Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EA012A2B4DE11F090B2FFA2DAE4EC9C.roa
File: 3EA012A2B4DE11F090B2FFA2DAE4EC9C.roa (raw, json)
Hash identifier: 8K3sXfT9JjYmtIr3y9oS24lwY4siQ91V3IHz1D0XPlA=
Subject key identifier: B3:CA:5D:2A:2D:96:63:BD:A5:11:D2:E3:33:B8:70:3A:87:FE:C1:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EA012A2B4DE11F090B2FFA2DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 15:45:08 +0000
ROA not before: Wed 29 Oct 2025 15:45:03 +0000
ROA not after: Thu 06 Nov 2025 15:45:03 +0000
asID: 397423
IP address blocks: 45.199.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 15:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99278 (0x183ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 15:45:03 2025 GMT
Not After : Nov 6 15:45:03 2025 GMT
Subject: CN=69023684-dabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:56:ef:d3:c9:55:f9:83:99:81:f4:52:29:
25:72:df:18:bf:d9:e8:aa:86:84:83:6d:de:52:15:
77:be:33:06:6b:e7:31:15:b1:d9:14:af:77:fe:36:
c8:d5:3c:ca:e8:10:ea:d0:ea:05:93:97:1a:5b:b5:
89:d1:74:31:b5:ac:7f:be:1e:5c:bb:c5:35:7a:d6:
06:dc:f6:f8:3f:e1:65:8e:cc:ce:e6:78:43:18:39:
56:3a:b9:1a:c0:57:e2:95:87:17:af:a4:86:aa:ff:
2f:ec:76:0b:f0:87:ba:95:e3:95:23:61:16:a5:d3:
f0:ac:8f:1d:36:f3:5d:fc:0a:20:89:be:a7:cb:44:
f9:51:2a:d7:8e:30:66:64:ad:cf:c6:a4:36:6b:de:
40:42:91:83:ae:68:14:3f:c6:90:8e:65:cf:5d:df:
4b:1f:d2:ad:64:c6:ca:20:e5:91:45:db:f1:c2:72:
90:ec:1b:e5:9e:fb:3c:1e:cb:93:b3:3b:4c:07:2d:
83:a3:6e:ff:90:04:dd:a3:2c:2f:1a:46:68:7d:6d:
56:81:d6:3f:26:55:af:c6:3c:ad:6f:34:32:e0:98:
7c:bb:15:c7:86:75:69:71:d4:56:8d:17:50:38:97:
3d:a9:1e:59:39:88:18:4f:4b:60:30:6b:30:d4:88:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:5D:2A:2D:96:63:BD:A5:11:D2:E3:33:B8:70:3A:87:FE:C1:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EA012A2B4DE11F090B2FFA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
af:20:94:56:70:60:67:31:2c:f0:90:34:f9:25:38:f2:0d:95:
82:10:29:fd:2b:ed:c4:e7:1e:ec:43:8a:6e:b9:e8:99:c4:85:
6f:f8:f6:d0:ca:79:65:ed:bf:1e:11:29:47:9d:23:50:20:7d:
7c:f7:0c:ba:69:cd:90:4d:2b:0b:47:77:86:27:a0:c6:1f:62:
8e:81:40:81:83:63:b9:51:ed:38:fc:95:7c:ac:82:2e:b0:a8:
d3:cd:3e:c2:21:9a:78:25:71:c9:1f:f3:12:25:c9:aa:e2:3f:
7a:c5:23:e4:4d:78:e5:13:ac:af:04:7d:0d:67:2a:cd:e5:77:
3b:c8:8e:14:bc:23:14:f3:89:74:32:24:81:52:fa:c4:e0:6d:
a1:1b:23:77:ec:5f:7d:e0:59:8f:e1:4c:46:c1:87:f6:bd:50:
77:90:f6:a5:d5:4c:b5:a1:e7:09:57:9f:62:b9:d2:c7:c3:e9:
b8:aa:49:c3:52:6e:64:eb:86:25:4e:10:24:c5:62:b6:09:95:
3d:8c:f3:ed:c0:59:71:3f:ae:ef:ed:ae:a7:a5:5c:35:b9:8a:
c3:6e:4f:b2:1c:70:5c:cc:25:85:2f:ca:fc:94:bc:ae:94:08:
ae:4c:1d:93:ce:c6:3d:1c:dc:56:23:f4:5c:7a:21:10:0d:27:
19:32:56:b9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYPOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI5MTU0NTAzWhcNMjUxMTA2MTU0NTAzWjAYMRYw
FAYDVQQDEw02OTAyMzY4NC1kYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsJ1W79PJVfmDmYH0Uiklct8Yv9noqoaEg23eUhV3vjMGa+cxFbHZFK93
/jbI1TzK6BDq0OoFk5caW7WJ0XQxtax/vh5cu8U1etYG3Pb4P+FljszO5nhDGDlW
OrkawFfilYcXr6SGqv8v7HYL8Ie6leOVI2EWpdPwrI8dNvNd/Aogib6ny0T5USrX
jjBmZK3PxqQ2a95AQpGDrmgUP8aQjmXPXd9LH9KtZMbKIOWRRdvxwnKQ7Bvlnvs8
HsuTsztMBy2Do27/kATdoywvGkZofW1WgdY/JlWvxjytbzQy4Jh8uxXHhnVpcdRW
jRdQOJc9qR5ZOYgYT0tgMGsw1Ihq6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLPK
XSotlmO9pRHS4zO4cDqH/sGJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRUEwMTJBMkI0REUxMUYwOTBCMkZGQTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce9MA0GCSqGSIb3DQEBCwUA
A4IBAQCvIJRWcGBnMSzwkDT5JTjyDZWCECn9K+3E5x7sQ4puueiZxIVv+PbQynll
7b8eESlHnSNQIH189wy6ac2QTSsLR3eGJ6DGH2KOgUCBg2O5Ue04/JV8rIIusKjT
zT7CIZp4JXHJH/MSJcmq4j96xSPkTXjlE6yvBH0NZyrN5Xc7yI4UvCMU84l0MiSB
UvrE4G2hGyN37F994FmP4UxGwYf2vVB3kPal1Uy1oecJV59iudLHw+m4qknDUm5k
64YlThAkxWK2CZU9jPPtwFlxP67v7a6npVw1uYrDbk+yHHBczCWFL8r8lLyulAiu
TB2TzsY9HNxWI/RceiEQDScZMla5
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:34 2025 by rpki-client