Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE369625D7911F09B4A62DFDAE4EC9C.roa
File: AAE369625D7911F09B4A62DFDAE4EC9C.roa (raw, json)
Hash identifier: bhOqAS/fYHiT4l/YGsKROvYKK/nQFqaao95LejP7rgw=
Subject key identifier: D9:B8:92:A5:64:90:2D:8A:98:24:BD:D4:51:18:6F:88:DC:4C:2A:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01647C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE369625D7911F09B4A62DFDAE4EC9C.roa
Signing time: Thu 10 Jul 2025 10:35:59 +0000
ROA not before: Thu 10 Jul 2025 10:35:54 +0000
ROA not after: Thu 18 Dec 2025 10:35:54 +0000
asID: 13335
IP address blocks: 45.199.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91260 (0x1647c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 10:35:54 2025 GMT
Not After : Dec 18 10:35:54 2025 GMT
Subject: CN=686f978f-d946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:df:32:79:2a:c8:32:25:6b:1b:9d:b9:c1:
3b:ba:3b:ef:7e:dc:d3:ab:6c:e8:09:f1:62:97:b2:
b9:c7:d6:67:14:dc:77:c5:b7:81:b4:ee:b6:ef:9d:
34:b9:12:34:21:87:d6:b3:c8:a3:23:53:73:74:4c:
5f:09:0e:64:ce:40:29:e4:20:b7:87:bc:75:90:35:
e0:31:2c:08:8c:7e:fb:c0:aa:90:19:0b:f9:5c:92:
e5:e9:20:4a:37:a4:c7:99:ed:dd:28:e5:e7:e3:49:
e7:cd:ca:9e:ed:7b:2e:ae:65:2d:2a:12:4f:70:7f:
f5:48:c4:53:49:f7:a1:28:45:e8:70:ef:40:b4:cd:
ae:a1:24:b6:c4:77:0c:40:a0:f8:35:1e:e9:b4:20:
7a:b2:9d:39:5a:f0:44:91:2b:ba:5d:e0:58:6b:3d:
68:49:62:90:83:e0:49:e7:42:39:98:15:c2:e8:3a:
8f:1f:3c:68:1b:21:35:b7:96:84:fb:35:42:04:0c:
19:df:3f:bf:cb:ef:87:c3:7d:14:92:2a:ce:37:95:
df:cb:e2:3b:9d:d1:d6:49:d0:a1:36:94:28:5c:5e:
7b:0b:ea:97:70:26:1d:cf:13:3e:b0:62:c9:bc:30:
56:3d:c9:ea:76:0a:cd:1d:97:50:51:ed:9f:7d:53:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:92:A5:64:90:2D:8A:98:24:BD:D4:51:18:6F:88:DC:4C:2A:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE369625D7911F09B4A62DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.183.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0b:04:62:b4:b5:38:ea:9b:ae:0f:64:05:d5:4c:f2:81:bf:
6f:1e:da:1f:8a:ee:f6:69:1f:97:ab:d0:65:6a:b2:ac:30:74:
32:ee:ba:4e:01:d8:08:17:06:b7:65:32:03:e8:96:ef:61:90:
6a:28:a0:b9:2a:4b:d4:19:92:b2:60:91:b6:08:07:76:af:bb:
a5:f1:c9:c5:a9:62:dd:78:f0:be:15:47:69:5c:b2:bd:e7:a2:
9d:4a:45:8d:c4:4c:a0:f1:96:49:da:fe:c2:62:78:a5:e2:38:
b9:31:0d:11:c5:5c:d5:8e:0d:5b:40:db:8b:11:67:68:57:31:
26:61:f6:dc:e7:1e:1d:78:47:b6:b7:11:71:37:ba:2d:ba:d7:
f5:9d:46:1a:37:bc:b1:46:20:81:d3:30:eb:3d:94:f6:66:dd:
18:d0:98:aa:c0:c9:b4:b6:60:cc:ae:6d:44:85:9e:89:86:5a:
d1:5a:1b:d8:83:a8:c8:3f:c2:96:20:d8:57:2e:4a:e0:9c:54:
a2:93:e3:35:85:bc:54:4b:0e:75:fe:b3:4e:8b:50:bc:88:fc:
68:98:16:f6:82:41:4c:4c:04:0d:0d:3f:e2:b2:b9:6f:90:c0:
1c:a8:e1:1d:bf:a6:0f:0d:7f:58:e2:25:65:b1:22:a2:5a:24:
a7:d8:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:32 2025 by rpki-client