Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36EABA3437F311F0A6991598DAE4EC9C.roa
File: 36EABA3437F311F0A6991598DAE4EC9C.roa (raw, json)
Hash identifier: tmMuSLCV/JdrKX6W0YXr5wGMJ9Mttkw8rsujN3beQWA=
Subject key identifier: AF:76:2C:1E:F1:81:8B:96:13:15:14:0F:8B:4E:79:24:9D:FB:2E:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36EABA3437F311F0A6991598DAE4EC9C.roa
Signing time: Fri 23 May 2025 16:30:19 +0000
ROA not before: Fri 23 May 2025 16:30:14 +0000
ROA not after: Sun 21 Jun 2026 16:30:14 +0000
asID: 984
IP address blocks: 45.203.137.0/24 maxlen: 24
45.203.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87807 (0x156ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 16:30:14 2025 GMT
Not After : Jun 21 16:30:14 2026 GMT
Subject: CN=6830a29b-c2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:97:b3:3b:75:6d:c1:7a:33:e2:4b:94:9c:
ac:80:1f:04:d8:0e:13:64:39:60:88:69:e5:ae:f4:
61:63:ba:7b:97:e6:c2:f7:48:9e:f6:39:4c:cb:60:
4e:9f:a3:a0:4d:6a:c6:af:45:9c:b1:dc:cf:40:b6:
fe:63:5c:15:1c:0a:ca:28:a1:0d:f0:57:60:d6:7d:
34:20:6e:30:eb:01:cc:fb:d0:c8:84:d9:83:9d:99:
20:90:dd:b4:e0:47:e3:52:cc:a7:1e:c2:2c:1b:ec:
4f:c5:25:c2:1b:a5:84:b6:6e:3b:99:b2:20:3c:22:
40:42:6f:e9:54:52:64:68:a0:b2:4d:b9:d1:ba:c7:
fe:f2:23:2f:e4:9a:1f:54:2d:df:df:39:8a:13:19:
76:fb:85:00:cf:60:f2:99:af:f6:1e:9e:08:cb:dc:
44:58:08:e6:e2:00:8b:3d:81:3c:bd:e9:bf:2f:3c:
33:a0:72:1c:8f:48:3e:29:47:f6:d2:8f:85:f4:b1:
cf:ae:5d:ea:ec:f1:c5:80:00:9b:af:08:91:c3:50:
93:53:0b:ed:0c:c3:f8:fa:ca:a4:96:af:b6:de:6e:
2d:cc:6c:ce:95:cc:a8:0f:56:f4:00:e4:8f:03:2b:
b3:cb:a5:02:a8:1a:d8:12:b0:4a:97:9d:50:11:5f:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:2C:1E:F1:81:8B:96:13:15:14:0F:8B:4E:79:24:9D:FB:2E:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36EABA3437F311F0A6991598DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.137.0/24
45.203.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:44:34:4c:0a:19:11:99:61:55:6a:90:e3:88:b3:3c:12:1e:
69:c2:e2:46:0c:c9:ad:88:b7:f8:a8:f2:13:f7:0a:85:90:90:
9d:0f:d6:0e:20:52:2b:a8:1c:f5:83:5d:e6:77:1c:2a:cb:b2:
9f:12:d8:1a:14:3a:33:d4:c3:f8:da:ae:42:3b:10:53:47:2a:
72:85:2e:06:d8:d4:71:7c:41:c6:68:b4:9b:01:4f:99:af:f2:
f5:66:50:36:af:3f:bb:c9:72:66:ed:70:e1:f0:25:4a:bb:26:
de:4a:53:d0:eb:c1:92:b1:18:34:ab:95:02:d9:58:39:4f:f2:
80:2b:09:f4:85:cc:fe:9e:8d:a6:75:20:95:54:f0:2a:e4:af:
ed:6b:1f:30:f3:77:ec:74:dd:6e:4a:9c:bc:45:fb:5d:b1:2b:
8e:e8:a3:f2:00:2a:55:3d:33:d8:3d:29:f9:5f:3b:a7:a6:2e:
ee:d1:63:9f:77:19:5f:58:b0:32:37:9a:d6:fb:29:f0:65:18:
4f:3a:09:43:fa:62:57:ac:5f:50:d1:32:c7:6e:9d:45:a1:6b:
3d:d6:1e:4a:25:24:7c:54:3e:de:25:09:c3:85:36:42:ff:0d:
2e:2b:96:7c:57:0e:75:12:10:4e:9b:3f:b0:12:43:b9:53:85:
de:90:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:07:51 2025 by rpki-client