Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA7439E65A9711F09BFD828DDAE4EC9C.roa
File: FA7439E65A9711F09BFD828DDAE4EC9C.roa (raw, json)
Hash identifier: VQCbxJzkx+xRdM5vcl3OVEetX1Nqapbk7JLUuTPuWUc=
Subject key identifier: E2:4F:1D:90:8F:2D:78:92:08:4E:57:2D:24:10:00:5D:A6:EA:64:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016271
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA7439E65A9711F09BFD828DDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 18:35:24 +0000
ROA not before: Sun 06 Jul 2025 18:35:18 +0000
ROA not after: Thu 23 Jul 2026 18:35:18 +0000
asID: 136744
IP address blocks: 45.206.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90737 (0x16271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 18:35:18 2025 GMT
Not After : Jul 23 18:35:18 2026 GMT
Subject: CN=686ac1ec-9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:09:06:2b:78:4e:a4:6c:f1:48:f1:2d:f0:
de:c0:44:b8:59:46:14:57:8d:ed:dc:12:6d:35:a6:
e4:e6:f4:a7:97:75:6c:3e:b0:5b:17:b0:dd:ed:5e:
b9:4b:37:c5:ba:b3:0c:dd:0c:79:53:9d:75:f5:38:
10:be:c2:4b:84:dd:af:6b:79:77:48:95:61:5f:62:
66:28:e6:63:55:70:7b:ec:47:d1:07:10:a1:a7:70:
2a:5c:3f:df:65:57:39:a8:49:f1:ba:07:0d:d0:e2:
ac:9e:d9:08:ce:ab:f0:d5:c6:13:47:a2:b2:b1:47:
97:1a:58:f6:8e:92:9a:fa:ca:6c:dc:9c:d7:27:b6:
ff:87:21:6c:e8:16:80:7d:b6:e4:10:46:18:76:30:
c0:b1:30:e3:fa:cf:ec:85:fc:d4:4c:ed:03:7a:1b:
f8:53:4d:55:22:5e:6c:6f:9c:65:f2:15:36:73:d2:
47:f4:ca:18:34:6b:f1:72:16:90:ac:6f:b3:fb:96:
cb:bb:a7:33:b0:7f:51:90:83:ac:22:37:a8:de:66:
c6:8f:0e:c3:a5:44:f0:33:f4:b7:42:48:23:5b:df:
df:2c:ba:59:b6:f8:b3:f1:01:76:46:31:8e:3a:c4:
14:78:cd:cb:2d:ba:21:d6:08:c3:fb:b8:68:9a:8d:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:1D:90:8F:2D:78:92:08:4E:57:2D:24:10:00:5D:A6:EA:64:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA7439E65A9711F09BFD828DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.60.0/24
Signature Algorithm: sha256WithRSAEncryption
53:75:5d:a5:94:48:07:ad:18:c0:c8:ab:fb:a5:2d:8b:71:fd:
97:7f:2f:07:bc:b0:9b:46:67:de:e3:09:95:b5:2c:d3:92:d1:
5c:87:50:0a:04:94:16:07:e8:3e:35:71:99:43:3e:a2:4a:03:
f2:6d:10:e9:0f:dc:bd:2f:00:c0:03:d7:9c:c9:6b:72:bc:7f:
87:6f:55:62:f8:bd:47:f7:7e:96:ee:18:74:3b:5b:c1:3b:7b:
34:02:3b:36:0b:6b:0f:28:54:3e:d9:5e:98:ff:34:bf:23:26:
da:a1:dc:08:26:fe:c0:b7:27:df:5c:cd:3f:cb:0f:49:a0:5a:
f6:90:d3:9c:31:6d:a8:96:04:3a:27:c0:7c:06:82:c4:4c:62:
fd:1d:94:9d:1a:79:b5:32:25:89:fb:44:b1:7b:aa:f5:36:ac:
c7:b9:1d:9d:5c:48:d0:d9:08:fc:ff:cd:4c:e8:d8:82:16:b8:
0d:5b:ee:f4:5f:07:66:fb:c4:5a:8f:3b:c7:87:da:1e:4c:b8:
48:5d:e9:5c:46:b9:1c:3f:49:53:85:b8:8c:3c:50:23:a1:39:
1e:e6:82:e3:05:ac:b6:eb:6c:dc:a1:ae:ad:61:72:e6:b5:a2:
ef:32:2b:65:01:bb:2c:56:f1:d8:7d:cc:c1:5f:38:7b:d2:d2:
c2:ff:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:23:14 2025 by rpki-client