Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/090992FC85F511F0900E7397DAE4EC9C.roa
File: 090992FC85F511F0900E7397DAE4EC9C.roa (raw, json)
Hash identifier: Y7lIVf8OLivYuEatQBTB7qTh85bL2xytveCdpP1SAZI=
Subject key identifier: 34:07:48:F6:1B:86:67:88:9D:A6:01:5F:90:1F:CA:55:03:98:68:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017448
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/090992FC85F511F0900E7397DAE4EC9C.roa
Signing time: Sat 30 Aug 2025 22:59:52 +0000
ROA not before: Sun 31 Aug 2025 22:59:45 +0000
ROA not after: Sun 07 Sep 2025 22:59:45 +0000
asID: 54801
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.201.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95304 (0x17448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 22:59:45 2025 GMT
Not After : Sep 7 22:59:45 2025 GMT
Subject: CN=68b38268-2f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:12:eb:91:9e:bc:e1:f5:4f:b0:29:51:c4:
35:b8:dc:fa:c7:a5:f6:28:a6:0d:01:26:03:e1:54:
13:34:13:99:38:2d:6c:04:32:78:ae:f9:8a:8b:40:
73:b3:ad:78:85:49:da:a1:85:16:bf:58:a2:90:e6:
88:70:d0:f1:c2:d3:96:cc:eb:2d:a0:ed:82:aa:88:
e9:1f:25:d2:ca:74:f1:74:88:5f:04:5c:8a:38:0f:
be:bf:e6:21:64:ac:0d:79:02:19:47:90:d3:0f:cb:
f4:5a:1a:e7:30:18:a5:31:d7:c2:8d:03:33:d0:1b:
87:54:ce:77:d8:1a:62:bb:76:bd:96:c2:11:2d:cf:
9b:21:d1:90:41:c1:8a:11:9c:7d:c4:2c:db:40:c6:
ed:3d:c6:85:a8:02:47:8b:79:09:2d:44:d7:58:81:
8d:ca:16:20:cb:69:7c:61:21:08:48:7f:09:ed:a5:
39:49:37:ae:a4:55:df:fc:2c:93:80:49:3d:cc:c7:
54:ca:ed:e7:88:c2:3a:f5:21:bc:0e:44:98:4a:32:
72:e5:1b:78:10:32:e3:79:6e:47:58:7a:25:b7:88:
fa:4c:c6:c4:d0:5d:07:9a:b6:cf:6d:a6:b8:3c:28:
88:0e:7f:be:e4:1b:36:6c:97:60:51:3c:d6:47:4e:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:48:F6:1B:86:67:88:9D:A6:01:5F:90:1F:CA:55:03:98:68:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/090992FC85F511F0900E7397DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.19.255
45.201.214.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:ea:2a:aa:c7:be:7f:ab:35:0d:a5:96:2f:74:e9:09:88:44:
4e:25:51:79:a1:84:ab:9c:d6:40:cc:56:b4:85:71:99:2a:ab:
55:89:45:7e:d3:f3:ae:d1:c8:db:37:76:f5:ab:b1:ca:8c:ad:
c0:e6:fa:40:13:2c:1d:ea:4d:65:8d:ce:9e:f0:a1:f0:23:5f:
a8:c2:7a:d5:d2:e5:48:15:6f:e2:d6:14:9e:96:3e:dd:18:19:
2c:f7:5b:ac:8d:16:d0:29:c3:b5:2a:16:f5:3a:eb:3f:3c:ba:
f0:4c:8c:db:38:08:cb:d8:6f:1d:91:92:c1:6b:9a:d0:28:72:
c5:f1:9c:db:9f:79:b0:3f:db:4a:de:d6:3e:06:e9:b5:38:31:
ba:ad:15:1a:45:14:8d:4b:4d:df:f7:86:b0:7f:ca:75:3b:f2:
b6:01:43:45:e2:d0:33:dc:6c:b8:f1:c0:c8:52:ac:ab:f9:ae:
22:c9:a7:9c:e9:d9:6d:ca:c1:e6:8a:21:f5:94:67:a5:bf:cb:
fc:b4:8d:68:7a:76:f9:8f:59:02:7c:9a:9f:53:50:ea:42:13:
cd:ea:80:6e:ab:6f:42:0d:1a:2a:84:f4:87:dc:49:48:bd:7c:
06:87:d4:02:5f:a6:a6:db:2f:80:62:bc:de:95:cb:a6:67:03:
2c:19:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:11:04 2025 by rpki-client