Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3971AFB487F911F09D412BD0DAE4EC9C.roa
File: 3971AFB487F911F09D412BD0DAE4EC9C.roa (raw, json)
Hash identifier: YxwqM++AB6AoPzwf3qLUzsNv8Q8FgHOJtDqX+RfRonA=
Subject key identifier: 55:E2:7A:30:2C:A5:67:F0:CA:DB:29:53:E6:07:4F:2A:16:E8:B5:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017678
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3971AFB487F911F09D412BD0DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 12:34:53 +0000
ROA not before: Tue 02 Sep 2025 12:34:48 +0000
ROA not after: Tue 15 Sep 2026 12:34:48 +0000
asID: 18233
IP address blocks: 45.199.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95864 (0x17678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 12:34:48 2025 GMT
Not After : Sep 15 12:34:48 2026 GMT
Subject: CN=68b6e46d-229a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:28:79:3a:13:61:aa:c2:cd:b4:dc:ea:fb:
53:88:ca:d6:6f:61:27:87:37:86:1a:cc:89:47:e7:
ab:e3:0c:e6:61:89:f9:28:fd:98:40:0f:e5:ab:21:
cf:66:7a:92:a8:dc:6d:f8:e4:f1:f3:f6:cf:92:a8:
e6:33:d2:c6:7d:2f:6b:5c:6b:aa:38:46:fc:bc:c7:
3c:0b:f6:ba:b0:8c:83:c9:dd:1a:03:d4:b4:a4:c6:
85:56:1b:2c:d2:68:ce:7a:8c:8f:33:f7:5a:c5:11:
91:aa:92:c0:23:0a:cc:e2:99:6e:f1:ce:47:59:d0:
c0:53:94:e0:f0:8a:87:5e:b9:66:91:25:06:e3:5a:
96:92:8c:8f:7d:2c:98:ab:56:e2:88:a4:79:cc:d4:
8e:b5:05:e3:db:1c:a8:e4:d8:83:25:c6:9d:e2:8d:
92:e1:30:6e:7d:e8:fa:99:9c:06:f3:a3:8f:b8:91:
ad:db:24:30:d3:3e:c9:b4:f1:d6:dc:ca:11:ff:08:
d4:84:c4:cb:78:ff:ff:10:04:d7:a4:ce:68:61:58:
e5:a0:6f:1e:fb:b4:9f:df:8a:59:e7:c4:11:45:9b:
61:3f:80:b6:1b:19:c8:ba:0d:1d:76:76:1c:05:f0:
b7:78:05:a1:48:82:93:b9:eb:41:ce:85:23:39:6b:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E2:7A:30:2C:A5:67:F0:CA:DB:29:53:E6:07:4F:2A:16:E8:B5:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3971AFB487F911F09D412BD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:de:d4:1b:2c:fa:ba:a6:92:97:f9:0d:ad:2d:82:44:fc:2e:
a8:2f:69:a9:d1:36:f7:11:00:24:de:1e:95:64:14:26:0a:fe:
e9:dc:17:71:ec:02:92:b3:14:77:5b:f3:e4:c8:47:6b:88:4e:
9a:0c:ee:c5:c5:a2:1f:f7:66:d3:b1:45:9a:6f:65:e8:9e:3f:
e3:10:15:45:5c:be:ae:bf:46:77:2a:7c:7b:ce:87:b4:84:ee:
c1:c7:5f:a2:91:b6:2b:6f:14:42:63:06:62:08:20:8f:c0:fd:
b5:2b:db:a1:fc:a4:d6:b1:8d:af:ef:9d:ec:5b:4d:c7:f3:46:
64:e1:6b:ce:5a:c1:48:ad:b5:b6:46:67:9e:34:d9:a9:b6:db:
4c:4b:a5:fb:a6:26:89:47:f9:ff:05:8d:80:1e:9b:0b:20:d6:
2a:31:53:b1:77:9a:4c:44:51:54:a9:d0:d7:42:f5:dc:c6:09:
71:9c:93:d4:08:17:d3:ad:f8:3a:59:76:b4:d9:42:0e:46:9c:
8a:59:fc:07:98:a6:80:d6:87:ba:c4:36:86:16:bc:f5:e0:42:
20:51:3e:86:5c:da:e4:51:35:62:46:79:fc:81:82:4f:d6:b5:
1f:47:81:22:7e:68:1d:d7:bd:27:a6:5d:12:c9:22:cd:86:30:
ea:d6:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:10:59 2025 by rpki-client