Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/212FD2E28EEC11F08C279D9EDAE4EC9C.roa
File: 212FD2E28EEC11F08C279D9EDAE4EC9C.roa (raw, json)
Hash identifier: fGcnmiPRsKMNZ6bJEEJLN1eu5cgQQEmoQrtc3IKySoU=
Subject key identifier: 73:D8:4A:68:40:15:E0:A6:26:9C:96:29:E8:48:2F:42:A7:E8:04:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017AB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/212FD2E28EEC11F08C279D9EDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 08:48:47 +0000
ROA not before: Thu 11 Sep 2025 08:48:41 +0000
ROA not after: Fri 17 Oct 2025 08:48:41 +0000
asID: 36137
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Sep 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96945 (0x17ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 08:48:41 2025 GMT
Not After : Oct 17 08:48:41 2025 GMT
Subject: CN=68c28cef-5104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:f4:db:f2:6e:77:27:ec:e4:16:18:38:58:
68:9b:70:32:69:70:67:bf:ff:3c:51:b7:1f:d8:f8:
40:71:a2:4a:77:3a:8c:23:15:6d:b4:d9:79:0b:8d:
ce:45:59:80:cb:3f:f4:fb:96:e4:e3:e8:a9:14:f6:
27:85:b5:6e:24:e4:23:ec:74:0d:9b:cb:a6:2e:c1:
f2:a5:1a:f8:45:5d:51:5a:8d:d4:59:6b:78:e5:91:
8e:1d:0f:57:62:dc:55:ce:8c:48:c8:78:62:de:48:
bc:bc:09:22:1a:29:da:32:9a:78:3e:4c:e7:d4:1f:
5d:a9:46:ef:4a:2a:73:b3:ca:4a:85:7a:fb:b3:f2:
02:d9:0e:db:de:41:e8:ad:d7:57:eb:99:da:cb:b6:
0b:7a:be:9e:11:2d:40:62:93:57:13:4c:3e:91:17:
bb:02:5b:8f:59:16:1e:a5:7b:65:0a:b7:8e:3d:3c:
01:a3:32:54:fa:5c:4f:c0:a2:8e:a1:80:66:0f:a6:
b6:72:b5:ec:df:da:a9:28:ce:10:9e:ec:0e:e4:35:
aa:f4:c4:db:8a:5c:d6:f7:fc:fa:fb:88:d4:ff:96:
f3:a5:95:79:dc:59:0b:63:75:bb:17:d5:02:c8:fe:
25:b0:07:5a:64:fb:a4:ea:70:49:cc:a2:5e:05:da:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:4A:68:40:15:E0:A6:26:9C:96:29:E8:48:2F:42:A7:E8:04:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/212FD2E28EEC11F08C279D9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
76:3b:88:fa:ad:6c:22:7b:66:32:19:f3:d0:31:6d:7e:18:8a:
05:54:89:a3:20:cc:7a:26:1d:5c:12:bd:35:9d:c8:75:08:0a:
f8:c0:38:db:d4:95:1b:2c:7e:0d:1b:97:19:6c:e2:06:88:19:
8b:ad:0f:fa:da:93:03:3c:b6:36:94:e3:3b:8e:e6:b3:c2:0f:
b7:87:86:22:bd:0a:e3:f3:39:86:65:d7:13:c3:d2:d4:b5:e5:
7d:25:78:95:11:06:f7:47:4d:7a:af:d9:8f:18:29:12:53:97:
ee:c3:1d:9b:71:e5:71:ff:d4:53:9c:28:6a:4e:77:f1:b6:e2:
04:fa:fe:8b:ce:1d:ec:65:c8:9a:39:a1:90:8b:93:67:19:58:
38:b1:da:9a:57:36:c3:38:5e:9f:b8:8d:90:67:41:1d:91:b0:
1a:a8:f0:7e:ed:cf:d4:37:f6:ef:87:37:fd:42:ce:ce:48:9f:
84:a7:fc:ec:65:e6:63:95:19:71:82:2f:be:fe:19:72:f4:9b:
37:85:4e:b8:ac:fa:6b:3b:f6:aa:3c:c5:f1:3b:3c:7c:d9:55:
6a:80:8c:76:9f:cd:85:33:aa:00:59:ce:56:05:4c:5d:25:47:
cd:65:68:8e:a4:c6:fd:18:60:71:c9:24:02:a0:8f:e3:b9:08:
49:56:8e:7a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXqxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTExMDg0ODQxWhcNMjUxMDE3MDg0ODQxWjAYMRYw
FAYDVQQDEw02OGMyOGNlZi01MTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvUf02/Judyfs5BYYOFhom3AyaXBnv/88Ubcf2PhAcaJKdzqMIxVttNl5
C43ORVmAyz/0+5bk4+ipFPYnhbVuJOQj7HQNm8umLsHypRr4RV1RWo3UWWt45ZGO
HQ9XYtxVzoxIyHhi3ki8vAkiGinaMpp4Pkzn1B9dqUbvSipzs8pKhXr7s/IC2Q7b
3kHorddX65nay7YLer6eES1AYpNXE0w+kRe7AluPWRYepXtlCreOPTwBozJU+lxP
wKKOoYBmD6a2crXs39qpKM4QnuwO5DWq9MTbilzW9/z6+4jU/5bzpZV53FkLY3W7
F9UCyP4lsAdaZPuk6nBJzKJeBdryBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHPY
SmhAFeCmJpyWKehIL0Kn6ASjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMTJGRDJFMjhFRUMxMUYwOEMyNzlEOUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcjAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2O4j6rWwie2YyGfPQMW1+GIoFVImjIMx6Jh1cEr01nch1CAr4wDjb1JUb
LH4NG5cZbOIGiBmLrQ/62pMDPLY2lOM7juazwg+3h4YivQrj8zmGZdcTw9LUteV9
JXiVEQb3R016r9mPGCkSU5fuwx2bceVx/9RTnChqTnfxtuIE+v6Lzh3sZciaOaGQ
i5NnGVg4sdqaVzbDOF6fuI2QZ0EdkbAaqPB+7c/UN/bvhzf9Qs7OSJ+Ep/zsZeZj
lRlxgi++/hly9Js3hU64rPprO/aqPMXxOzx82VVqgIx2n82FM6oAWc5WBUxdJUfN
ZWiOpMb9GGBxySQCoI/juQhJVo56
-----END CERTIFICATE-----
Generated at Sun Sep 14 13:21:25 2025 by rpki-client