Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1153DE26831711F0A9CA35EBDAE4EC9C.roa
File: 1153DE26831711F0A9CA35EBDAE4EC9C.roa (raw, json)
Hash identifier: tbnNNHxxmOGKIktNI86KQy1c/g0mMnQ+Zf9/LJawuZI=
Subject key identifier: 43:EF:EE:5B:95:6F:90:FB:AC:62:64:70:0A:F1:B2:43:FF:16:18:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01711C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1153DE26831711F0A9CA35EBDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:25:55 +0000
ROA not before: Wed 27 Aug 2025 07:25:50 +0000
ROA not after: Thu 02 Oct 2025 07:25:50 +0000
asID: 395793
IP address blocks: 45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94492 (0x1711c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 07:25:50 2025 GMT
Not After : Oct 2 07:25:50 2025 GMT
Subject: CN=68aeb303-44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:e8:fa:b2:19:af:c0:e0:1c:91:46:92:29:
43:39:a2:8b:82:c6:5a:8a:20:d0:f5:3d:f3:5c:9e:
00:27:d0:f8:79:bc:25:89:b1:73:56:75:74:d2:d8:
de:ab:d2:1f:0d:5d:82:47:83:8f:d3:4e:ff:a7:ac:
78:94:f6:db:cb:a7:d9:52:ce:41:b6:86:45:82:2f:
54:8e:ee:bf:65:f6:ce:b8:86:4b:4c:70:da:ad:d8:
64:e9:f1:f2:86:0f:e1:9c:23:b3:5b:83:99:4c:75:
c4:ce:4e:88:91:95:80:0a:93:8d:23:f2:6f:50:2b:
94:57:96:cb:85:d4:7c:26:c4:0a:b4:7a:d2:4e:07:
48:5a:ba:46:47:b8:15:55:46:f8:76:a1:03:b3:4a:
31:d1:6f:e9:1c:ed:01:f2:07:c4:3e:4d:2b:6e:8f:
36:b8:8d:c5:1a:80:3c:03:19:c4:9c:37:b0:36:e8:
50:07:ce:b3:d6:31:f1:96:36:ed:05:45:53:19:4c:
29:d7:9c:65:c7:f8:fd:3d:a0:b6:d5:e0:bc:7b:44:
60:bc:57:e5:2a:87:d0:29:c8:d0:f0:6d:6c:4a:15:
b8:be:0c:1d:1c:c0:bc:75:b4:f0:10:b1:d2:30:7f:
1d:62:61:8e:0b:ce:fc:85:cf:fd:48:92:a2:12:74:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EF:EE:5B:95:6F:90:FB:AC:62:64:70:0A:F1:B2:43:FF:16:18:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1153DE26831711F0A9CA35EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:e6:52:26:07:92:92:4b:70:21:c0:5a:0b:03:2b:6c:ad:ab:
09:6c:dc:a1:84:1d:73:46:22:94:43:eb:c1:c7:0a:7e:39:00:
b3:65:33:0f:8e:56:b6:ce:1a:6c:89:98:96:41:63:9b:2a:9c:
c0:23:f7:9c:e5:f7:d1:e8:82:1d:44:99:d4:a3:c5:12:9f:8e:
f8:32:8d:1a:ad:4a:7e:72:6d:fc:a2:78:83:95:43:92:a5:be:
91:0d:9a:d0:63:f2:19:75:d9:e5:69:90:a0:18:3c:9d:ef:42:
14:7d:c9:b3:02:05:ac:3f:ae:92:a1:2a:e2:01:d7:04:98:b0:
b5:b5:ed:cb:fa:5a:b9:93:db:5a:e4:c6:fc:f3:bc:dd:e1:3d:
81:07:94:53:6d:76:c9:f4:c8:80:0d:11:4c:a5:a9:e6:53:e5:
1b:ac:ab:7e:3d:aa:e3:b3:47:ba:5a:9a:d7:4f:f0:cf:6d:0a:
94:73:59:d3:b2:ab:92:f1:67:24:7c:37:79:4e:50:ec:0b:57:
92:ea:7b:76:a5:59:81:b7:73:f7:9d:18:96:63:55:d7:00:f4:
81:a4:54:f1:78:c8:81:ad:ff:44:59:e9:9c:50:86:d8:78:72:
a7:44:99:d0:54:e4:64:0f:e1:5e:d8:e3:d1:83:2b:52:bd:17:
b5:66:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 21:20:48 2025 by rpki-client