Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3306CB9E5A8D11F089A02AC5DAE4EC9C.roa
File: 3306CB9E5A8D11F089A02AC5DAE4EC9C.roa (raw, json)
Hash identifier: nqD8cJ9iRB7F9QoKUcqYCghKa75Ti7bbqBdV69AnBLw=
Subject key identifier: 6A:79:90:5B:27:21:53:D8:4D:5C:EB:17:7D:2C:31:09:46:15:2E:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016265
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3306CB9E5A8D11F089A02AC5DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 17:18:15 +0000
ROA not before: Sun 06 Jul 2025 17:18:09 +0000
ROA not after: Tue 12 Aug 2025 17:18:09 +0000
asID: 142032
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90725 (0x16265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 17:18:09 2025 GMT
Not After : Aug 12 17:18:09 2025 GMT
Subject: CN=686aafd7-d541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8a:2e:6d:d4:e5:18:73:1d:64:22:20:73:6a:
b0:eb:f5:af:07:e7:55:69:5d:73:14:2b:fc:fa:30:
1e:5a:93:71:e6:c2:77:b4:db:ac:12:62:bc:1f:e6:
3c:78:2e:c7:96:84:2a:4b:1e:76:b7:8f:43:69:1c:
c5:6e:96:39:0c:03:26:59:1d:c2:ce:5c:86:dc:46:
a1:2d:75:ad:33:4b:de:f7:0f:fb:3a:b1:b6:30:27:
82:81:38:9f:da:06:e6:dc:f2:28:fd:be:c7:45:c1:
13:ae:fc:c3:11:c2:50:ad:8a:6b:a9:7d:5e:91:7a:
23:ef:9a:c0:0e:32:c9:51:fd:ad:40:41:f4:9b:3f:
5c:51:2b:98:74:97:9e:c6:11:14:54:e8:23:81:b5:
cd:aa:56:f3:f8:7d:0f:c9:10:99:e6:ac:e4:ef:0e:
eb:4a:61:df:1e:ad:90:65:c9:24:ed:61:b8:fd:e3:
d9:bb:da:61:71:14:8c:02:90:e8:b1:62:cc:ac:7f:
ff:e2:42:70:6f:56:5b:7b:56:91:20:ec:c1:66:10:
71:ea:a5:53:6f:42:d3:31:37:06:df:07:15:c7:fa:
e2:0a:81:41:0a:69:e7:03:dd:2a:f6:a1:4c:8f:a1:
bc:1f:a3:42:13:1f:5b:98:ca:ab:0f:5e:d6:3e:f4:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:90:5B:27:21:53:D8:4D:5C:EB:17:7D:2C:31:09:46:15:2E:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3306CB9E5A8D11F089A02AC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
03:84:b9:45:1f:19:e2:a4:d3:38:07:2d:58:3f:95:a6:5b:0f:
0a:67:f2:90:f6:60:37:84:02:3f:6e:c5:b5:5e:95:a1:4a:93:
08:e2:5d:01:a5:9a:2d:98:13:1e:8b:c1:b5:60:fb:b0:29:2e:
a4:79:a5:c2:12:63:4f:ad:90:68:9f:59:66:f6:1b:21:6b:29:
54:79:15:46:6a:3f:95:4f:6a:fc:bb:05:4d:0c:21:61:90:da:
16:31:14:79:8a:20:f2:03:a1:77:d7:f5:fa:08:95:89:e6:1f:
07:3f:e8:0b:bc:38:0b:b2:9a:90:b0:05:9f:df:06:01:75:59:
24:e2:8c:72:31:85:86:50:15:d0:34:f4:0f:4b:8d:d7:42:34:
89:3e:02:42:43:2f:73:ed:36:25:ee:ec:fb:0f:e0:17:67:a8:
9d:ea:e4:49:36:f7:86:ab:a0:bc:f4:11:a1:a8:b9:49:b3:25:
34:71:69:ad:b4:36:bf:65:4b:bb:83:d9:69:de:a6:8a:c1:ec:
08:90:d7:c9:f4:65:71:e6:a2:f6:ea:c9:9a:dc:1d:ca:12:2a:
43:3a:0a:63:80:ed:37:68:e6:43:e5:34:10:82:9a:33:08:b0:
e8:81:fa:eb:bc:76:4d:f4:b1:8f:84:9c:44:83:fc:8a:dd:8b:
47:5d:ad:c4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWJlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzA2MTcxODA5WhcNMjUwODEyMTcxODA5WjAYMRYw
FAYDVQQDEw02ODZhYWZkNy1kNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8ooubdTlGHMdZCIgc2qw6/WvB+dVaV1zFCv8+jAeWpNx5sJ3tNusEmK8
H+Y8eC7HloQqSx52t49DaRzFbpY5DAMmWR3CzlyG3EahLXWtM0ve9w/7OrG2MCeC
gTif2gbm3PIo/b7HRcETrvzDEcJQrYprqX1ekXoj75rADjLJUf2tQEH0mz9cUSuY
dJeexhEUVOgjgbXNqlbz+H0PyRCZ5qzk7w7rSmHfHq2QZckk7WG4/ePZu9phcRSM
ApDosWLMrH//4kJwb1Zbe1aRIOzBZhBx6qVTb0LTMTcG3wcVx/riCoFBCmnnA90q
9qFMj6G8H6NCEx9bmMqrD17WPvQ/IwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGp5
kFsnIVPYTVzrF30sMQlGFS5ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzA2Q0I5RTVBOEQxMUYwODlBMDJBQzVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQADhLlFHxnipNM4By1YP5WmWw8KZ/KQ9mA3hAI/bsW1XpWhSpMI4l0BpZot
mBMei8G1YPuwKS6keaXCEmNPrZBon1lm9hshaylUeRVGaj+VT2r8uwVNDCFhkNoW
MRR5iiDyA6F31/X6CJWJ5h8HP+gLvDgLspqQsAWf3wYBdVkk4oxyMYWGUBXQNPQP
S43XQjSJPgJCQy9z7TYl7uz7D+AXZ6id6uRJNveGq6C89BGhqLlJsyU0cWmttDa/
ZUu7g9lp3qaKwewIkNfJ9GVx5qL26sma3B3KEipDOgpjgO03aOZD5TQQgpozCLDo
gfrrvHZN9LGPhJxEg/yK3YtHXa3E
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:29:35 2025 by rpki-client