Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E5EA6E299F011F0AE79D3E8DAE4EC9C.roa
File: 1E5EA6E299F011F0AE79D3E8DAE4EC9C.roa (raw, json)
Hash identifier: pWKgiqD0xEGdsZD338NVNKq590YnIIf487OP1VN1N7A=
Subject key identifier: 0A:EC:68:3B:84:0A:FF:28:AB:9D:DD:A0:33:64:6C:14:86:AF:1C:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E5EA6E299F011F0AE79D3E8DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 09:15:03 +0000
ROA not before: Thu 25 Sep 2025 09:14:56 +0000
ROA not after: Mon 17 Nov 2025 09:14:56 +0000
asID: 154177
IP address blocks: 45.204.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97600 (0x17d40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 25 09:14:56 2025 GMT
Not After : Nov 17 09:14:56 2025 GMT
Subject: CN=68d50817-e234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:bd:4c:98:dd:e2:3e:78:be:1f:23:9b:50:
8d:3a:88:92:42:fc:22:02:72:80:3d:30:eb:33:c4:
66:1a:18:ee:47:2f:25:a9:4a:b2:04:2c:35:3a:a6:
e1:d3:b1:43:c7:12:86:69:bd:46:4d:15:61:29:85:
8f:27:0a:68:0c:4d:e1:82:ca:29:fb:98:64:0b:df:
f9:0a:96:e7:28:d5:d8:60:ad:f7:a3:8c:ef:29:ce:
e1:2b:c0:a5:51:b8:de:61:87:3c:b0:86:ad:2d:60:
5a:18:c1:29:47:45:f4:e7:5a:97:32:83:6b:b7:b2:
ce:3c:63:53:ca:5f:64:ee:37:14:03:50:cd:97:1a:
1a:1b:f3:37:40:10:85:30:3d:f9:a8:95:4f:c1:4c:
07:3b:56:e3:1f:79:46:5d:92:43:b8:ad:60:ca:05:
48:54:35:84:cf:b6:c7:23:90:0c:fa:7b:1a:52:9d:
f9:fc:8a:7d:96:7a:0e:f0:b2:f9:9b:9e:3b:76:31:
58:9b:d3:a3:7a:15:a1:b1:6a:14:b5:f1:f1:df:cf:
d9:2c:e1:e4:3e:10:17:8c:13:8f:7c:87:61:69:e8:
f2:81:ac:6d:ea:af:9f:d5:7b:ba:50:6b:e6:f4:b0:
76:1c:e1:30:47:92:a9:bc:e7:8f:48:d0:b3:8d:e8:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:68:3B:84:0A:FF:28:AB:9D:DD:A0:33:64:6C:14:86:AF:1C:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E5EA6E299F011F0AE79D3E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.72.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7b:98:77:eb:d8:72:74:0b:da:4f:e6:1d:15:62:60:c1:0a:
dd:81:12:d4:f9:4f:4b:20:6b:23:52:90:4e:9e:45:f3:f8:f4:
f3:00:83:8b:7e:9a:9e:1e:14:4a:ac:e7:63:c9:4e:09:d2:fc:
17:f5:ef:d9:6f:84:be:13:94:31:42:8b:83:87:d7:6e:e6:f1:
0d:8e:c4:cc:5d:29:71:82:84:78:f0:fb:83:a0:77:83:d5:66:
8d:be:bc:4f:f3:43:c7:81:50:9f:19:bd:cf:1a:6f:03:15:ba:
be:dd:bf:b9:0b:b4:ff:42:f9:12:4e:57:4a:9e:be:8b:05:b8:
97:14:68:18:a7:76:28:90:5d:0a:c8:7e:c3:4a:3e:07:85:a2:
c4:11:a5:be:c7:32:f3:85:21:7c:d9:8f:f6:4d:b5:71:79:8d:
08:8d:72:0e:f2:f8:82:1c:e9:a0:27:7f:0c:8f:c4:d6:f5:7d:
1e:89:80:39:fb:ed:7e:4a:2f:5f:a6:45:1b:e9:ff:d5:6d:f8:
a0:34:a6:f2:7b:97:a3:1a:11:22:27:50:41:e6:aa:6a:68:5b:
11:cc:47:4a:e6:b2:50:79:62:97:e3:65:bf:51:d9:04:e4:d1:
c6:32:83:93:bc:d3:7c:c5:37:75:0a:11:9b:68:33:5f:21:64:
88:ae:d1:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX1AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI1MDkxNDU2WhcNMjUxMTE3MDkxNDU2WjAYMRYw
FAYDVQQDEw02OGQ1MDgxNy1lMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA14O9TJjd4j54vh8jm1CNOoiSQvwiAnKAPTDrM8RmGhjuRy8lqUqyBCw1
Oqbh07FDxxKGab1GTRVhKYWPJwpoDE3hgsop+5hkC9/5CpbnKNXYYK33o4zvKc7h
K8ClUbjeYYc8sIatLWBaGMEpR0X051qXMoNrt7LOPGNTyl9k7jcUA1DNlxoaG/M3
QBCFMD35qJVPwUwHO1bjH3lGXZJDuK1gygVIVDWEz7bHI5AM+nsaUp35/Ip9lnoO
8LL5m547djFYm9OjehWhsWoUtfHx38/ZLOHkPhAXjBOPfIdhaejygaxt6q+f1Xu6
UGvm9LB2HOEwR5KpvOePSNCzjeghUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFArs
aDuECv8oq53doDNkbBSGrxwaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRTVFQTZFMjk5RjAxMUYwQUU3OUQzRThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxIMA0GCSqGSIb3DQEBCwUA
A4IBAQBCe5h369hydAvaT+YdFWJgwQrdgRLU+U9LIGsjUpBOnkXz+PTzAIOLfpqe
HhRKrOdjyU4J0vwX9e/Zb4S+E5QxQouDh9du5vENjsTMXSlxgoR48PuDoHeD1WaN
vrxP80PHgVCfGb3PGm8DFbq+3b+5C7T/QvkSTldKnr6LBbiXFGgYp3YokF0KyH7D
Sj4HhaLEEaW+xzLzhSF82Y/2TbVxeY0IjXIO8viCHOmgJ38Mj8TW9X0eiYA5++1+
Si9fpkUb6f/VbfigNKbye5ejGhEiJ1BB5qpqaFsRzEdK5rJQeWKX42W/UdkE5NHG
MoOTvNN8xTd1ChGbaDNfIWSIrtEd
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:42 2025 by rpki-client