Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC2048C840511F0BA8C5486DAE4EC9C.roa
File: 9AC2048C840511F0BA8C5486DAE4EC9C.roa (raw, json)
Hash identifier: 6j5MiLw3QpoGfA074oNss1a2hZBPex5KZ2vgtcvNsTk=
Subject key identifier: EC:9F:49:BB:49:77:84:9E:23:D2:57:C9:42:01:9B:31:89:32:71:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01728B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC2048C840511F0BA8C5486DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 11:53:26 +0000
ROA not before: Thu 28 Aug 2025 11:53:21 +0000
ROA not after: Sun 28 Sep 2025 11:53:21 +0000
asID: 44559
IP address blocks: 45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94859 (0x1728b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 11:53:21 2025 GMT
Not After : Sep 28 11:53:21 2025 GMT
Subject: CN=68b04336-b146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fe:f2:91:db:59:95:cc:50:5c:b2:db:02:e0:
87:45:12:e4:13:2e:6b:6e:40:16:07:3a:18:a7:16:
42:e7:f5:e1:e1:54:2c:8b:23:5a:06:39:58:07:ef:
fa:6d:7a:20:ae:c7:47:0c:94:a2:30:f7:e1:3c:50:
16:54:0e:55:a0:b0:c5:7f:83:98:4b:48:29:1a:b2:
98:65:6b:2e:35:f1:bb:1a:e7:02:54:12:5d:2c:4c:
15:fd:b2:cd:71:e7:c3:b8:e3:9f:ab:ad:f2:60:ca:
db:cc:47:db:6f:20:82:aa:ff:d8:0f:ca:94:e9:bb:
73:bf:99:d2:31:a4:5a:ab:76:44:6a:79:bd:d8:95:
41:42:c1:f0:0c:e7:a5:05:04:15:8a:d9:de:e7:55:
94:e9:b4:05:0a:60:b8:08:41:d1:63:76:0c:a7:8e:
94:57:88:a9:7a:8c:4d:42:3e:a0:6a:82:71:b2:d3:
b1:f3:9d:ac:8b:26:67:ae:44:1f:dd:b9:1c:b2:0e:
7b:aa:e5:ca:1c:41:d8:77:c3:77:29:d6:32:63:c3:
cd:03:3d:af:6a:25:4f:ae:b2:0f:c8:78:3d:21:d2:
37:49:c8:22:17:c6:dd:05:8c:9b:63:8a:3c:33:e2:
e7:bd:d7:b4:64:a5:f1:23:75:68:f2:f7:3b:66:7f:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:49:BB:49:77:84:9E:23:D2:57:C9:42:01:9B:31:89:32:71:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC2048C840511F0BA8C5486DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.170.0/24
45.195.174.0-45.195.177.255
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.199.209.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
34:00:fa:93:1b:da:aa:43:28:33:ad:ff:ef:8e:63:60:54:75:
59:c0:26:9f:52:f0:ac:2a:7f:22:68:c5:da:74:65:90:14:cb:
6d:57:b8:5e:87:56:5e:a8:7c:7e:bf:65:17:c4:ec:eb:48:0d:
c9:2e:f4:1e:35:2b:7c:8d:a2:e2:4e:2c:43:59:67:9a:6d:1a:
3e:3f:2f:6d:16:33:ef:f2:ec:23:15:24:eb:86:b4:26:31:85:
ad:5f:fd:a3:6c:31:70:1f:2b:fb:93:1b:a6:f6:93:95:ed:76:
e5:4b:d2:c6:19:b6:eb:75:7e:fe:a9:40:d3:1d:72:4e:82:6a:
d2:2b:74:f1:9f:85:75:4d:d8:b4:da:f2:b4:d5:67:00:49:f3:
5c:8d:e4:11:40:9e:78:1a:4a:e6:56:80:4a:83:2e:39:ad:86:
9c:7b:7a:a6:09:49:d3:e7:4a:59:31:d5:1b:9a:74:11:b3:73:
e7:4e:f1:6e:68:ba:3d:73:e4:18:33:3b:c3:19:31:81:86:43:
a0:d8:67:66:df:0a:d9:48:33:43:ef:72:c6:aa:24:e4:49:7a:
b4:3d:27:1e:97:ec:ba:a4:c9:38:77:bc:72:fd:f5:86:58:39:
72:82:e7:6e:b8:2d:bb:b4:cd:be:4f:1d:eb:37:ea:75:c2:a9:
8f:ab:9f:32
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAXKLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MTE1MzIxWhcNMjUwOTI4MTE1MzIxWjAYMRYw
FAYDVQQDEw02OGIwNDMzNi1iMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+/7ykdtZlcxQXLLbAuCHRRLkEy5rbkAWBzoYpxZC5/Xh4VQsiyNaBjlY
B+/6bXogrsdHDJSiMPfhPFAWVA5VoLDFf4OYS0gpGrKYZWsuNfG7GucCVBJdLEwV
/bLNcefDuOOfq63yYMrbzEfbbyCCqv/YD8qU6btzv5nSMaRaq3ZEanm92JVBQsHw
DOelBQQVitne51WU6bQFCmC4CEHRY3YMp46UV4ipeoxNQj6gaoJxstOx852siyZn
rkQf3bkcsg57quXKHEHYd8N3KdYyY8PNAz2vaiVPrrIPyHg9IdI3ScgiF8bdBYyb
Y4o8M+Lnvde0ZKXxI3Vo8vc7Zn8QQwIDAQABo4IC0DCCAswwHQYDVR0OBBYEFOyf
SbtJd4SeI9JXyUIBmzGJMnHlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QUMyMDQ4Qzg0MDUxMUYwQkE4QzU0ODZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQALcOqMAwDBAEtw64DBAEtw7AD
BAAtw7MDBAAtw7UDBAAtw7owDAMEAC3H0QMEAC3H3DANBgkqhkiG9w0BAQsFAAOC
AQEANAD6kxvaqkMoM63/745jYFR1WcAmn1LwrCp/ImjF2nRlkBTLbVe4XodWXqh8
fr9lF8Ts60gNyS70HjUrfI2i4k4sQ1lnmm0aPj8vbRYz7/LsIxUk64a0JjGFrV/9
o2wxcB8r+5MbpvaTle125UvSxhm263V+/qlA0x1yToJq0it08Z+FdU3YtNrytNVn
AEnzXI3kEUCeeBpK5laASoMuOa2GnHt6pglJ0+dKWTHVG5p0EbNz507xbmi6PXPk
GDM7wxkxgYZDoNhnZt8K2UgzQ+9yxqok5El6tD0nHpfsuqTJOHe8cv31hlg5coLn
brgtu7TNvk8d6zfqdcKpj6ufMg==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:12 2025 by rpki-client