Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831508A2591711F0830307C4DAE4EC9C.roa
File: 831508A2591711F0830307C4DAE4EC9C.roa (raw, json)
Hash identifier: kS9H3O2pK05qyC9Ya+3xTr/cN/HnyLcSoHlVH7ZblBQ=
Subject key identifier: 3C:29:42:41:C4:07:25:E5:F8:D7:3C:5D:85:33:9A:03:94:CD:55:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016140
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831508A2591711F0830307C4DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 20:43:17 +0000
ROA not before: Fri 04 Jul 2025 20:43:12 +0000
ROA not after: Fri 17 Jul 2026 20:43:12 +0000
asID: 55020
IP address blocks: 45.204.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90432 (0x16140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 20:43:12 2025 GMT
Not After : Jul 17 20:43:12 2026 GMT
Subject: CN=68683ce5-c656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:f2:03:f7:07:f6:a8:f7:65:4b:b6:3c:1d:
4d:3f:35:d0:8c:0c:6c:67:a4:7d:5d:45:94:6c:af:
13:c1:9a:f4:ed:54:96:cc:d0:fd:1e:aa:98:6a:58:
fe:5d:af:6b:d1:0f:bd:d9:7c:bc:dd:b6:5b:c3:6a:
e7:72:34:cf:53:e0:4c:cd:cf:36:81:75:fd:4b:3f:
d1:ac:7f:cd:3b:6d:89:43:51:d9:cf:b7:6c:e8:1f:
dd:f0:cf:6e:d1:58:16:83:f0:4b:bb:77:75:d5:42:
a3:44:ec:05:da:d8:19:dc:d6:ef:a1:80:c6:7a:8f:
5b:cb:df:db:08:76:50:af:55:4d:41:30:18:8d:fc:
2b:35:95:cb:36:30:ba:41:ff:30:42:5a:5d:ff:7d:
09:d6:4c:c1:4e:5e:5c:fc:95:1e:b4:21:67:9e:d6:
98:a5:f0:fe:24:c4:85:b7:87:d6:18:1d:08:a7:1f:
61:83:ba:f9:be:e2:f6:20:e1:25:a9:0a:f1:b8:fc:
50:e7:76:b8:83:46:52:66:b1:74:8b:d0:f1:43:d5:
06:62:eb:f8:69:6e:1f:12:f9:9c:9a:17:68:f8:bb:
0e:8b:5e:00:b7:b2:00:91:f8:b6:46:82:41:6e:05:
3f:83:91:04:5a:16:ac:3f:9b:fc:64:d8:1b:88:05:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:29:42:41:C4:07:25:E5:F8:D7:3C:5D:85:33:9A:03:94:CD:55:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831508A2591711F0830307C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:e6:c7:8a:09:7c:62:9a:50:57:43:91:45:f4:29:cf:8a:8e:
40:a0:17:60:9c:7d:f4:87:5b:df:58:b5:09:1c:73:b8:7b:d3:
83:51:fd:51:5f:8f:0e:6f:ad:1d:e5:54:d6:4f:69:8c:fd:ed:
75:20:8f:8d:f1:4b:2c:24:78:83:3c:64:d4:4a:05:94:28:af:
64:de:f8:13:e8:f7:22:5b:1f:45:2e:37:5a:b8:95:28:16:31:
a8:1f:f8:bd:11:2b:28:2f:63:38:0d:e2:ae:fc:05:83:30:b8:
47:c3:cd:b5:d8:d2:59:14:45:45:26:84:2a:76:2a:bd:ac:0a:
e6:76:8d:17:ab:7f:6d:1d:83:00:3b:8b:20:19:d3:a5:44:81:
d0:4e:0a:ad:a3:d5:d4:b5:85:9e:96:ae:d3:5f:81:58:e7:ce:
be:ed:35:ba:b6:90:c3:25:8b:e3:6d:27:fb:a2:cf:a8:cf:2f:
79:bd:7f:1e:3c:69:82:c2:2f:c8:2e:98:ed:1b:ba:5a:9c:3a:
21:f7:53:8c:66:f6:5a:17:3a:94:a5:a3:0a:36:65:42:dc:14:
7b:f9:a0:4d:4a:12:43:6e:9f:fe:01:54:16:c4:71:55:e6:72:
e4:c8:5c:7a:23:a0:8d:64:7a:e4:73:d7:e2:5b:01:fd:03:4e:
bb:14:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:35 2025 by rpki-client