Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77CEF0FC83A611F0AEB28586DAE4EC9C.roa
File: 77CEF0FC83A611F0AEB28586DAE4EC9C.roa (raw, json)
Hash identifier: oqG1IYfrOvob72RUQsqtazLS0ErnYYCjPuwavAIXVM4=
Subject key identifier: FF:7C:81:C4:6A:FD:83:3E:97:3D:90:9C:1D:C7:1F:E2:A7:47:53:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01721B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77CEF0FC83A611F0AEB28586DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 00:32:25 +0000
ROA not before: Thu 28 Aug 2025 00:00:20 +0000
ROA not after: Sun 23 Aug 2026 00:00:20 +0000
asID: 138995
IP address blocks: 45.192.167.0/24 maxlen: 24
45.192.168.0/24 maxlen: 24
45.192.169.0/24 maxlen: 24
45.192.170.0/24 maxlen: 24
45.192.171.0/24 maxlen: 24
45.192.208.0/24 maxlen: 24
45.192.209.0/24 maxlen: 24
45.192.210.0/24 maxlen: 24
45.192.211.0/24 maxlen: 24
45.192.212.0/24 maxlen: 24
45.192.213.0/24 maxlen: 24
45.192.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94747 (0x1721b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 00:00:20 2025 GMT
Not After : Aug 23 00:00:20 2026 GMT
Subject: CN=68afa399-5f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:90:7f:c8:32:49:cc:75:8e:ad:d1:a9:bd:
3f:69:10:e5:c9:b3:00:0b:af:98:3b:8d:99:ed:6e:
78:bd:c1:b3:d6:4a:d1:73:1e:60:3c:06:d3:45:4b:
98:ac:58:32:83:fe:1f:4a:35:f5:3e:54:55:51:60:
6f:14:38:53:bd:5e:4f:2e:d9:11:80:cf:3f:f4:b1:
38:f1:1e:1d:dc:67:c2:dd:bb:51:85:89:33:6a:47:
ee:a5:1c:98:8e:29:ad:e7:21:91:05:bf:07:a8:86:
a6:54:9b:14:44:5f:9d:df:9c:ee:44:e8:29:27:6c:
77:df:44:ac:e3:e6:55:2b:3e:a6:c3:57:6e:16:7b:
58:c5:32:51:4a:e2:04:d6:3d:2f:b7:ed:6e:50:57:
2d:74:28:10:c7:a1:b3:9b:81:d6:9f:4c:2f:95:59:
14:d5:f8:b0:bc:49:ba:f7:a0:63:47:37:6d:33:09:
c7:18:bb:da:1c:ec:49:d5:8b:22:91:49:df:cc:54:
db:6d:3c:e3:f1:c8:cc:87:74:dd:f2:3e:f3:4f:27:
8f:d5:15:1f:e0:df:89:d8:49:13:36:34:03:3f:eb:
4e:93:1e:0a:48:7c:fc:53:9d:45:b7:30:71:26:bf:
e0:e4:d2:c5:b9:1b:bb:62:0c:45:b1:ed:9e:44:2f:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7C:81:C4:6A:FD:83:3E:97:3D:90:9C:1D:C7:1F:E2:A7:47:53:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77CEF0FC83A611F0AEB28586DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.167.0-45.192.171.255
45.192.208.0-45.192.214.255
Signature Algorithm: sha256WithRSAEncryption
8d:98:a5:68:e0:36:f5:fc:39:cb:06:56:6f:b5:c6:3f:e8:0b:
7a:b1:89:0b:72:b7:0c:17:a5:b1:58:ec:af:5f:f2:77:cc:f3:
51:88:e2:ec:94:39:da:b7:fd:c9:78:b5:d0:a8:84:70:cc:4e:
0d:6e:bd:b5:eb:29:d4:ec:23:42:e4:fe:c8:75:cc:e5:d9:85:
35:72:47:2f:c6:21:05:bb:31:08:4b:77:25:f6:82:f4:95:99:
ea:3c:b1:35:e3:73:ca:c6:cb:01:88:01:2e:01:58:f8:b7:c7:
46:21:38:64:dd:9e:ca:bf:81:46:d3:38:b5:ce:35:e2:81:f0:
d7:e2:b5:f2:95:12:e1:f5:a9:bc:c4:e7:f2:49:4a:56:ab:16:
16:78:dd:63:6a:94:5b:b0:dd:4a:6f:25:fd:5d:46:3b:a6:e5:
1b:3c:db:7e:83:08:39:2b:87:b9:44:36:df:db:57:38:0e:4f:
ab:21:aa:97:0d:10:eb:3b:b2:a5:e3:79:cc:75:ae:23:65:e1:
83:ec:fb:86:2f:61:25:ee:16:21:75:07:2d:3a:45:45:8a:da:
d5:fc:bf:fe:17:da:a0:e6:75:5f:16:7b:48:37:f1:f3:d4:22:
ae:ba:91:cf:5f:96:e0:42:c7:28:91:32:dd:79:08:52:40:52:
7c:ff:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:59 2025 by rpki-client