorithm: sha256WithRSAEncryption
15:fb:cd:f3:77:27:08:c1:3f:9d:6b:18:8a:41:a5:6a:d2:50:
9d:b3:70:4d:98:75:bf:1f:88:65:94:26:f4:28:60:e5:32:cc:
1d:b3:e1:be:f4:c1:be:25:21:cf:3f:09:83:f0:17:e2:72:e8:
c7:55:12:bd:32:54:89:19:66:8c:c5:3e:28:87:da:98:26:fc:
17:90:25:18:de:49:b3:06:12:2c:13:b1:30:b8:8e:30:0f:fe:
1d:cc:68:bc:4f:48:86:9c:a8:6c:00:09:6c:22:aa:24:f2:75:
f9:d2:d0:e5:a0:c6:e5:4e:a4:35:92:4e:91:8e:aa:c0:09:9e:
eb:c2:fe:a7:73:d8:b0:11:c0:df:a1:62:cf:db:4b:ec:f0:c8:
73:14:f1:29:ef:c2:7a:35:ee:f5:07:b0:c9:db:87:5f:3f:ab:
ba:9b:ff:27:b0:39:db:a9:e9:48:1b:18:05:10:e4:62:ef:4a:
b5:0f:bf:ba:21:80:e2:23:1b:61:b6:e4:58:a6:f9:13:25:64:
12:d2:8d:4e:65:06:c4:4b:26:32:6c:2d:37:df:75:aa:a0:d7:
4e:35:ff:4b:63:0a:65:59:2c:4c:80:27:12:f3:9d:6c:64:8e:
d7:22:45:11:9c:94:78:ee:ac:b8:db:64:bb:52:47:23:5a:2a:
ed:35:19:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWCCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAzMTI0NjU2WhcNMjYwNzA4MTI0NjU2WjAYMRYw
FAYDVQQDEw02ODY2N2JjNS02ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp8salkja3nQTqWYzqLuO/01eGPPeaGeMPQLjCCVTTg+XgHQEGeqmh+3G
7KYV4PHmKo0JKTvaiwlM7HkfynVmdmMnx13CTLM0p6Sadaa1DmquZ1LeA53+obQt
t3DkY3dooE24Vmbeh2cReVhj/U/GogX1RlIa4Ij5eK+QMDKuhnySW0MSQsONvxwb
Q26k4SyIFJ/FPAo5sZIY6UTRgYfpUsPpVCxzfz+NnF9oJD1bIlCbFrPUP89KZHD0
rmjdXlUw9OvJ9Mc7XyiBpOsIxD8mZQ7kdff5xLzdSEdE26qTYIuHeyhRoYHAxlcj
tZvzCiN9JyNAoD/cfxSm8+/kkHvOxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMWA
iJ/ZxuK3Ks1SP8M5XL6ImxQeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMDQ3MzA2MjU4MEIxMUYwOTNGM0ZDN0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcAWMA0GCSqGSIb3DQEBCwUA
A4IBAQAV+83zdycIwT+daxiKQaVq0lCds3BNmHW/H4hllCb0KGDlMswds+G+9MG+
JSHPPwmD8BficujHVRK9MlSJGWaMxT4oh9qYJvwXkCUY3kmzBhIsE7EwuI4wD/4d
zGi8T0iGnKhsAAlsIqok8nX50tDloMblTqQ1kk6RjqrACZ7rwv6nc9iwEcDfoWLP
20vs8MhzFPEp78J6Ne71B7DJ24dfP6u6m/8nsDnbqelIGxgFEORi70q1D7+6IYDi
IxthtuRYpvkTJWQS0o1OZQbESyYybC0333WqoNdONf9LYwplWSxMgCcS851sZI7X
IkURnJR47qy422S7UkcjWirtNRlo
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:51:38 2025 by rpki-client