Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9A16FA62ED11F0BAAAE4BDDAE4EC9C.roa
File: BC9A16FA62ED11F0BAAAE4BDDAE4EC9C.roa (raw, json)
Hash identifier: +U3mBaQ7FW/+JMCi8t30uJq32sNgU9uApudM56mIqp0=
Subject key identifier: 52:E9:C8:38:99:21:45:CC:D2:03:06:4A:08:16:AF:4D:1D:0A:8B:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9A16FA62ED11F0BAAAE4BDDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 09:09:26 +0000
ROA not before: Thu 17 Jul 2025 09:09:22 +0000
ROA not after: Fri 22 Aug 2025 09:09:22 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91586 (0x165c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 09:09:22 2025 GMT
Not After : Aug 22 09:09:22 2025 GMT
Subject: CN=6878bdc6-17b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:70:d5:59:4f:6e:30:78:5f:25:62:d3:e2:
c7:6b:b6:16:37:b0:9e:61:e3:5e:da:b9:b7:fd:7d:
1d:c2:7b:61:57:89:33:99:82:a4:f3:53:f0:0c:1b:
92:2b:f1:60:e4:2b:1f:ea:f7:d8:24:a6:9e:8e:af:
85:00:80:2b:1f:b5:85:6d:7e:ab:1a:e2:2e:b1:69:
cb:cf:0a:0b:86:bc:c0:86:0f:fe:24:b8:d2:27:25:
71:c1:c7:39:1b:3a:dd:1f:99:95:c4:43:97:8f:df:
87:15:23:84:87:04:3d:c0:a0:18:23:26:0b:c5:6d:
77:2f:fe:bc:0d:6c:03:d8:aa:41:a4:52:41:e6:4d:
e1:41:9e:85:ec:ff:4b:13:43:39:12:97:c4:8e:ba:
3c:61:05:11:36:2c:29:23:d8:39:c1:bc:d7:b0:5a:
b0:b0:a0:63:b8:32:c8:70:15:72:3c:2e:4b:ae:df:
c4:67:b1:f9:0a:4d:62:ba:41:5c:c1:69:33:7c:2f:
dd:00:be:e5:06:7e:af:15:a8:86:9f:a2:af:33:4f:
6e:35:0d:5c:d8:ac:bc:49:4a:73:58:4f:09:82:31:
1f:2e:f0:c1:f2:d8:ed:cc:bf:bf:6f:98:32:97:a9:
83:ac:fb:4f:a7:79:5d:88:74:42:a5:c8:5e:8e:2f:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E9:C8:38:99:21:45:CC:D2:03:06:4A:08:16:AF:4D:1D:0A:8B:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9A16FA62ED11F0BAAAE4BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:31:e3:bd:63:1c:87:ac:df:14:f9:ec:54:1b:bc:aa:05:4a:
8e:01:20:27:86:35:49:de:00:43:e6:2a:a6:6f:c4:83:f4:96:
7b:97:0e:62:dd:ec:cb:a6:17:8e:30:aa:cb:13:d0:68:3c:44:
4c:e6:6e:12:b8:65:61:58:13:0a:c8:ad:8e:bb:2c:d6:2e:91:
65:0d:a7:a7:7f:db:74:31:8f:d7:7c:72:0f:5e:89:f9:f7:14:
73:3f:9d:f4:40:41:0c:9a:82:a4:f0:39:61:65:f9:00:0b:64:
f7:ae:e5:ac:af:04:69:93:92:fe:c3:a6:bd:a8:a8:98:3c:8c:
63:fc:6e:b9:37:ec:d7:c1:21:99:7c:42:a3:61:b2:42:e1:6b:
a5:2d:1b:04:e1:6b:66:2b:0a:83:12:f4:c1:fb:6b:e4:94:40:
3e:9f:0f:d3:88:be:0d:42:c1:81:76:fa:ca:75:83:b9:23:22:
d3:60:9f:62:ea:3c:1e:7f:39:c9:62:00:6a:f4:eb:12:a1:8c:
88:65:d3:bf:5d:65:5e:ce:e9:cd:03:e7:81:d7:d5:d9:d8:cb:
98:d8:da:c5:a4:fa:6a:43:ff:fc:f2:d2:f6:e7:55:13:1b:70:
fe:55:e4:60:63:64:ab:14:66:0f:19:6a:9f:fa:6c:7f:9d:b9:
0e:e4:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:17:26 2025 by rpki-client