Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7652796AB3DF11F08D5FFBECDAE4EC9C.roa
File: 7652796AB3DF11F08D5FFBECDAE4EC9C.roa (raw, json)
Hash identifier: bXYxYC8MmkY7F68wom22A4HqkNCAMvliRSuXs45yDPU=
Subject key identifier: AB:04:14:2F:CB:52:ED:78:E0:10:0D:61:E1:28:73:DF:65:C2:AB:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018365
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7652796AB3DF11F08D5FFBECDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 09:21:20 +0000
ROA not before: Tue 28 Oct 2025 09:21:15 +0000
ROA not after: Thu 04 Dec 2025 09:21:15 +0000
asID: 401615
IP address blocks: 45.196.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99173 (0x18365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:21:15 2025 GMT
Not After : Dec 4 09:21:15 2025 GMT
Subject: CN=69008b0f-8c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:e9:2b:cd:d0:5e:25:b7:f8:78:06:66:7d:
6c:54:75:64:02:a4:48:bd:67:00:d2:b7:05:4f:2c:
03:d5:68:cc:17:11:d5:b2:44:8e:51:2d:dd:70:73:
1d:2b:45:92:f7:81:72:67:8a:90:a6:02:f8:94:02:
f2:04:78:1c:31:3a:bf:16:70:9f:52:72:60:b4:1c:
ac:28:52:f5:74:2f:02:a0:4f:29:0f:9d:64:8c:c0:
3c:00:8a:8e:c2:d8:36:d5:88:57:a5:67:da:ec:a1:
c4:48:4c:96:2b:c9:ab:3f:9c:24:ec:ac:8d:2c:a7:
a3:6f:54:76:7b:77:d6:13:83:2f:3b:da:26:11:27:
e4:60:bb:83:fa:af:6b:c3:4f:74:0b:81:e4:d2:50:
72:f2:dd:7f:7d:51:a9:2f:52:95:3f:b9:58:2a:48:
8e:08:b1:b8:a8:26:59:fc:40:d1:cc:cd:28:07:5e:
c6:a0:6d:d0:21:08:fc:88:ab:4c:82:ef:04:5d:37:
d2:97:9e:47:d7:c8:eb:60:c4:a5:31:34:5e:e7:a2:
0b:ce:27:14:f6:27:ec:7e:f6:14:19:47:8d:4d:dd:
20:d6:f7:aa:37:c6:73:c8:12:3e:93:f2:1e:c9:32:
f1:96:1f:a1:33:30:93:3b:ed:76:10:4e:6e:e4:20:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:04:14:2F:CB:52:ED:78:E0:10:0D:61:E1:28:73:DF:65:C2:AB:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7652796AB3DF11F08D5FFBECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.218.0/23
Signature Algorithm: sha256WithRSAEncryption
41:30:b2:d9:e0:e5:d7:5c:03:57:1c:54:95:0d:ec:f5:c7:52:
2a:8e:10:25:62:b3:b6:b4:80:ec:67:eb:3a:29:88:09:31:a7:
16:6d:7a:f3:66:01:cc:aa:96:ad:9d:bf:f7:97:84:6d:d2:bf:
e5:11:04:0b:c0:4a:23:2f:45:4a:73:72:03:e8:7d:82:93:92:
65:e4:d6:a4:3c:2b:46:8b:b9:a4:24:76:fa:52:2f:52:68:d1:
b8:52:05:e1:10:59:25:07:e6:11:9f:76:62:27:bd:cd:b6:f4:
40:0b:ea:f2:6d:bc:33:d9:33:db:f7:0d:ad:6f:ab:b6:7c:12:
fc:ce:f5:e0:98:c4:fa:75:c3:26:04:90:38:e7:6e:20:e9:55:
c7:61:63:21:77:dc:ab:28:88:06:d6:97:aa:80:e2:b9:e8:19:
b1:8d:4a:a9:fb:34:d0:48:f2:3b:69:35:bc:56:dd:24:a7:80:
79:90:11:a3:e0:de:70:5a:0e:5f:18:de:39:97:9b:72:58:ad:
d4:7b:89:7c:a9:07:3d:4c:e0:78:52:0b:94:80:af:0b:da:61:
f8:ac:63:57:00:df:69:db:d4:0a:26:f8:48:78:ed:87:55:69:
d9:f9:ad:dc:d8:1d:a8:7c:c9:06:c8:04:16:35:89:5f:12:28:
3c:51:e7:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYNlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MDkyMTE1WhcNMjUxMjA0MDkyMTE1WjAYMRYw
FAYDVQQDEw02OTAwOGIwZi04YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm+TpK83QXiW3+HgGZn1sVHVkAqRIvWcA0rcFTywD1WjMFxHVskSOUS3d
cHMdK0WS94FyZ4qQpgL4lALyBHgcMTq/FnCfUnJgtBysKFL1dC8CoE8pD51kjMA8
AIqOwtg21YhXpWfa7KHESEyWK8mrP5wk7KyNLKejb1R2e3fWE4MvO9omESfkYLuD
+q9rw090C4Hk0lBy8t1/fVGpL1KVP7lYKkiOCLG4qCZZ/EDRzM0oB17GoG3QIQj8
iKtMgu8EXTfSl55H18jrYMSlMTRe56ILzicU9ifsfvYUGUeNTd0g1veqN8ZzyBI+
k/IeyTLxlh+hMzCTO+12EE5u5CBglQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKsE
FC/LUu144BANYeEoc99lwqumMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NjUyNzk2QUIzREYxMUYwOEQ1RkZCRUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTaMA0GCSqGSIb3DQEBCwUA
A4IBAQBBMLLZ4OXXXANXHFSVDez1x1IqjhAlYrO2tIDsZ+s6KYgJMacWbXrzZgHM
qpatnb/3l4Rt0r/lEQQLwEojL0VKc3ID6H2Ck5Jl5NakPCtGi7mkJHb6Ui9SaNG4
UgXhEFklB+YRn3ZiJ73NtvRAC+rybbwz2TPb9w2tb6u2fBL8zvXgmMT6dcMmBJA4
524g6VXHYWMhd9yrKIgG1peqgOK56BmxjUqp+zTQSPI7aTW8Vt0kp4B5kBGj4N5w
Wg5fGN45l5tyWK3Ue4l8qQc9TOB4UguUgK8L2mH4rGNXAN9p29QKJvhIeO2HVWnZ
+a3c2B2ofMkGyAQWNYlfEig8UecV
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:20 2025 by rpki-client