Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8718FE14B00F11F0A64BFE7BDAE4EC9C.roa
File: 8718FE14B00F11F0A64BFE7BDAE4EC9C.roa (raw, json)
Hash identifier: ILDGq74PhtKtMLqMNNVr9OAjb9Nyy4Vj1Y1T0v/rX7c=
Subject key identifier: E3:E1:A0:26:82:E8:A2:98:18:00:51:65:56:36:B0:C2:2D:D8:16:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018264
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8718FE14B00F11F0A64BFE7BDAE4EC9C.roa
Signing time: Thu 23 Oct 2025 12:55:19 +0000
ROA not before: Thu 23 Oct 2025 12:55:14 +0000
ROA not after: Fri 28 Nov 2025 12:55:14 +0000
asID: 44559
IP address blocks: 45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98916 (0x18264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 12:55:14 2025 GMT
Not After : Nov 28 12:55:14 2025 GMT
Subject: CN=68fa25b7-ed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:37:18:4a:1c:df:23:2b:ea:08:48:6b:99:
0e:c6:77:41:32:f6:bb:5a:ff:83:79:4c:b7:10:07:
ae:69:19:8d:0b:6f:87:54:c7:be:e6:d6:68:cd:ed:
44:a6:fd:2f:3b:c8:32:f6:38:e7:c6:ed:87:d7:08:
e1:5d:e2:72:dc:2f:54:84:b8:7e:0e:1b:38:7e:fb:
c4:79:a4:05:46:7e:c6:e1:32:7c:3b:55:c0:93:a6:
e5:ce:13:4d:9b:38:e2:82:fd:62:e2:c3:4f:1d:b5:
69:b4:8a:c1:d0:79:9f:8e:b0:74:ff:dd:56:cb:dc:
3f:87:1c:81:80:e6:70:59:6b:27:9b:7d:c9:9b:f0:
43:c7:7f:70:9a:3f:cb:eb:e4:c4:85:f0:3a:12:a6:
a6:37:44:a4:bf:9f:b4:fe:ab:47:67:b3:91:d7:b8:
c3:57:e5:64:84:43:bd:5d:47:7f:68:39:69:39:21:
af:d0:8f:ef:99:3a:72:2a:ff:23:90:13:04:de:95:
17:a8:b5:4b:b4:53:60:64:4a:e8:dc:5f:26:63:45:
e7:1c:2a:bd:4d:a3:9a:1e:3e:1f:77:ea:cf:02:16:
2e:68:e9:ae:be:69:db:68:67:3d:9d:52:50:fb:d9:
c8:b9:7a:63:09:a9:63:13:25:f8:76:23:22:d3:be:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:A0:26:82:E8:A2:98:18:00:51:65:56:36:B0:C2:2D:D8:16:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8718FE14B00F11F0A64BFE7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.231.0-45.199.240.255
Signature Algorithm: sha256WithRSAEncryption
8e:73:e3:e1:77:8c:68:30:fb:2d:ad:20:e5:68:d1:c1:a1:7c:
cc:1f:cb:c0:4d:78:53:b9:e5:9b:ca:ad:d0:31:7a:09:18:91:
81:97:90:d4:c7:57:12:30:02:a8:7c:b1:02:33:5e:8e:ce:a2:
33:03:70:2a:1e:f0:23:2f:c2:3e:bd:e8:81:5d:51:66:0e:e5:
44:d4:45:d2:75:08:5b:48:91:4d:ac:36:c6:f9:3c:a6:67:09:
12:a8:ab:d2:4c:3d:0f:f8:b9:33:de:84:c2:1b:c2:cc:b0:f4:
ce:e2:ae:5c:6a:83:e1:6f:f1:fa:b7:e2:87:7b:43:0e:99:63:
a2:3f:51:2c:74:b1:88:26:7e:93:0c:9a:e2:86:00:8a:2a:6a:
68:f3:34:73:f0:ab:8e:1d:08:58:3d:cf:9a:29:39:47:82:41:
59:32:3c:6c:01:3c:fa:ff:14:44:b3:ed:64:38:9f:ee:26:00:
44:04:e1:75:98:d6:1c:f4:4e:db:bc:d4:65:47:3a:5a:30:74:
a4:a9:e2:b9:0f:1e:24:ed:0f:60:fc:57:eb:09:a8:90:a2:e0:
c1:e7:4c:f1:7e:d9:11:eb:93:b5:0e:a6:be:e4:a5:6f:b0:ed:
ef:21:ee:88:7c:e0:94:54:ab:3c:4c:b7:77:01:2d:72:60:a6:
ed:8a:36:ed
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAYJkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDIzMTI1NTE0WhcNMjUxMTI4MTI1NTE0WjAYMRYw
FAYDVQQDEw02OGZhMjViNy1lZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyhg3GEoc3yMr6ghIa5kOxndBMva7Wv+DeUy3EAeuaRmNC2+HVMe+5tZo
ze1Epv0vO8gy9jjnxu2H1wjhXeJy3C9UhLh+Dhs4fvvEeaQFRn7G4TJ8O1XAk6bl
zhNNmzjigv1i4sNPHbVptIrB0HmfjrB0/91Wy9w/hxyBgOZwWWsnm33Jm/BDx39w
mj/L6+TEhfA6EqamN0Skv5+0/qtHZ7OR17jDV+VkhEO9XUd/aDlpOSGv0I/vmTpy
Kv8jkBME3pUXqLVLtFNgZEro3F8mY0XnHCq9TaOaHj4fd+rPAhYuaOmuvmnbaGc9
nVJQ+9nIuXpjCaljEyX4diMi075I0wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOPh
oCaC6KKYGABRZVY2sMIt2BZrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NzE4RkUxNEIwMEYxMUYwQTY0QkZFN0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtx+cDBAAtx/AwDQYJKoZI
hvcNAQELBQADggEBAI5z4+F3jGgw+y2tIOVo0cGhfMwfy8BNeFO55ZvKrdAxegkY
kYGXkNTHVxIwAqh8sQIzXo7OojMDcCoe8CMvwj696IFdUWYO5UTURdJ1CFtIkU2s
Nsb5PKZnCRKoq9JMPQ/4uTPehMIbwsyw9M7irlxqg+Fv8fq34od7Qw6ZY6I/USx0
sYgmfpMMmuKGAIoqamjzNHPwq44dCFg9z5opOUeCQVkyPGwBPPr/FESz7WQ4n+4m
AEQE4XWY1hz0Ttu81GVHOlowdKSp4rkPHiTtD2D8V+sJqJCi4MHnTPF+2RHrk7UO
pr7kpW+w7e8h7oh84JRUqzxMt3cBLXJgpu2KNu0=
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:03 2025 by rpki-client