Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0287A2F685F611F0BA69EB9DDAE4EC9C.roa
File: 0287A2F685F611F0BA69EB9DDAE4EC9C.roa (raw, json)
Hash identifier: Ddv15kblwcwxp1q3qEWBC6x1jNbHyV9uU0SXLK+nz90=
Subject key identifier: 2A:6C:DF:91:BC:5C:9E:B5:35:2C:31:56:5D:57:23:96:B9:0E:03:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01744A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0287A2F685F611F0BA69EB9DDAE4EC9C.roa
Signing time: Sat 30 Aug 2025 23:06:50 +0000
ROA not before: Sun 31 Aug 2025 23:06:45 +0000
ROA not after: Sun 07 Sep 2025 23:06:45 +0000
asID: 54801
IP address blocks: 45.200.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95306 (0x1744a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 23:06:45 2025 GMT
Not After : Sep 7 23:06:45 2025 GMT
Subject: CN=68b3840a-6fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:97:8a:ec:64:07:27:b6:ce:a5:4c:a9:58:
46:68:74:64:7c:7e:a2:62:d0:f8:d2:c2:27:69:b6:
ec:49:fa:ee:ac:dd:85:ef:1f:d0:49:1d:60:24:ba:
02:46:a2:8a:62:9b:c7:bd:42:63:0c:80:2a:c7:89:
ab:16:46:e8:50:a2:48:e1:cc:f4:24:6d:21:a9:0f:
fd:37:12:ab:4a:54:b4:dc:b5:90:d5:3c:02:79:5b:
ff:10:be:11:96:08:3b:04:e2:64:4f:2d:a4:29:9f:
5c:0a:42:e8:44:44:04:af:b3:fb:98:01:f9:be:dd:
3d:6c:2f:70:21:c6:42:9a:d7:90:ac:fa:dc:31:2d:
6f:4e:e0:c1:df:ce:d4:24:2a:7f:23:5e:ad:8b:4d:
af:81:e4:8f:c9:e3:22:4c:c7:86:3a:f6:d1:0e:c0:
65:37:14:f0:58:89:7c:3b:d6:9a:a9:1f:19:be:fa:
b1:82:7c:e6:ba:a9:be:7c:a9:6b:c2:4b:dd:13:a5:
7c:e2:ba:30:91:30:11:e5:14:f8:86:d4:e5:b0:29:
b4:8b:25:a9:02:9f:9d:35:98:28:ec:94:69:f1:f9:
6c:75:9a:25:20:03:15:33:eb:71:cc:15:08:9d:b8:
2c:9d:b7:cb:1b:ee:3d:6b:62:ee:1f:9e:5c:ad:7d:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:DF:91:BC:5C:9E:B5:35:2C:31:56:5D:57:23:96:B9:0E:03:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0287A2F685F611F0BA69EB9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.20.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:c2:65:91:84:55:11:0b:5a:41:0c:89:79:89:52:cb:66:03:
14:a7:34:4f:79:09:1c:66:f0:10:95:3e:e4:2c:b2:86:ad:99:
e5:ba:73:c4:4b:14:71:f7:62:35:28:7a:73:43:15:7f:0d:59:
b9:0f:56:f4:ce:3d:54:2b:a2:88:b3:94:7e:b8:26:4c:b0:44:
2c:db:0a:59:db:a4:8c:05:0b:1f:61:a5:26:0b:35:f8:42:72:
6a:df:44:49:07:d6:83:01:79:24:e9:69:e4:4f:c7:97:94:98:
20:32:d9:88:1f:a7:7d:62:3b:76:ae:3f:15:99:e5:02:51:c5:
d8:51:d7:55:cc:45:76:c4:b9:90:78:72:ec:c0:fd:7a:64:80:
3c:9d:c2:92:f1:1a:fb:03:af:c6:61:62:56:b0:e1:f3:ac:94:
19:88:4c:53:cc:a2:66:18:7a:33:aa:73:c6:96:43:61:d8:88:
dd:d0:7d:2a:9d:88:58:32:db:a4:19:30:04:3d:d1:88:83:23:
57:6d:76:53:4e:47:ed:79:35:f7:e6:2e:e6:54:e6:8f:5d:a7:
35:96:b3:3b:c4:db:0d:cf:69:44:dc:f5:3a:e3:e1:6b:d1:67:
b0:0c:56:69:8b:1b:c9:3b:a8:5a:e9:b0:de:ff:78:3b:0d:77:
00:76:2b:cd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXRKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODMxMjMwNjQ1WhcNMjUwOTA3MjMwNjQ1WjAYMRYw
FAYDVQQDEw02OGIzODQwYS02ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAulGXiuxkBye2zqVMqVhGaHRkfH6iYtD40sInabbsSfrurN2F7x/QSR1g
JLoCRqKKYpvHvUJjDIAqx4mrFkboUKJI4cz0JG0hqQ/9NxKrSlS03LWQ1TwCeVv/
EL4Rlgg7BOJkTy2kKZ9cCkLoREQEr7P7mAH5vt09bC9wIcZCmteQrPrcMS1vTuDB
387UJCp/I16ti02vgeSPyeMiTMeGOvbRDsBlNxTwWIl8O9aaqR8Zvvqxgnzmuqm+
fKlrwkvdE6V84rowkTAR5RT4htTlsCm0iyWpAp+dNZgo7JRp8flsdZolIAMVM+tx
zBUInbgsnbfLG+49a2LuH55crX2rLQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCps
35G8XJ61NSwxVl1XI5a5DgPeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMjg3QTJGNjg1RjYxMUYwQkE2OUVCOUREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcgUMA0GCSqGSIb3DQEBCwUA
A4IBAQCrwmWRhFURC1pBDIl5iVLLZgMUpzRPeQkcZvAQlT7kLLKGrZnlunPESxRx
92I1KHpzQxV/DVm5D1b0zj1UK6KIs5R+uCZMsEQs2wpZ26SMBQsfYaUmCzX4QnJq
30RJB9aDAXkk6WnkT8eXlJggMtmIH6d9Yjt2rj8VmeUCUcXYUddVzEV2xLmQeHLs
wP16ZIA8ncKS8Rr7A6/GYWJWsOHzrJQZiExTzKJmGHozqnPGlkNh2Ijd0H0qnYhY
MtukGTAEPdGIgyNXbXZTTkfteTX35i7mVOaPXac1lrM7xNsNz2lE3PU64+Fr0Wew
DFZpixvJO6ha6bDe/3g7DXcAdivN
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:10 2025 by rpki-client