Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF15F666FBD11F08E2D16A8DAE4EC9C.roa
File: 7EF15F666FBD11F08E2D16A8DAE4EC9C.roa (raw, json)
Hash identifier: 7BIBvzgzG645+uSHv5hpPGls3I1ETf/qXyzdoc1svhE=
Subject key identifier: 92:9D:A0:15:A4:CD:7C:53:A1:F9:D9:C1:93:AC:BD:C6:05:04:D0:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF15F666FBD11F08E2D16A8DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 16:26:52 +0000
ROA not before: Sat 02 Aug 2025 16:26:44 +0000
ROA not after: Sat 23 Aug 2025 16:26:44 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92340 (0x168b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 16:26:44 2025 GMT
Not After : Aug 23 16:26:44 2025 GMT
Subject: CN=688e3c4c-ce96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:e0:eb:a3:db:8f:56:f5:4b:36:ac:d6:46:
0d:49:cb:73:ed:9b:6b:95:bf:6b:6a:6b:29:f4:58:
9f:a4:bf:69:06:03:bf:bd:73:b7:86:04:1b:10:cc:
10:c5:73:48:d7:f0:cf:6b:63:74:13:bf:84:4a:09:
43:81:79:b8:d7:6b:c8:bf:5a:68:96:bb:74:ff:b9:
45:6f:6e:66:23:d7:bb:cd:a3:53:2f:90:45:e7:42:
0a:cc:6a:e1:76:ef:d3:26:2d:ac:40:06:ec:8e:c9:
0e:d0:af:57:7f:1c:5f:94:ea:cf:32:39:1d:4c:d8:
ea:b5:7a:a8:cd:16:8c:4c:dd:8a:f1:3c:e9:4e:f8:
88:b3:0f:23:46:26:f9:c8:4c:36:e2:96:da:ef:78:
e1:60:5e:c5:a1:36:cc:aa:56:39:62:a8:2a:d3:33:
e5:68:df:34:44:81:0c:55:f1:e4:db:18:fc:37:00:
5b:00:bd:83:7c:3b:49:81:ba:18:09:b9:8e:66:e2:
d6:bf:72:54:2b:4d:02:e0:f5:73:b6:4f:c5:dc:7c:
aa:7c:2f:a3:f4:88:90:5d:47:b9:7d:3a:38:78:92:
ab:5f:5d:99:37:07:c6:a7:5d:02:1f:e9:96:88:f9:
3f:49:10:e3:15:b8:5e:7b:36:2d:01:61:ef:5d:a9:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9D:A0:15:A4:CD:7C:53:A1:F9:D9:C1:93:AC:BD:C6:05:04:D0:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF15F666FBD11F08E2D16A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:a8:e9:c3:55:ff:d2:1e:e6:5e:1c:68:6e:0e:5c:d3:39:71:
6f:8e:77:2f:b1:1b:b1:ba:e8:87:54:b4:41:2d:3c:2c:20:28:
79:a4:df:cb:98:c5:93:6c:00:54:1f:74:5a:50:b6:53:30:3a:
aa:2f:c2:7d:25:4d:a3:d9:cc:06:d3:96:bd:2f:e7:83:83:7a:
88:5d:ee:6c:86:33:82:92:23:6d:2c:91:69:3e:b6:99:31:d7:
55:11:ba:c3:ab:69:4c:d2:19:c6:7c:c3:14:d8:87:46:35:8b:
0d:4f:27:16:40:54:39:49:53:43:cb:89:e0:e9:2b:ba:72:6c:
47:34:f5:79:da:86:01:c8:70:5c:3a:d3:eb:6b:2c:ff:8f:06:
50:2c:3e:22:9f:94:14:5b:1a:4c:64:77:9d:26:a1:56:ef:72:
00:19:aa:84:32:7e:43:0f:3e:b2:54:c6:18:93:77:be:1c:2f:
2c:ee:b6:5c:e4:e4:27:9c:79:80:c0:fa:9f:53:8d:ee:21:f4:
19:4e:93:e0:c3:06:6a:5e:20:2f:2f:7a:4f:c0:36:ab:5a:fb:
c6:30:33:8b:03:dc:01:b5:ad:85:a4:be:ce:f2:be:10:b3:fe:
fc:7e:be:42:c0:6d:61:73:0b:8d:a8:68:24:09:fa:a7:ec:3d:
4e:e0:d3:43
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWi0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODAyMTYyNjQ0WhcNMjUwODIzMTYyNjQ0WjAYMRYw
FAYDVQQDEw02ODhlM2M0Yy1jZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl+vg66Pbj1b1Szas1kYNSctz7Ztrlb9ramsp9FifpL9pBgO/vXO3hgQb
EMwQxXNI1/DPa2N0E7+ESglDgXm412vIv1polrt0/7lFb25mI9e7zaNTL5BF50IK
zGrhdu/TJi2sQAbsjskO0K9XfxxflOrPMjkdTNjqtXqozRaMTN2K8TzpTviIsw8j
Rib5yEw24pba73jhYF7FoTbMqlY5Yqgq0zPlaN80RIEMVfHk2xj8NwBbAL2DfDtJ
gboYCbmOZuLWv3JUK00C4PVztk/F3HyqfC+j9IiQXUe5fTo4eJKrX12ZNwfGp10C
H+mWiPk/SRDjFbheezYtAWHvXalYywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJKd
oBWkzXxTofnZwZOsvcYFBNCWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RUYxNUY2NjZGQkQxMUYwOEUyRDE2QThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcPwMA0GCSqGSIb3DQEBCwUA
A4IBAQCzqOnDVf/SHuZeHGhuDlzTOXFvjncvsRuxuuiHVLRBLTwsICh5pN/LmMWT
bABUH3RaULZTMDqqL8J9JU2j2cwG05a9L+eDg3qIXe5shjOCkiNtLJFpPraZMddV
EbrDq2lM0hnGfMMU2IdGNYsNTycWQFQ5SVNDy4ng6Su6cmxHNPV52oYByHBcOtPr
ayz/jwZQLD4in5QUWxpMZHedJqFW73IAGaqEMn5DDz6yVMYYk3e+HC8s7rZc5OQn
nHmAwPqfU43uIfQZTpPgwwZqXiAvL3pPwDarWvvGMDOLA9wBta2FpL7O8r4Qs/78
fr5CwG1hcwuNqGgkCfqn7D1O4NND
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:13 2025 by rpki-client