Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B300058843011F0919DF39ADAE4EC9C.roa
File: 7B300058843011F0919DF39ADAE4EC9C.roa (raw, json)
Hash identifier: nFGUGTpZg/aX3tTNtY3v3fwu7KpexC5prFnHKlhaJyU=
Subject key identifier: 56:24:0D:68:40:BC:30:26:75:AA:13:70:03:B8:85:13:99:48:E5:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B300058843011F0919DF39ADAE4EC9C.roa
Signing time: Thu 28 Aug 2025 17:00:21 +0000
ROA not before: Thu 28 Aug 2025 17:00:16 +0000
ROA not after: Sat 04 Oct 2025 17:00:16 +0000
asID: 151407
IP address blocks: 45.196.220.0/23 maxlen: 24
45.196.220.0/24 maxlen: 24
45.196.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94924 (0x172cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 17:00:16 2025 GMT
Not After : Oct 4 17:00:16 2025 GMT
Subject: CN=68b08b25-d7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:b7:b5:d0:bf:f7:96:8e:10:b5:0b:51:e2:
12:c1:92:f1:d3:03:e1:53:40:24:96:23:74:be:bd:
93:4d:4d:95:2a:ca:66:0c:30:69:43:fd:61:73:00:
62:36:03:43:93:42:ff:e8:34:7e:f8:fe:50:30:7f:
58:a7:8a:be:e4:87:7c:4c:82:0e:d6:68:79:87:82:
2d:9c:21:68:cf:93:fc:6b:e8:82:59:34:20:78:e3:
cc:01:db:9f:48:a5:42:81:e7:f4:ae:c6:aa:1d:35:
5d:38:d4:1b:fa:b7:e6:62:02:8f:c0:93:e4:e1:6d:
fa:58:5d:ba:aa:51:e5:79:bb:d7:b8:32:ea:5d:64:
f0:6b:c9:c9:b7:d3:5d:23:46:48:39:a3:89:f2:d5:
42:25:ad:05:b0:f0:46:ac:75:69:b2:97:6b:87:4e:
2c:1f:9b:d9:f2:1e:6c:83:25:24:9e:23:3b:02:0b:
61:e4:1d:9b:1a:f3:e4:a9:ca:7d:4b:76:dd:a1:57:
09:5a:0e:f1:c8:bb:c3:16:54:77:dd:e3:a3:3e:24:
6e:41:82:06:32:7d:72:92:6f:09:1e:5a:b8:3d:c8:
f7:87:46:37:00:f8:8b:00:81:00:a5:95:a8:01:d4:
fb:3a:05:ac:ff:2f:bf:64:d2:79:91:43:12:b1:88:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:0D:68:40:BC:30:26:75:AA:13:70:03:B8:85:13:99:48:E5:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B300058843011F0919DF39ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.220.0/23
Signature Algorithm: sha256WithRSAEncryption
81:a6:79:c9:fa:64:ef:f0:6a:14:35:58:93:85:b2:37:5d:54:
94:e2:89:69:5b:2f:4d:1f:2c:11:72:c9:14:86:a3:0e:81:0d:
15:00:d6:9a:a5:9e:75:31:ad:47:fb:25:51:80:2c:42:86:35:
26:44:e0:44:1c:4b:a1:ce:0c:a5:0d:99:79:f8:81:32:cb:ab:
e9:ab:13:6e:a7:1e:a7:a1:a5:79:07:c0:6e:88:f4:66:c0:23:
a9:f5:e6:f8:8b:2a:37:a7:46:bb:c1:c3:6a:16:41:5d:4e:79:
92:59:d9:15:ad:18:e8:d7:8b:d7:29:0f:7d:1f:b9:c8:6b:4e:
6e:41:4c:e4:e1:7e:49:d0:c5:b7:67:6d:f5:cf:10:d7:19:2f:
7f:33:62:1d:0f:9b:e6:23:0a:55:0c:2d:5d:6f:40:d9:12:ba:
70:3e:9f:ac:55:d7:64:93:4d:d7:28:b7:95:96:5d:47:30:38:
f3:25:2f:58:77:dc:f3:1b:12:64:4f:78:a7:2e:4c:5e:d8:3e:
e5:39:8e:e9:b8:23:60:5b:9d:2c:a2:4d:f9:1d:0f:28:2a:74:
d1:ac:30:b3:7d:39:68:da:d8:66:b9:48:01:a8:5b:d7:3a:8a:
de:ec:c7:fd:1c:69:b2:5a:7a:93:cd:da:cc:1a:15:b2:1e:8f:
31:38:b0:e8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXLMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MTcwMDE2WhcNMjUxMDA0MTcwMDE2WjAYMRYw
FAYDVQQDEw02OGIwOGIyNS1kN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr2S3tdC/95aOELULUeISwZLx0wPhU0AkliN0vr2TTU2VKspmDDBpQ/1h
cwBiNgNDk0L/6DR++P5QMH9Yp4q+5Id8TIIO1mh5h4ItnCFoz5P8a+iCWTQgeOPM
AdufSKVCgef0rsaqHTVdONQb+rfmYgKPwJPk4W36WF26qlHlebvXuDLqXWTwa8nJ
t9NdI0ZIOaOJ8tVCJa0FsPBGrHVpspdrh04sH5vZ8h5sgyUkniM7Agth5B2bGvPk
qcp9S3bdoVcJWg7xyLvDFlR33eOjPiRuQYIGMn1ykm8JHlq4Pcj3h0Y3APiLAIEA
pZWoAdT7OgWs/y+/ZNJ5kUMSsYhyYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFYk
DWhAvDAmdaoTcAO4hROZSOUwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QjMwMDA1ODg0MzAxMUYwOTE5REYzOUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTcMA0GCSqGSIb3DQEBCwUA
A4IBAQCBpnnJ+mTv8GoUNViThbI3XVSU4olpWy9NHywRcskUhqMOgQ0VANaapZ51
Ma1H+yVRgCxChjUmROBEHEuhzgylDZl5+IEyy6vpqxNupx6noaV5B8BuiPRmwCOp
9eb4iyo3p0a7wcNqFkFdTnmSWdkVrRjo14vXKQ99H7nIa05uQUzk4X5J0MW3Z231
zxDXGS9/M2IdD5vmIwpVDC1db0DZErpwPp+sVddkk03XKLeVll1HMDjzJS9Yd9zz
GxJkT3inLkxe2D7lOY7puCNgW50sok35HQ8oKnTRrDCzfTlo2thmuUgBqFvXOore
7Mf9HGmyWnqTzdrMGhWyHo8xOLDo
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:55 2025 by rpki-client