Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CF283E85CB611F0BBB636E6DAE4EC9C.roa
File: 8CF283E85CB611F0BBB636E6DAE4EC9C.roa (raw, json)
Hash identifier: wrMH3LdSB18gYqBQb0oHVuzyQ7FRea+VkLuT87XLCG0=
Subject key identifier: E1:66:E6:B6:2D:92:36:0D:6A:F5:F9:C0:33:80:93:34:43:96:3A:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CF283E85CB611F0BBB636E6DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 11:19:17 +0000
ROA not before: Wed 09 Jul 2025 11:19:12 +0000
ROA not after: Mon 11 Aug 2025 11:19:12 +0000
asID: 203020
IP address blocks: 45.196.0.0/21 maxlen: 24
45.196.8.0/22 maxlen: 24
45.196.12.0/23 maxlen: 24
45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91053 (0x163ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 11:19:12 2025 GMT
Not After : Aug 11 11:19:12 2025 GMT
Subject: CN=686e5035-4a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:13:b3:d7:85:b9:30:18:56:9d:14:c2:36:
12:18:9d:a4:b6:60:b4:e9:68:18:ff:67:d7:fa:a7:
37:18:83:1a:5c:75:5e:78:bd:2e:bc:fd:bc:fd:61:
41:5d:c8:2c:4a:a4:c3:d3:b7:fe:e2:88:69:d9:eb:
53:6d:93:65:e7:18:72:8b:23:b4:65:79:61:f8:ae:
85:f4:73:86:da:09:ae:a3:8a:19:97:89:81:64:3b:
df:9a:b9:be:3a:e3:1a:cc:44:20:19:42:b6:7a:93:
e3:3c:70:3d:cb:d3:b2:e5:5f:b6:25:e7:c8:3f:d4:
68:a0:fc:d1:db:5e:73:d6:ac:9b:22:1e:6e:7d:e5:
f6:42:91:d2:a7:9c:0e:c5:9f:51:44:33:6e:64:89:
ab:f9:aa:50:62:22:ef:56:39:79:5a:13:c6:6b:19:
dc:0a:2c:0e:06:04:33:e5:7b:a6:04:da:d1:2a:30:
0c:0c:2c:9c:45:55:fc:58:ed:2f:e6:9b:18:f6:e6:
2e:b8:84:f4:59:d3:63:0b:f1:f6:6e:e7:93:cf:8f:
ac:ca:9c:00:d5:64:68:d1:92:22:38:c9:13:df:b4:
60:b4:2c:4c:cd:8f:2c:9b:a5:67:4f:7f:e6:e3:e6:
f2:af:8d:4e:4d:5d:ca:24:05:ca:a1:c6:67:67:82:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:E6:B6:2D:92:36:0D:6A:F5:F9:C0:33:80:93:34:43:96:3A:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CF283E85CB611F0BBB636E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.0.0-45.196.13.255
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
06:36:f1:50:fd:23:37:ca:56:bf:75:b8:b8:9e:ad:3f:c9:11:
7a:b4:96:4b:2a:c8:f3:72:87:ec:e3:ac:ff:cd:48:cc:31:04:
9b:59:72:17:62:cc:20:74:97:db:e1:b7:79:aa:41:c3:89:56:
91:f9:01:d5:64:d1:47:30:53:ab:18:b7:b2:df:ad:6d:60:9a:
0d:cc:59:db:71:73:71:7d:44:6f:7d:25:02:f6:97:df:01:17:
f0:4a:d1:ed:5c:95:4e:ee:d1:4b:e1:46:7d:48:c9:d3:09:24:
56:68:ec:37:c6:bb:66:91:0c:9c:c4:ca:08:c8:28:3e:f8:2f:
7f:f2:b7:d5:89:56:c2:69:72:88:0f:fe:eb:06:6b:25:80:a7:
72:e8:c6:c8:ef:d1:86:fe:22:c8:4f:8c:c0:af:14:3e:72:fd:
c7:2e:94:3a:45:e4:c0:af:e3:a6:29:4f:1e:e4:28:7e:bd:b0:
c9:63:90:30:4c:b9:1d:bf:f4:0f:3d:37:36:37:a6:82:60:85:
51:2e:66:ff:fe:83:2f:f1:55:54:8a:11:ed:9e:fc:84:5f:9e:
98:2a:d1:49:5f:fd:ac:67:ef:36:2c:6e:d2:1e:4f:4c:cd:d5:
60:4d:6e:fa:e4:74:93:c7:99:66:da:e3:9d:38:f0:4f:ca:a0:
4f:bd:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:04 2025 by rpki-client