Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/423A04EE609811F0A7E49E7CDAE4EC9C.roa
File: 423A04EE609811F0A7E49E7CDAE4EC9C.roa (raw, json)
Hash identifier: krTqt48yjL+KrNzfATTpYi2K8By+DTNvlor3jvEesEs=
Subject key identifier: 02:98:81:93:BC:A2:1A:ED:C6:36:5B:5D:5C:A3:A6:3B:4D:76:98:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016504
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/423A04EE609811F0A7E49E7CDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 09:52:31 +0000
ROA not before: Mon 14 Jul 2025 09:52:27 +0000
ROA not after: Tue 19 Aug 2025 09:52:27 +0000
asID: 214143
IP address blocks: 45.207.128.0/21 maxlen: 24
45.207.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91396 (0x16504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 09:52:27 2025 GMT
Not After : Aug 19 09:52:27 2025 GMT
Subject: CN=6874d35f-9439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:89:b0:a7:7f:50:fe:8b:04:f0:03:8e:e3:
1c:82:11:53:3a:19:c6:d3:f3:55:1f:f7:c8:f8:2c:
e8:a4:9d:b3:13:07:24:df:73:76:d4:95:e8:dd:65:
b7:1d:f3:48:22:9a:bb:43:1b:1d:9e:2c:11:0e:b7:
f3:63:88:29:fb:43:74:55:b7:bd:04:79:cb:6a:30:
6d:d3:5f:d2:9d:9f:d3:9a:58:02:c0:47:6b:39:26:
1f:98:1a:08:c9:9b:a7:ed:7b:3e:a2:94:72:21:78:
48:31:20:e2:13:b4:b3:c5:d7:e4:6f:4c:57:ba:60:
e9:f2:65:8f:36:ad:89:74:79:c6:f3:c7:76:c5:d9:
2c:ca:a6:0f:aa:94:a1:71:e5:3a:38:e3:db:30:6a:
99:0b:db:23:ac:97:15:a2:e8:cc:d8:e3:f9:03:51:
8b:5c:da:e4:25:25:03:69:25:f9:56:cd:de:66:bf:
28:46:c8:1f:63:91:ea:ba:b6:60:46:4c:9d:a9:92:
d9:db:ab:fb:b2:06:95:fa:fb:9e:e5:d7:5a:01:32:
7d:c2:84:4c:0c:5b:18:5a:1e:b7:61:89:97:af:67:
d9:01:f5:23:28:58:ef:7b:bc:6d:3a:dc:21:d3:4e:
08:0e:1e:e5:e3:94:91:60:50:64:23:f4:b4:70:45:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:81:93:BC:A2:1A:ED:C6:36:5B:5D:5C:A3:A6:3B:4D:76:98:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/423A04EE609811F0A7E49E7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0-45.207.137.255
Signature Algorithm: sha256WithRSAEncryption
b0:fb:c6:91:a8:1b:50:14:ba:1c:a4:b9:86:7d:7e:7b:4e:e1:
bb:c5:71:f2:4e:4b:37:1e:5b:9b:68:e0:bb:d1:40:42:82:bc:
f5:90:90:29:7e:10:a8:59:83:65:75:6a:1e:4f:17:ca:a5:75:
73:59:9c:9a:70:2f:e8:a0:ea:9b:29:e3:71:ed:dd:ae:43:53:
7f:17:09:7d:71:2e:1a:ec:95:ca:f2:db:8c:7d:3f:10:21:46:
73:be:d6:3c:05:83:93:11:ed:af:d5:66:df:78:aa:b3:76:cd:
19:79:77:22:56:bd:f3:d6:7e:5b:07:75:03:17:29:88:68:aa:
2e:71:5d:77:46:55:bd:20:41:24:ba:02:2b:fb:35:02:16:bf:
9d:b3:a7:1b:d4:f9:22:75:e5:de:4a:b7:52:61:82:e6:bd:b1:
fa:02:d5:3b:cd:a3:d3:aa:7a:51:8c:b7:99:73:5a:68:77:5a:
51:a1:06:7e:e4:13:7d:03:40:2b:57:36:d6:5c:30:c3:70:72:
c3:b0:f3:b4:4b:b3:3a:56:48:f0:ba:40:58:81:ac:36:e2:c5:
09:11:2d:fd:80:b9:1c:e5:c9:78:d3:c0:c5:33:62:9c:a5:d7:
5e:9d:27:a2:01:c1:4b:8a:59:b6:98:44:dc:02:9e:69:cd:ec:
be:a2:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:17 2025 by rpki-client