Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68674230664211F0B5CF89E7DAE4EC9C.roa
File: 68674230664211F0B5CF89E7DAE4EC9C.roa (raw, json)
Hash identifier: 8uRjwtR0zHfMupttP593rkdx2ia2v5NlMe1bd982OR0=
Subject key identifier: DC:41:4E:82:3C:7E:BF:7C:87:F7:CE:58:0F:D4:48:BC:21:E0:16:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016622
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68674230664211F0B5CF89E7DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 14:53:06 +0000
ROA not before: Mon 21 Jul 2025 14:53:01 +0000
ROA not after: Sat 25 Jul 2026 14:53:01 +0000
asID: 18229
IP address blocks: 45.194.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91682 (0x16622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 14:53:01 2025 GMT
Not After : Jul 25 14:53:01 2026 GMT
Subject: CN=687e5452-71f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:03:f9:b1:f5:ff:1f:e1:40:7e:e1:63:2f:
ad:4e:e5:54:78:e5:0e:b4:fc:fa:ba:0c:16:17:5c:
ac:84:65:86:8d:19:57:e3:1a:79:bf:67:90:25:e9:
fe:82:fa:5c:93:65:a5:f7:c9:1c:2b:ad:7d:be:d5:
48:1c:af:26:d4:b4:23:4e:41:fd:b6:25:71:01:6b:
4f:49:cd:43:2e:45:fe:f8:59:d9:4d:5e:fa:07:df:
fc:73:a5:04:a0:75:b7:02:ef:9f:ed:dd:08:0c:c5:
56:cc:81:1c:1c:3d:81:8d:f4:b5:08:4e:6b:6e:76:
ec:9d:71:e5:29:f3:7b:06:40:76:1d:91:3b:f6:bf:
0b:a8:87:a3:cd:d7:61:59:6f:db:d8:a0:8c:9b:27:
09:64:c1:50:9b:97:bf:54:01:a6:52:81:52:4a:79:
0f:a9:17:97:03:b2:36:20:98:02:e3:8d:e8:2b:78:
65:a9:ee:93:39:a1:5e:83:6f:de:34:c3:f1:94:af:
a8:aa:c1:0d:4f:58:e6:c7:1f:3d:ed:69:8e:dd:78:
a6:cd:11:7c:a0:0e:f4:5f:93:4a:b6:55:04:6e:db:
ef:ab:aa:3b:18:56:6a:c4:07:a5:3c:ae:e5:f1:6f:
3f:2c:ce:39:3a:f5:e6:c5:cd:a1:b6:ee:dc:d5:11:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:41:4E:82:3C:7E:BF:7C:87:F7:CE:58:0F:D4:48:BC:21:E0:16:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68674230664211F0B5CF89E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:08:9c:15:fe:03:bc:c5:b6:7e:cd:83:57:d5:30:4e:1a:a3:
9b:a7:63:a7:68:cd:c8:32:94:94:cf:b6:37:b6:2a:42:e0:05:
b7:13:ce:3f:99:5c:a8:1b:b5:f2:f7:6d:52:7e:2c:83:78:9f:
0a:54:15:8f:c6:14:33:e2:c8:ba:7c:b6:1c:a2:0e:5e:e4:46:
ba:d5:fd:fc:28:34:34:aa:af:c4:ca:01:fb:4b:e5:dc:64:00:
77:85:83:84:f9:5f:48:35:19:ac:f3:10:e7:c9:2f:b0:8a:b7:
ab:8c:e7:6b:8a:c6:1d:59:0f:34:d8:58:2b:5a:2c:b6:0b:1c:
03:9d:d8:ab:7e:34:54:d4:67:19:c8:a8:0d:d4:22:f6:35:95:
3b:4b:fb:20:e3:f2:f1:9e:61:eb:77:8a:64:ba:dd:53:25:14:
49:7a:49:b2:7c:3b:9c:48:49:89:f1:e1:69:1f:49:42:d1:48:
5c:0c:f8:4e:9c:b9:d0:8a:f5:c9:1d:22:41:ae:b5:28:0f:9f:
8d:73:05:b6:ea:6b:63:76:86:9a:ff:aa:c8:33:f3:18:13:14:
41:5b:b5:eb:c1:30:68:9f:b6:1d:69:8a:2d:fc:d7:65:8e:05:
96:67:bb:1a:33:3e:af:57:f6:79:3e:7f:4f:f0:20:88:21:03:
17:f4:80:ca
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWYiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzIxMTQ1MzAxWhcNMjYwNzI1MTQ1MzAxWjAYMRYw
FAYDVQQDEw02ODdlNTQ1Mi03MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyL4D+bH1/x/hQH7hYy+tTuVUeOUOtPz6ugwWF1yshGWGjRlX4xp5v2eQ
Jen+gvpck2Wl98kcK619vtVIHK8m1LQjTkH9tiVxAWtPSc1DLkX++FnZTV76B9/8
c6UEoHW3Au+f7d0IDMVWzIEcHD2BjfS1CE5rbnbsnXHlKfN7BkB2HZE79r8LqIej
zddhWW/b2KCMmycJZMFQm5e/VAGmUoFSSnkPqReXA7I2IJgC443oK3hlqe6TOaFe
g2/eNMPxlK+oqsENT1jmxx897WmO3XimzRF8oA70X5NKtlUEbtvvq6o7GFZqxAel
PK7l8W8/LM45OvXmxc2htu7c1REdNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNxB
ToI8fr98h/fOWA/USLwh4BZvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82ODY3NDIzMDY2NDIxMUYwQjVDRjg5RTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcICMA0GCSqGSIb3DQEBCwUA
A4IBAQCgCJwV/gO8xbZ+zYNX1TBOGqObp2OnaM3IMpSUz7Y3tipC4AW3E84/mVyo
G7Xy921SfiyDeJ8KVBWPxhQz4si6fLYcog5e5Ea61f38KDQ0qq/EygH7S+XcZAB3
hYOE+V9INRms8xDnyS+wirerjOdrisYdWQ802FgrWiy2CxwDndirfjRU1GcZyKgN
1CL2NZU7S/sg4/LxnmHrd4pkut1TJRRJekmyfDucSEmJ8eFpH0lC0UhcDPhOnLnQ
ivXJHSJBrrUoD5+NcwW26mtjdoaa/6rIM/MYExRBW7XrwTBon7YdaYot/NdljgWW
Z7saMz6vV/Z5Pn9P8CCIIQMX9IDK
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:40 2025 by rpki-client