Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A22950A28611F0B2DBB69BDAE4EC9C.roa
File: A0A22950A28611F0B2DBB69BDAE4EC9C.roa (raw, json)
Hash identifier: PUiPgN8+iN3sbZ2BsBcNZc8zqdoPdLpn+05ro9LZHAw=
Subject key identifier: B0:91:31:C9:4E:23:94:E3:46:B2:36:8E:B9:D3:6C:5A:14:F8:91:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A22950A28611F0B2DBB69BDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:32:36 +0000
ROA not before: Mon 06 Oct 2025 07:32:30 +0000
ROA not after: Thu 23 Oct 2025 07:32:30 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98010 (0x17eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 07:32:30 2025 GMT
Not After : Oct 23 07:32:30 2025 GMT
Subject: CN=68e37093-b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:f9:eb:cf:e6:12:99:7e:2f:8d:0d:cb:8d:
72:47:bb:68:d8:d6:9d:88:11:1a:f2:c8:c4:0d:12:
ea:16:a4:84:ec:a9:33:7c:7e:e0:9e:53:67:d5:ac:
ea:36:22:e2:0b:73:fd:23:01:cb:c9:00:13:ad:d3:
43:d6:06:d8:ca:82:91:00:c2:51:38:9a:59:bb:cf:
42:56:e8:55:92:70:35:0c:f6:1d:9c:81:6b:dc:f8:
05:11:d4:c7:75:9b:aa:b3:96:4e:a7:66:dd:fd:9a:
2b:06:f9:20:90:9e:38:c0:b1:a9:36:26:14:1b:61:
b0:a0:9a:10:ec:6d:59:f2:19:a5:4f:6b:9a:1b:cc:
27:2c:51:d7:65:29:55:14:c4:c0:32:b9:96:ce:54:
eb:86:d7:1c:a0:12:b3:b7:98:b1:dc:e1:fd:72:69:
59:0e:dd:19:8d:31:d9:6c:33:a3:34:85:e3:03:73:
24:44:23:97:28:1d:1e:72:9e:82:ab:6b:32:99:52:
5c:b6:08:8b:cc:49:14:10:3c:a1:6c:9c:58:fe:a4:
ad:a3:15:df:33:cf:56:08:e6:aa:e6:4f:a9:a3:be:
17:f0:40:ca:05:8d:cc:38:83:2e:c7:15:ea:a3:b1:
c6:84:a7:d2:e7:be:ba:76:72:63:64:d1:ce:15:fd:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:31:C9:4E:23:94:E3:46:B2:36:8E:B9:D3:6C:5A:14:F8:91:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A22950A28611F0B2DBB69BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
45:3a:f6:5f:14:ad:9a:ec:fc:f6:a5:dd:c3:3b:92:57:d7:0d:
5b:02:3c:6a:db:36:d1:db:fa:ea:fc:05:e6:37:2a:65:30:d2:
c8:80:d7:61:cb:d7:b4:03:a0:31:ba:79:f5:58:75:7b:6c:5a:
83:2e:03:4f:6d:39:f3:6f:f0:e0:5b:33:ff:77:fb:bf:2e:85:
0e:73:c5:0b:f9:5c:54:e3:6c:b2:41:6d:01:6c:ec:27:98:c5:
56:af:ab:ab:77:9e:a0:bb:fc:e8:81:4f:43:bb:2b:de:96:29:
36:17:a7:5e:af:d2:24:d1:c4:fd:68:9d:e3:b1:e5:9c:7d:78:
10:23:01:e7:13:35:dd:d9:e1:a0:cd:df:22:f1:a9:b5:c6:22:
f5:31:ef:13:45:c7:bd:86:50:00:c8:4f:36:f5:d0:9b:ae:45:
ad:91:f9:37:11:da:eb:e0:40:a8:9e:de:d9:21:37:af:d8:ea:
4d:56:11:d6:26:af:63:2b:8a:d4:25:b0:1a:d5:5e:f2:cc:28:
85:7a:ea:18:38:00:df:49:3f:af:dc:a9:66:e3:c2:d6:84:44:
36:18:99:da:d8:4d:2f:89:f1:16:23:bc:36:fe:98:08:ba:0b:
0f:57:ab:fa:a3:c5:bb:e9:7f:cc:ca:a9:22:80:7b:60:1d:7f:
45:fa:19:03
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX7aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDA2MDczMjMwWhcNMjUxMDIzMDczMjMwWjAYMRYw
FAYDVQQDEw02OGUzNzA5My1iN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApXT568/mEpl+L40Ny41yR7to2NadiBEa8sjEDRLqFqSE7KkzfH7gnlNn
1azqNiLiC3P9IwHLyQATrdND1gbYyoKRAMJROJpZu89CVuhVknA1DPYdnIFr3PgF
EdTHdZuqs5ZOp2bd/ZorBvkgkJ44wLGpNiYUG2GwoJoQ7G1Z8hmlT2uaG8wnLFHX
ZSlVFMTAMrmWzlTrhtccoBKzt5ix3OH9cmlZDt0ZjTHZbDOjNIXjA3MkRCOXKB0e
cp6Cq2symVJctgiLzEkUEDyhbJxY/qStoxXfM89WCOaq5k+po74X8EDKBY3MOIMu
xxXqo7HGhKfS5766dnJjZNHOFf0/+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLCR
MclOI5TjRrI2jrnTbFoU+JFLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMEEyMjk1MEEyODYxMUYwQjJEQkI2OUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcPwMA0GCSqGSIb3DQEBCwUA
A4IBAQBFOvZfFK2a7Pz2pd3DO5JX1w1bAjxq2zbR2/rq/AXmNyplMNLIgNdhy9e0
A6Axunn1WHV7bFqDLgNPbTnzb/DgWzP/d/u/LoUOc8UL+VxU42yyQW0BbOwnmMVW
r6urd56gu/zogU9Duyvelik2F6der9Ik0cT9aJ3jseWcfXgQIwHnEzXd2eGgzd8i
8am1xiL1Me8TRce9hlAAyE829dCbrkWtkfk3Edrr4ECont7ZITev2OpNVhHWJq9j
K4rUJbAa1V7yzCiFeuoYOADfST+v3Klm48LWhEQ2GJna2E0vifEWI7w2/pgIugsP
V6v6o8W76X/MyqkigHtgHX9F+hkD
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:14 2025 by rpki-client