Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D9D273E8A8411F0BBEE61CCDAE4EC9C.roa
File: 3D9D273E8A8411F0BBEE61CCDAE4EC9C.roa (raw, json)
Hash identifier: KZnKo97btXCvl7eJnKceHLAZ9rlX2FZ3zc9M1Vyu77s=
Subject key identifier: C0:24:C6:3F:36:7F:F7:27:73:0D:10:B8:2C:3A:99:25:B4:96:69:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017935
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D9D273E8A8411F0BBEE61CCDAE4EC9C.roa
Signing time: Fri 05 Sep 2025 18:15:03 +0000
ROA not before: Fri 05 Sep 2025 18:14:58 +0000
ROA not after: Wed 27 May 2026 18:14:58 +0000
asID: 8796
IP address blocks: 45.194.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96565 (0x17935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 18:14:58 2025 GMT
Not After : May 27 18:14:58 2026 GMT
Subject: CN=68bb28a6-30cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:7f:c0:da:1d:f0:f3:a1:ec:80:f4:61:0e:
82:48:dc:94:6f:4f:73:cd:e5:92:44:6a:e4:e5:0f:
80:3f:5e:76:39:3d:9a:4c:5c:e0:18:fd:0a:86:bb:
a6:b2:03:d4:65:f6:46:2f:20:cb:8c:67:e3:82:c7:
d6:bb:66:ce:da:ed:18:4e:a9:81:01:fb:bd:ab:5e:
85:b8:88:7f:5c:ee:1e:c4:49:1e:1a:09:6b:1e:d3:
ea:4c:77:f6:0a:b7:9d:90:b4:f4:11:3e:98:43:72:
c7:c3:f4:65:a8:a0:0f:f7:50:50:cd:48:3f:55:9e:
be:19:9f:52:a3:22:db:49:d1:cc:8f:99:c7:d1:05:
45:05:6d:eb:7d:8e:a0:1a:80:83:c5:19:e9:5d:2e:
22:0c:d2:60:9c:d1:e9:7b:fd:51:60:3e:b2:4f:b0:
c3:4d:e8:10:a0:da:91:a6:56:c6:14:ed:9e:aa:95:
0d:0f:09:42:c8:c3:ce:be:a8:84:c3:c9:41:d4:a3:
02:51:22:59:7e:b3:6a:77:3c:da:21:fa:9a:94:0c:
cc:80:25:61:f5:2c:79:e6:3b:00:82:05:ca:65:00:
3d:eb:34:7d:50:1b:0f:7d:12:46:6f:40:3a:61:88:
ac:e7:48:ce:78:ef:d3:cb:78:d6:6b:c3:56:78:6b:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:C6:3F:36:7F:F7:27:73:0D:10:B8:2C:3A:99:25:B4:96:69:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D9D273E8A8411F0BBEE61CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
51:15:1f:d2:67:56:12:c1:a7:1b:85:2f:66:1c:88:0a:fb:2c:
d5:5a:c7:c8:7c:c3:4b:87:63:8e:13:a0:1b:87:80:70:2f:0e:
52:0b:43:4b:3c:11:83:9c:79:0a:07:51:98:0f:3d:f1:fa:83:
b6:65:f6:50:a5:19:47:a6:e8:f9:6a:95:2e:02:06:e9:d1:cb:
7d:27:27:b7:38:ab:86:93:d7:23:3a:f6:f4:d5:7f:e9:4b:d1:
cf:df:7c:49:b6:b3:f4:23:47:ad:3a:bb:d3:53:66:90:f1:5c:
db:7d:19:2e:96:13:fe:83:fb:52:25:3b:a1:b6:e3:11:d3:49:
6a:37:ab:ba:0c:ca:69:fd:4c:23:2a:fc:95:d2:aa:8b:46:d0:
23:36:a3:36:0e:73:9c:fa:83:f0:e0:cd:bc:f6:45:5f:0a:86:
fd:32:67:4b:1f:02:6e:f9:78:02:1b:bd:84:55:a1:2d:f6:bb:
62:c6:87:48:2b:4c:1d:94:4e:1b:01:7d:2b:35:cb:58:42:b3:
0f:47:72:6f:08:2e:cb:ea:e6:b6:bd:7a:76:75:44:c7:17:cc:
7e:c0:66:87:0d:ef:df:4d:10:a9:ae:46:0f:0a:ee:0c:46:2b:
97:70:df:cc:da:14:18:07:14:a1:11:74:52:83:cc:cf:d1:a3:
ea:0a:3d:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXk1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTA1MTgxNDU4WhcNMjYwNTI3MTgxNDU4WjAYMRYw
FAYDVQQDEw02OGJiMjhhNi0zMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvcV/wNod8POh7ID0YQ6CSNyUb09zzeWSRGrk5Q+AP152OT2aTFzgGP0K
hrumsgPUZfZGLyDLjGfjgsfWu2bO2u0YTqmBAfu9q16FuIh/XO4exEkeGglrHtPq
THf2CredkLT0ET6YQ3LHw/RlqKAP91BQzUg/VZ6+GZ9SoyLbSdHMj5nH0QVFBW3r
fY6gGoCDxRnpXS4iDNJgnNHpe/1RYD6yT7DDTegQoNqRplbGFO2eqpUNDwlCyMPO
vqiEw8lB1KMCUSJZfrNqdzzaIfqalAzMgCVh9Sx55jsAggXKZQA96zR9UBsPfRJG
b0A6YYis50jOeO/Ty3jWa8NWeGtgJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMAk
xj82f/cncw0QuCw6mSW0lmkvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRDlEMjczRThBODQxMUYwQkJFRTYxQ0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIUMA0GCSqGSIb3DQEBCwUA
A4IBAQBRFR/SZ1YSwacbhS9mHIgK+yzVWsfIfMNLh2OOE6Abh4BwLw5SC0NLPBGD
nHkKB1GYDz3x+oO2ZfZQpRlHpuj5apUuAgbp0ct9Jye3OKuGk9cjOvb01X/pS9HP
33xJtrP0I0etOrvTU2aQ8VzbfRkulhP+g/tSJTuhtuMR00lqN6u6DMpp/UwjKvyV
0qqLRtAjNqM2DnOc+oPw4M289kVfCob9MmdLHwJu+XgCG72EVaEt9rtixodIK0wd
lE4bAX0rNctYQrMPR3JvCC7L6ua2vXp2dUTHF8x+wGaHDe/fTRCprkYPCu4MRiuX
cN/M2hQYBxShEXRSg8zP0aPqCj1O
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:14 2025 by rpki-client