Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A91B9F3A616D11F0B53C68E8DAE4EC9C.roa
File: A91B9F3A616D11F0B53C68E8DAE4EC9C.roa (raw, json)
Hash identifier: wFgRGGy3Cyn616ggJQufTPKwCvK0NL/fo6QGHgBXhuw=
Subject key identifier: 6B:75:5C:55:AC:22:58:E1:54:71:8D:14:24:77:20:6A:89:58:B5:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016537
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A91B9F3A616D11F0B53C68E8DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 11:20:07 +0000
ROA not before: Tue 15 Jul 2025 11:20:02 +0000
ROA not after: Fri 15 Aug 2025 11:20:02 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91447 (0x16537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 11:20:02 2025 GMT
Not After : Aug 15 11:20:02 2025 GMT
Subject: CN=68763967-cf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e7:08:0f:64:53:e4:a0:d8:dd:69:de:4c:bf:
0c:52:72:9b:8a:30:04:1f:43:63:88:da:60:5f:3d:
69:bf:b6:1e:7c:ae:e3:41:af:a1:ef:0a:cf:a5:72:
b5:eb:4e:be:8b:9f:96:72:b2:a8:91:e2:94:86:10:
d2:19:b6:75:9d:7a:33:01:1e:d4:bc:85:13:60:de:
a1:fe:a9:8c:84:bb:7b:bb:51:d3:06:8b:15:3f:29:
2f:96:91:1b:b4:1d:7a:c4:3c:9d:70:f5:ad:8b:26:
ec:55:d0:4f:ba:d3:e9:da:1c:bf:09:72:45:49:3f:
0c:18:50:9e:f6:c3:53:a4:b0:62:ef:6a:f2:fb:4c:
b2:a4:e5:d7:8e:48:23:f5:98:e5:4b:d2:6a:d3:70:
e3:22:ad:ee:e3:14:3d:a4:79:4a:bb:a2:02:41:05:
4c:55:38:76:06:39:56:4c:4e:ee:12:ab:b8:d6:ce:
94:c2:db:81:ec:c5:9b:3b:ca:b1:e1:45:24:03:94:
76:5c:46:50:2d:0b:0b:ca:0a:83:a6:34:d6:7f:01:
d2:27:39:8c:61:db:79:27:6e:d1:d7:3a:8c:3d:a1:
be:b6:5f:c4:39:3d:67:fd:b1:c7:3a:dd:a2:8c:29:
a0:5c:7a:5e:ff:53:8d:8a:bf:c5:70:23:43:f9:b8:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:75:5C:55:AC:22:58:E1:54:71:8D:14:24:77:20:6A:89:58:B5:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A91B9F3A616D11F0B53C68E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:81:d7:ad:14:be:7c:28:36:cf:8d:34:c5:56:51:f8:42:08:
7a:45:db:1f:49:49:ef:c1:c1:73:74:66:02:53:b8:c2:3c:41:
72:07:a0:cb:af:5c:08:2b:82:f4:6a:e6:af:5d:b7:b2:ac:91:
0d:16:e4:43:97:87:0d:26:05:de:ba:da:2b:1c:04:ba:b9:90:
b1:f2:28:87:5e:67:1b:85:11:b6:4d:17:40:f5:fd:d4:52:2d:
0f:71:a5:76:bf:ca:0d:b6:be:ae:21:bf:e3:23:63:16:0f:4b:
7b:a7:3a:24:8a:1a:62:9e:7c:be:bf:6c:ad:bb:3e:e7:bf:1e:
bf:87:d5:36:e1:5c:d2:e2:81:09:ea:4e:b1:e0:73:03:31:fb:
57:31:53:5a:f2:95:a3:43:e9:2c:7b:d4:fb:d4:b7:be:ab:1a:
cf:ca:55:e6:c8:fe:32:74:8d:f3:7b:d6:0f:2b:31:0d:f6:43:
3b:5d:c6:64:90:28:5c:61:3d:97:bc:fa:ec:43:43:80:a7:c8:
68:11:6c:50:08:74:2b:f3:0f:58:9f:18:5d:47:ba:9f:49:6c:
42:ea:22:46:26:b6:53:65:98:40:6f:54:62:3d:92:b9:28:a9:
4b:00:b3:90:c5:5e:22:8b:21:e6:0c:66:0c:fa:74:41:72:3d:
74:c1:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:01 2025 by rpki-client