Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EBFC2DAA43D11F0B746DAB1DAE4EC9C.roa
File: 7EBFC2DAA43D11F0B746DAB1DAE4EC9C.roa (raw, json)
Hash identifier: BAlzwYB5f8di3ZyKztrfTy5VXEHXdCjc4coSzoW0oY4=
Subject key identifier: 90:D3:AD:71:55:27:74:C8:00:D7:CF:03:A0:C7:F1:8F:CE:06:30:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EBFC2DAA43D11F0B746DAB1DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 11:54:08 +0000
ROA not before: Wed 08 Oct 2025 11:54:01 +0000
ROA not after: Sat 22 Nov 2025 11:54:01 +0000
asID: 142032
IP address blocks: 45.205.16.0/20 maxlen: 24
45.205.16.0/21 maxlen: 24
45.205.24.0/21 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98178 (0x17f82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 11:54:01 2025 GMT
Not After : Nov 22 11:54:01 2025 GMT
Subject: CN=68e650e0-f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:41:74:79:01:18:65:27:c4:57:91:fd:ec:
67:9a:b4:d9:53:48:6e:69:1d:5c:5f:20:d1:05:da:
eb:53:a9:f9:3f:87:02:aa:d4:d2:dd:33:97:bb:34:
d0:20:f9:0d:04:2f:e6:f3:df:fb:0f:91:06:8a:c2:
76:25:f3:fc:be:a3:5a:1b:e5:11:b6:4b:69:2c:d0:
d9:f2:b4:0f:d0:0d:e0:40:f2:bf:f3:2e:b4:4f:35:
57:12:80:dd:0a:43:0e:1d:12:3f:10:05:71:81:8a:
0b:af:31:5d:2e:82:1a:c3:75:d0:4b:f9:08:05:b7:
d4:35:d0:26:86:fc:d9:31:5b:4b:ff:8c:27:bd:f1:
71:c4:f4:04:d1:c7:e3:04:16:f6:4a:d4:d9:f9:b5:
0e:c2:e7:5c:5d:86:f7:db:b5:17:d2:e1:da:c9:b1:
7f:ba:d7:9e:44:d9:b4:e9:71:f3:87:eb:4c:62:4a:
80:86:a8:e2:b0:fd:23:e4:63:03:1f:e0:c6:af:a7:
27:38:10:59:86:9a:9a:47:49:9a:88:58:56:b8:66:
b8:fb:80:4e:9f:55:c4:7c:c3:96:d3:3b:21:0c:4f:
fb:4c:af:ea:ce:65:93:c9:a4:23:af:73:2a:0b:6f:
e3:28:99:3e:fa:c0:1c:99:5f:70:21:11:c6:c7:2e:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:AD:71:55:27:74:C8:00:D7:CF:03:A0:C7:F1:8F:CE:06:30:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EBFC2DAA43D11F0B746DAB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
13:05:45:df:39:10:76:b1:f2:94:08:92:ac:12:ac:3c:55:61:
55:c9:36:c6:15:9d:5c:42:1a:f9:ac:ba:8e:21:37:82:52:9a:
7e:0c:b7:46:a3:9d:ee:b9:6f:f4:93:c2:68:f0:91:99:9b:14:
b9:dc:88:d6:2d:ea:cd:dd:1b:a4:72:ef:22:75:e9:3e:a2:9c:
d6:77:70:11:1c:5d:47:5d:69:f0:e5:24:16:c6:9a:e9:04:8a:
31:39:ec:c7:73:d9:0c:f8:0a:44:a1:7b:f1:23:f4:c7:c5:7b:
12:46:0e:ff:e0:f6:7b:5f:f2:65:9d:0e:99:64:71:de:4f:43:
dd:82:de:02:3d:d3:4f:5c:55:fe:fe:f1:cc:9e:9c:78:f0:79:
b9:17:9c:94:d8:f0:af:58:42:c4:69:2c:6c:cb:8e:dd:38:11:
8a:a5:d2:45:32:6d:84:ff:ac:af:2a:51:8a:36:c0:83:6d:32:
65:af:58:35:4d:e6:e2:48:1d:1a:de:d8:75:81:69:06:d5:1d:
1e:2e:4f:57:a2:d9:ea:9e:51:bb:93:83:91:fd:4e:91:fe:9a:
d5:4d:c4:ac:67:7b:00:18:5e:c1:1d:0b:c6:59:04:b9:c9:58:
c6:a5:52:da:95:2b:59:85:f6:96:81:c9:ac:4f:98:c5:1e:37:
e8:72:79:28
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAX+CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDA4MTE1NDAxWhcNMjUxMTIyMTE1NDAxWjAYMRYw
FAYDVQQDEw02OGU2NTBlMC1mMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6pNBdHkBGGUnxFeR/exnmrTZU0huaR1cXyDRBdrrU6n5P4cCqtTS3TOX
uzTQIPkNBC/m89/7D5EGisJ2JfP8vqNaG+URtktpLNDZ8rQP0A3gQPK/8y60TzVX
EoDdCkMOHRI/EAVxgYoLrzFdLoIaw3XQS/kIBbfUNdAmhvzZMVtL/4wnvfFxxPQE
0cfjBBb2StTZ+bUOwudcXYb327UX0uHaybF/uteeRNm06XHzh+tMYkqAhqjisP0j
5GMDH+DGr6cnOBBZhpqaR0maiFhWuGa4+4BOn1XEfMOW0zshDE/7TK/qzmWTyaQj
r3MqC2/jKJk++sAcmV9wIRHGxy5JsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDT
rXFVJ3TIANfPA6DH8Y/OBjBYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RUJGQzJEQUE0M0QxMUYwQjc0NkRBQjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELc0QAwQFLc/AMA0GCSqGSIb3
DQEBCwUAA4IBAQATBUXfORB2sfKUCJKsEqw8VWFVyTbGFZ1cQhr5rLqOITeCUpp+
DLdGo53uuW/0k8Jo8JGZmxS53IjWLerN3Rukcu8idek+opzWd3ARHF1HXWnw5SQW
xprpBIoxOezHc9kM+ApEoXvxI/THxXsSRg7/4PZ7X/JlnQ6ZZHHeT0Pdgt4CPdNP
XFX+/vHMnpx48Hm5F5yU2PCvWELEaSxsy47dOBGKpdJFMm2E/6yvKlGKNsCDbTJl
r1g1TebiSB0a3th1gWkG1R0eLk9XotnqnlG7k4OR/U6R/prVTcSsZ3sAGF7BHQvG
WQS5yVjGpVLalStZhfaWgcmsT5jFHjfocnko
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:02 2025 by rpki-client