Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62CE934A5E7311F082372A7FDAE4EC9C.roa
File: 62CE934A5E7311F082372A7FDAE4EC9C.roa (raw, json)
Hash identifier: isBALFnGxuH/H5JT5Wat2mcsxvEfkJKpl82FO+clbcA=
Subject key identifier: EB:E8:C3:9F:21:5C:FC:94:3F:87:1B:0E:D6:78:89:E6:D9:7B:8B:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62CE934A5E7311F082372A7FDAE4EC9C.roa
Signing time: Fri 11 Jul 2025 16:23:32 +0000
ROA not before: Fri 11 Jul 2025 16:23:28 +0000
ROA not after: Mon 25 Aug 2025 16:23:28 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91324 (0x164bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 16:23:28 2025 GMT
Not After : Aug 25 16:23:28 2025 GMT
Subject: CN=68713a84-37bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:7c:38:76:6b:61:17:e4:b8:7f:eb:4b:29:
44:3b:9a:ed:66:6f:76:7c:92:06:4c:46:6c:eb:17:
c5:16:ae:0b:e2:ab:0e:6f:19:4d:54:3b:33:19:de:
f5:a6:70:3d:77:2a:3a:60:ef:63:87:5a:f8:8c:6e:
06:32:b6:7c:34:17:5c:c3:09:62:f3:05:bf:8c:3c:
39:1b:37:e1:bb:d9:f4:de:49:f2:c1:a7:7d:b2:76:
ea:be:ef:31:81:c0:47:b1:c1:d3:ed:84:61:f8:36:
ff:19:df:98:8e:cf:16:a5:db:81:d3:56:94:62:d6:
24:2c:c9:c1:a0:0b:ea:fb:95:37:a8:20:15:b2:46:
b6:2e:d7:2d:3f:c8:44:ce:b5:02:58:9f:3b:61:e8:
02:4b:8b:ea:33:01:15:d8:55:6b:ac:98:34:62:26:
a2:39:78:3b:a8:b9:af:74:05:88:01:d3:92:18:a8:
40:02:0f:2f:82:85:97:20:b1:46:53:20:4d:d2:02:
aa:a1:a2:f6:59:15:37:dc:46:8e:b1:83:eb:59:a0:
84:c3:cf:41:9e:41:42:2f:7b:06:3a:a4:e9:75:07:
d7:d8:df:47:34:d0:4d:86:1d:9a:1f:c0:14:5b:8e:
b8:6b:5f:10:5b:06:d9:46:b1:20:42:de:c5:82:7f:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E8:C3:9F:21:5C:FC:94:3F:87:1B:0E:D6:78:89:E6:D9:7B:8B:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62CE934A5E7311F082372A7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
95:d8:e1:d3:43:f3:e0:be:63:69:9f:2b:86:c9:73:65:82:ef:
27:69:1a:99:26:49:6b:1b:29:c7:c1:f0:22:91:9c:db:e8:42:
1e:4b:1b:ed:36:5d:0e:cc:81:af:89:cb:ad:e3:d7:a4:04:e6:
d7:5f:3d:f9:90:88:5e:74:98:cf:39:f5:5c:3f:5a:3b:9f:ba:
68:f8:62:67:34:c5:0f:52:78:21:51:20:af:35:43:72:be:23:
0e:15:37:71:cf:c7:c2:21:06:9a:65:10:57:5b:44:8b:5b:6b:
f9:9b:22:af:b2:fe:8f:39:36:db:e4:08:8e:20:9c:b1:9a:2b:
4f:ab:8e:bb:62:d6:d8:1d:ad:b9:f2:8c:85:14:c5:ff:aa:06:
21:92:b8:06:be:92:15:b6:76:9a:6a:8a:c7:af:cc:53:89:2d:
b1:8f:43:ce:8d:78:a6:17:b9:c2:f5:1c:b5:43:8b:99:f5:bf:
33:84:8b:9f:82:16:77:3e:06:e5:14:2b:bb:d5:99:9f:1f:1a:
c3:01:7f:f2:ad:61:3c:76:61:69:6f:47:87:27:ce:5f:8e:5d:
7d:78:2d:30:9b:93:7c:ff:bd:ec:c4:00:46:bc:fb:56:1d:6c:
0d:9d:30:09:02:a6:d4:3b:a9:0d:68:9d:de:70:d0:92:b2:f2:
ab:05:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:38 2025 by rpki-client