
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A2331CC688E11F0B3167BE3DAE4EC9C.roa
File: 5A2331CC688E11F0B3167BE3DAE4EC9C.roa (raw, json)
Hash identifier: p3UcZKx6OH+WYfBEx1SdHSShDa3URocpy2fn1HJNHOc=
Subject key identifier: 79:9D:28:B6:33:5F:5A:56:3F:9B:90:FC:CC:DE:17:2B:2E:CF:4C:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016773
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A2331CC688E11F0B3167BE3DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:01:46 +0000
ROA not before: Thu 24 Jul 2025 13:01:41 +0000
ROA not after: Thu 28 Aug 2025 13:01:41 +0000
asID: 202656
IP address blocks: 45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92019 (0x16773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 13:01:41 2025 GMT
Not After : Aug 28 13:01:41 2025 GMT
Subject: CN=68822eba-fee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:2c:6c:37:3d:f2:6a:60:50:07:44:e6:02:
c8:09:c8:f5:d1:57:e4:20:dd:a7:9e:15:90:86:ea:
4c:60:0d:e1:7c:15:7a:e7:d8:c4:94:2e:f2:82:13:
f8:62:15:29:63:9e:36:d4:f7:ea:22:41:b5:0a:b4:
9c:7c:1d:9a:eb:ed:5a:a3:da:16:20:b0:fc:3c:3d:
23:b2:11:64:07:0a:33:42:21:39:73:e6:74:e3:79:
e5:15:34:0a:ea:4a:a5:aa:12:5e:e3:7c:d5:66:85:
08:0e:0b:a5:06:13:99:35:5b:01:17:ce:47:44:f4:
7d:f5:d7:b5:83:38:27:65:49:8f:ca:2e:0d:87:fd:
51:e2:b2:86:a3:11:13:b6:e3:4d:8d:2a:bf:5b:ba:
d5:05:68:3d:31:21:07:fd:0c:fe:03:56:da:55:bc:
b9:e5:fe:4a:50:27:a0:66:dc:d7:d9:8e:dd:62:33:
df:94:31:30:7f:73:d1:5b:37:b2:19:ab:5b:f5:73:
ce:4c:3d:0a:40:d5:38:35:05:4a:d3:80:62:c9:89:
65:ed:f1:53:3d:fe:41:36:fa:78:b9:7f:48:d4:4b:
ca:3a:f2:f1:de:a6:53:19:73:46:34:0c:5c:ad:49:
0b:d0:f7:20:41:44:be:a8:66:1f:01:65:11:95:cc:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:28:B6:33:5F:5A:56:3F:9B:90:FC:CC:DE:17:2B:2E:CF:4C:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A2331CC688E11F0B3167BE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.229.0-45.199.230.255
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9b:6f:17:da:70:49:af:8a:6e:a1:d7:66:15:9b:03:c9:af:
ec:97:90:e8:0e:1c:76:e0:04:24:e0:0b:45:dc:82:03:af:bf:
aa:ad:53:20:46:49:54:49:a1:d0:2d:18:c8:2e:1e:87:10:ba:
a8:9e:94:ce:03:9f:3b:23:9b:54:03:a7:99:5a:30:4e:79:86:
ca:e8:a6:10:78:8a:28:b2:d3:15:43:c7:a7:f5:fc:18:6e:b9:
b8:8a:a7:48:6f:4e:5d:80:95:53:00:f4:f8:5f:8c:0d:0b:81:
67:f9:a4:b3:ba:d3:c4:45:3d:ec:47:16:90:a3:d5:61:8f:43:
31:22:ec:1f:e7:50:a0:ee:25:5c:f1:9c:e5:6c:fd:3b:47:a0:
dd:b6:80:0e:12:ec:b5:0c:ce:54:93:c6:7a:be:76:f7:70:4c:
84:71:95:11:04:0e:b2:2d:c1:c5:29:6f:a7:fd:7f:f3:91:94:
e8:f4:67:05:65:df:f1:93:99:70:69:15:cd:ef:fd:bb:11:b5:
6a:75:33:2d:29:58:bc:1d:b9:bd:ad:2c:31:61:0f:2c:48:4f:
bc:91:30:fe:b6:80:d4:b0:5f:33:e8:f6:a8:56:dd:ef:2c:70:
f2:11:64:16:09:63:29:1d:26:c8:86:fb:34:ed:3a:2c:87:dd:
eb:7b:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:11:58 2025 by rpki-client