Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/069FFF4CA4F411F08A7279D4DAE4EC9C.roa
File: 069FFF4CA4F411F08A7279D4DAE4EC9C.roa (raw, json)
Hash identifier: b68svQea+mj38WFRiwuDQNWUK0XnH0ccB//ozaKvlgY=
Subject key identifier: B2:9C:8F:E0:FC:E5:DB:9A:22:04:32:63:EF:E1:DA:3D:2C:2C:57:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/069FFF4CA4F411F08A7279D4DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 09:40:44 +0000
ROA not before: Thu 09 Oct 2025 09:40:39 +0000
ROA not after: Sun 16 Nov 2025 09:40:39 +0000
asID: 22773
IP address blocks: 45.202.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98223 (0x17faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 09:40:39 2025 GMT
Not After : Nov 16 09:40:39 2025 GMT
Subject: CN=68e7831c-56dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:1b:a9:2f:de:1d:20:07:8b:82:e1:0b:29:
03:55:46:6a:15:28:83:17:35:3a:fa:46:4b:31:0b:
5b:8e:17:c0:d2:99:1c:81:a3:b5:38:b0:82:dc:c9:
26:26:e4:8b:23:0a:25:d4:48:d0:0e:ae:0a:d6:10:
f3:54:fc:14:f2:2d:fa:19:b6:79:53:02:82:8c:8f:
24:62:1c:1b:d5:66:2c:54:69:69:3b:87:f3:a1:2e:
7c:91:1e:c7:3b:e8:9f:f6:35:09:5d:d0:21:39:c8:
ab:93:20:cf:07:4d:af:ab:ed:9c:7c:eb:72:5d:7c:
4f:17:57:00:cb:76:4e:8e:ef:9f:85:7d:cf:ff:7f:
9e:54:ee:24:4d:df:75:fa:69:79:07:68:5c:e2:85:
01:77:03:f7:70:02:ad:e8:6e:5e:bb:22:00:0d:5b:
20:0e:75:ca:8c:ef:95:71:8f:9b:3a:d7:e5:4e:00:
66:e4:f1:6d:c4:86:4f:5f:8f:61:9c:ee:b6:49:c8:
b0:aa:4a:75:3a:9b:5d:e5:30:ab:2c:fe:10:2a:01:
14:87:1c:f7:d9:27:bb:c2:d0:e0:0f:1e:d3:cb:76:
8f:c1:2c:18:bd:0a:d1:17:60:91:66:12:9c:b5:b9:
28:b4:6c:cd:94:3b:83:cb:0d:5a:62:58:49:db:dd:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:8F:E0:FC:E5:DB:9A:22:04:32:63:EF:E1:DA:3D:2C:2C:57:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/069FFF4CA4F411F08A7279D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.106.0/24
Signature Algorithm: sha256WithRSAEncryption
63:39:46:30:5c:fe:5d:6e:63:b6:73:5d:1c:64:e2:14:e5:75:
c0:c7:c4:5e:44:26:bd:67:47:84:22:2c:87:f5:df:9b:2b:b7:
1d:8a:03:4a:8a:75:23:42:11:49:8d:0b:01:09:8a:6a:b7:de:
54:7c:1d:5d:f3:15:2d:80:7a:ed:4a:f9:72:0c:61:79:77:b9:
7a:81:58:92:9f:4d:83:6c:e8:58:6c:43:d8:48:bb:10:fe:4d:
02:55:1d:e2:1c:40:dc:d2:a7:74:3c:60:a2:50:09:29:22:2b:
91:fe:ca:36:fe:f4:bf:fe:69:4e:d2:1a:2c:c5:2e:fd:da:be:
b9:12:4d:58:a7:ec:d1:91:d0:e9:65:b6:c3:dc:3f:d0:bf:7a:
73:75:89:0e:27:f8:22:ca:5a:9f:05:e9:1a:15:db:cb:66:69:
b0:ea:b5:aa:9c:1e:17:00:c1:c5:53:30:f6:a2:f6:dc:ad:0d:
16:1a:73:ef:0e:38:66:67:cb:82:60:d1:b6:13:e6:73:1e:e7:
4e:b3:84:81:16:cd:03:c1:bf:79:f7:de:36:c4:a7:de:df:21:
61:e7:34:a7:8b:8c:fb:f6:06:cc:06:f2:f8:c0:e2:c3:ff:31:
ef:7b:14:11:72:33:9a:f9:7f:70:4e:6d:af:67:7d:91:69:19:
fe:2e:60:9c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX+vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDA5MDk0MDM5WhcNMjUxMTE2MDk0MDM5WjAYMRYw
FAYDVQQDEw02OGU3ODMxYy01NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxqQbqS/eHSAHi4LhCykDVUZqFSiDFzU6+kZLMQtbjhfA0pkcgaO1OLCC
3MkmJuSLIwol1EjQDq4K1hDzVPwU8i36GbZ5UwKCjI8kYhwb1WYsVGlpO4fzoS58
kR7HO+if9jUJXdAhOcirkyDPB02vq+2cfOtyXXxPF1cAy3ZOju+fhX3P/3+eVO4k
Td91+ml5B2hc4oUBdwP3cAKt6G5euyIADVsgDnXKjO+VcY+bOtflTgBm5PFtxIZP
X49hnO62Sciwqkp1Optd5TCrLP4QKgEUhxz32Se7wtDgDx7Ty3aPwSwYvQrRF2CR
ZhKctbkotGzNlDuDyw1aYlhJ2915BwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLKc
j+D85duaIgQyY+/h2j0sLFfEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjlGRkY0Q0E0RjQxMUYwOEE3Mjc5RDREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpqMA0GCSqGSIb3DQEBCwUA
A4IBAQBjOUYwXP5dbmO2c10cZOIU5XXAx8ReRCa9Z0eEIiyH9d+bK7cdigNKinUj
QhFJjQsBCYpqt95UfB1d8xUtgHrtSvlyDGF5d7l6gViSn02DbOhYbEPYSLsQ/k0C
VR3iHEDc0qd0PGCiUAkpIiuR/so2/vS//mlO0hosxS792r65Ek1Yp+zRkdDpZbbD
3D/Qv3pzdYkOJ/giylqfBekaFdvLZmmw6rWqnB4XAMHFUzD2ovbcrQ0WGnPvDjhm
Z8uCYNG2E+ZzHudOs4SBFs0Dwb959942xKfe3yFh5zSni4z79gbMBvL4wOLD/zHv
exQRcjOa+X9wTm2vZ32RaRn+LmCc
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:02 2025 by rpki-client