Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18D536D062F711F0AB67CC7BDAE4EC9C.roa
File: 18D536D062F711F0AB67CC7BDAE4EC9C.roa (raw, json)
Hash identifier: 4ADi+ggbTKSeflaF7dou0ovbzUR3t0dSSxZlCS6+4dQ=
Subject key identifier: 2A:84:D1:32:BB:FF:12:72:62:B4:6E:EC:23:15:17:31:92:06:9E:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18D536D062F711F0AB67CC7BDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 10:16:26 +0000
ROA not before: Thu 17 Jul 2025 10:16:22 +0000
ROA not after: Sat 23 Aug 2025 10:16:22 +0000
asID: 274089
IP address blocks: 45.195.15.0/24 maxlen: 24
45.195.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91614 (0x165de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 10:16:22 2025 GMT
Not After : Aug 23 10:16:22 2025 GMT
Subject: CN=6878cd7a-daf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:50:f8:d3:71:5b:d4:6b:84:15:6a:e2:e5:
3a:de:34:20:f2:0c:b3:52:89:b4:bf:a4:56:7f:94:
0f:37:ef:51:59:68:50:a1:a1:6c:30:7f:7b:42:af:
5e:b2:eb:a0:30:51:f0:60:ac:19:99:ab:16:d9:8f:
a4:4d:d5:35:a4:19:69:dd:48:f1:ce:e3:b4:fe:2d:
75:93:b7:1a:ea:7f:97:a5:87:54:4e:98:e2:29:10:
a7:37:17:d8:83:53:21:ae:39:2b:c2:52:0b:5b:c6:
f4:27:4b:48:8b:7e:30:10:d8:d5:fd:20:bd:3f:76:
a9:8c:21:67:ef:09:e8:bb:1e:25:9a:67:a9:17:33:
fa:ce:6c:92:73:f8:49:2a:2b:36:8f:59:8f:cf:d3:
f1:8c:d9:76:a4:ef:4e:08:99:bf:94:bc:87:8c:1b:
24:08:7f:86:9a:5a:16:2a:68:a7:e0:d4:8e:4f:6b:
35:1b:e5:45:35:e7:80:3e:84:12:ff:15:56:38:f2:
92:21:9f:5a:a4:f4:4c:b9:bd:bc:f9:75:4d:8e:d1:
8b:67:cc:a7:7f:1c:17:cd:05:53:fc:f1:c9:fc:ae:
96:a1:1c:14:79:3b:25:73:dd:1a:0b:f5:5c:42:b0:
f5:5c:24:9b:ec:c4:c2:44:5e:58:a4:86:56:d3:21:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:84:D1:32:BB:FF:12:72:62:B4:6E:EC:23:15:17:31:92:06:9E:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18D536D062F711F0AB67CC7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
45.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
80:91:8f:d3:d2:2a:56:e1:42:db:46:a4:bc:17:40:f8:3e:87:
56:4a:6a:bb:71:df:a4:63:d9:17:45:74:63:e8:29:0c:36:57:
5e:3b:6f:f1:c2:5f:f2:94:ec:41:46:7c:65:84:24:84:42:25:
e7:da:ac:1e:14:0b:af:52:b9:dc:71:d2:21:b0:ad:c8:e2:b5:
99:dd:d1:e2:15:ff:b2:a3:b7:24:0a:f3:a3:3c:e2:cf:6b:aa:
ef:77:58:f3:d0:2a:80:e6:26:1c:ba:86:9a:30:b7:dc:5b:93:
2c:7d:c4:d3:60:97:21:a1:5f:0c:29:dc:4d:29:82:7c:43:d5:
d5:91:c0:ab:e7:5f:46:cc:9a:20:bc:22:cc:ba:57:55:f3:c8:
5f:5b:3b:1b:c4:e3:85:ac:82:dd:d8:7c:72:bd:55:30:cc:06:
3c:e0:b0:f9:89:9f:f1:20:7e:f6:86:04:e3:14:d5:d8:37:ce:
4f:5d:6a:b4:a4:f8:8d:a2:2d:85:82:37:7f:e9:13:c3:b4:ea:
be:69:a1:19:d7:4a:e9:c9:9b:86:cd:d4:92:38:1c:21:0b:9e:
76:e4:f5:fc:c8:da:35:5d:0f:b7:50:73:7b:62:c5:81:f0:d9:
c1:6c:5f:05:31:13:11:ba:15:04:d8:c5:fd:22:64:3f:8c:06:
37:3f:33:c0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAWXeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE3MTAxNjIyWhcNMjUwODIzMTAxNjIyWjAYMRYw
FAYDVQQDEw02ODc4Y2Q3YS1kYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoLVQ+NNxW9RrhBVq4uU63jQg8gyzUom0v6RWf5QPN+9RWWhQoaFsMH97
Qq9esuugMFHwYKwZmasW2Y+kTdU1pBlp3UjxzuO0/i11k7ca6n+XpYdUTpjiKRCn
NxfYg1MhrjkrwlILW8b0J0tIi34wENjV/SC9P3apjCFn7wnoux4lmmepFzP6zmyS
c/hJKis2j1mPz9PxjNl2pO9OCJm/lLyHjBskCH+GmloWKmin4NSOT2s1G+VFNeeA
PoQS/xVWOPKSIZ9apPRMub28+XVNjtGLZ8ynfxwXzQVT/PHJ/K6WoRwUeTslc90a
C/VcQrD1XCSb7MTCRF5YpIZW0yE76wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqE
0TK7/xJyYrRu7CMVFzGSBp7RMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOEQ1MzZEMDYyRjcxMUYwQUI2N0NDN0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcMPAwQALcNuMA0GCSqGSIb3
DQEBCwUAA4IBAQCAkY/T0ipW4ULbRqS8F0D4PodWSmq7cd+kY9kXRXRj6CkMNlde
O2/xwl/ylOxBRnxlhCSEQiXn2qweFAuvUrnccdIhsK3I4rWZ3dHiFf+yo7ckCvOj
POLPa6rvd1jz0CqA5iYcuoaaMLfcW5MsfcTTYJchoV8MKdxNKYJ8Q9XVkcCr519G
zJogvCLMuldV88hfWzsbxOOFrILd2HxyvVUwzAY84LD5iZ/xIH72hgTjFNXYN85P
XWq0pPiNoi2Fgjd/6RPDtOq+aaEZ10rpyZuGzdSSOBwhC5525PX8yNo1XQ+3UHN7
YsWB8NnBbF8FMRMRuhUE2MX9ImQ/jAY3PzPA
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:29:00 2025 by rpki-client