Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A381F50617811F0BDA3B7ACDAE4EC9C.roa
File: 0A381F50617811F0BDA3B7ACDAE4EC9C.roa (raw, json)
Hash identifier: pmdHkHfTfA08jajAo+iWGtZNQxY/W590OrQ7Hs1zdh8=
Subject key identifier: DE:92:41:D6:6F:08:79:00:E9:1F:21:93:AD:CE:99:7D:86:C6:14:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01654F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A381F50617811F0BDA3B7ACDAE4EC9C.roa
Signing time: Tue 15 Jul 2025 12:34:25 +0000
ROA not before: Tue 15 Jul 2025 12:34:20 +0000
ROA not after: Tue 19 Aug 2025 12:34:20 +0000
asID: 6079
IP address blocks: 45.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91471 (0x1654f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 12:34:20 2025 GMT
Not After : Aug 19 12:34:20 2025 GMT
Subject: CN=68764ad1-d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:23:02:37:d2:65:aa:2a:fe:ce:37:46:91:
78:ba:f8:b6:35:bd:12:0c:be:d9:b1:42:9b:42:0b:
26:40:68:e8:43:df:e1:ad:01:e6:2b:48:3d:4e:2b:
ac:df:d1:ca:73:03:2c:5b:ac:64:b2:41:88:87:e9:
0a:dc:76:d1:d7:b9:32:d6:59:27:3c:c9:32:41:44:
4a:f1:00:f5:6d:0c:02:47:5d:32:e0:56:3d:e1:61:
f4:65:b7:ef:4a:00:21:ff:52:92:b2:07:f7:63:d5:
57:c4:c5:83:88:e6:fb:2f:87:ed:d4:19:d4:a0:80:
7d:2d:59:76:b9:d1:09:78:bb:d2:60:d1:19:7c:de:
6f:65:43:40:9f:2d:14:dc:f0:41:c1:de:79:5e:06:
9f:6f:aa:47:e1:d1:16:cc:bd:55:a3:25:51:56:76:
27:76:01:45:b1:e9:f1:71:48:8f:68:93:fa:4c:02:
81:ec:ae:36:26:90:54:af:f4:56:28:7f:31:87:18:
e9:26:29:24:a7:0a:79:e2:a5:32:9a:15:2d:35:96:
9a:5e:55:65:a6:e7:34:ce:e1:1b:1c:52:3c:7a:fc:
20:6a:b6:01:5f:ea:e2:85:3a:ec:5a:82:b6:e2:6a:
85:9f:e6:e5:98:b5:5b:35:93:6b:72:a6:88:70:f0:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:41:D6:6F:08:79:00:E9:1F:21:93:AD:CE:99:7D:86:C6:14:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A381F50617811F0BDA3B7ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:98:3d:a5:ce:40:66:75:73:52:fd:61:95:0a:87:8a:9f:72:
ec:1c:2a:6d:7c:d6:a7:1e:d8:31:1d:6b:72:e7:83:4f:50:36:
24:7c:67:7b:f8:d9:b8:a5:af:2f:1d:80:ab:8e:33:f7:09:66:
03:f5:49:84:e1:f1:e0:bc:3d:42:b1:0d:b4:6a:13:e4:fd:75:
4e:b4:dd:d0:05:cb:30:47:ed:12:69:51:1b:b4:3f:c2:09:d5:
54:db:36:93:92:fd:37:11:c9:18:98:06:6e:09:89:8c:04:a8:
0d:9f:7b:34:ca:5d:08:40:31:4e:b0:6a:5d:9a:07:55:20:c0:
5f:a0:16:4a:bd:a3:94:e1:76:b7:01:e0:20:6f:19:b4:f5:9a:
61:1b:e8:56:80:8f:ed:2a:f6:9c:b7:1d:02:96:76:78:84:5a:
55:7e:e4:f4:69:61:29:d6:b1:0a:2d:fd:80:78:b7:e5:d7:8e:
c0:d7:54:2b:17:0a:b4:93:66:b6:d1:08:21:dc:7b:0e:ae:60:
2f:ae:87:e5:c7:25:13:3c:12:0c:88:ea:a1:78:4a:15:49:73:
13:d2:66:78:4f:27:72:26:ba:11:76:d7:8f:74:55:66:94:6a:
0f:47:d8:c7:33:66:63:6d:eb:95:32:ae:6d:0a:4e:7b:b6:97:
81:71:74:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:02 2025 by rpki-client