Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3CA45E25CB811F0A739ACF3DAE4EC9C.roa
File: D3CA45E25CB811F0A739ACF3DAE4EC9C.roa (raw, json)
Hash identifier: BjiQQstt8lcX3/6zjA84HmU+/QwbvjqlT0W2/gJIApk=
Subject key identifier: 34:62:BE:AA:5A:76:C7:C0:C1:BB:D6:1D:D0:2F:0F:C7:0B:80:6E:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3CA45E25CB811F0A739ACF3DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 11:35:35 +0000
ROA not before: Wed 09 Jul 2025 11:35:30 +0000
ROA not after: Wed 23 Jul 2025 11:35:30 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91062 (0x163b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 11:35:30 2025 GMT
Not After : Jul 23 11:35:30 2025 GMT
Subject: CN=686e5407-b8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:dc:c5:71:d3:b1:bd:b2:13:41:08:47:6f:
dc:74:37:a2:d7:f1:f7:80:93:74:1e:b3:46:8e:38:
f6:42:78:7b:94:14:c6:a7:f6:a2:a4:dd:f4:91:ed:
48:72:f3:ad:f0:65:1d:98:65:8e:3c:89:03:1d:28:
9d:df:66:bf:59:cf:0f:e2:31:b5:01:64:21:bb:60:
36:0b:3a:b5:5e:17:8e:3c:6a:76:32:8c:f6:b3:a7:
3a:48:73:48:f6:e0:1f:fb:8e:48:93:4e:c7:f1:3f:
45:f6:2b:35:38:19:78:27:1c:8f:18:b8:04:44:87:
2e:c1:48:c8:fb:7b:44:08:e3:61:75:5b:2c:5d:6b:
da:8f:30:49:43:f0:a0:b6:9b:49:67:34:6c:4d:88:
a4:51:fa:7c:a7:38:4c:4f:4a:2c:c1:a9:6e:a0:bc:
87:c2:3b:5f:3f:e3:f0:92:1a:4f:6b:47:75:77:62:
06:39:46:76:c2:13:81:a6:48:5f:37:30:12:65:89:
93:ed:16:5d:1b:01:2f:9e:f5:bc:80:aa:68:08:ba:
f6:fd:ff:55:31:bc:ed:48:01:2d:ae:26:8a:31:02:
d3:c7:f9:06:c8:8a:b6:5f:53:16:06:71:d6:f9:8c:
8b:dd:cd:2d:a1:26:3a:fc:65:38:29:3a:13:a3:c5:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:BE:AA:5A:76:C7:C0:C1:BB:D6:1D:D0:2F:0F:C7:0B:80:6E:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3CA45E25CB811F0A739ACF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2b:a5:25:ca:c3:2c:fb:9b:85:78:a7:b1:e9:ca:10:02:d7:
92:4f:49:0e:43:d1:57:42:d7:a9:4d:25:77:bd:70:18:b4:41:
c9:55:fb:e4:ed:34:4c:60:03:cd:75:53:fe:4f:a3:b4:6c:af:
fc:b8:2e:88:71:53:84:30:26:17:44:c4:0e:33:73:58:90:2d:
30:a5:c5:bf:23:3e:1a:fe:03:5b:37:30:b5:20:d7:ef:8b:f8:
36:42:09:6d:f9:bf:99:ca:b0:60:b4:23:77:8a:f6:aa:51:b4:
3a:96:2a:29:d9:9e:0e:3f:29:2a:fd:cc:0c:c8:70:94:2f:b7:
23:a8:ee:57:b0:0e:a0:a0:ff:f4:88:3e:d8:a4:84:c5:53:22:
79:e2:30:e4:71:17:4d:d5:73:75:cf:a2:80:21:c1:1d:aa:f6:
47:f2:15:6b:b0:ec:63:f6:0e:6d:2b:b9:0a:e2:e0:3c:d0:46:
0c:3d:98:31:e1:78:d9:48:c6:68:e8:a7:76:14:d2:c4:0e:2d:
49:07:78:30:c8:f6:dd:54:16:87:07:bd:d8:ef:84:dc:22:e0:
45:cd:1b:76:67:03:46:41:eb:93:d1:88:f2:b3:ba:49:f1:49:
b6:12:c5:b7:97:61:11:48:21:7b:a5:aa:f2:b7:55:dd:16:f6:
89:1e:39:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:43:23 2025 by rpki-client