Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/977C4CA6833311F08C0983A3DAE4EC9C.roa
File: 977C4CA6833311F08C0983A3DAE4EC9C.roa (raw, json)
Hash identifier: vEvCynnCN9VL0yC3xU3L4MuTwAnrj8kpl/zqe0AauVA=
Subject key identifier: 36:24:A0:ED:1F:46:55:9C:7A:18:EB:C2:F0:68:54:A9:31:37:68:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01719A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/977C4CA6833311F08C0983A3DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 10:50:06 +0000
ROA not before: Wed 27 Aug 2025 10:50:01 +0000
ROA not after: Fri 03 Oct 2025 10:50:01 +0000
asID: 61112
IP address blocks: 45.207.156.0/23 maxlen: 24
45.207.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94618 (0x1719a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 10:50:01 2025 GMT
Not After : Oct 3 10:50:01 2025 GMT
Subject: CN=68aee2de-953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:20:a1:3f:24:c3:a6:df:06:cc:ed:8f:ac:
1e:8d:35:0b:51:e2:aa:f6:0e:e7:a7:df:50:d8:3b:
c4:00:68:39:41:31:e7:0d:72:4f:36:14:84:2c:8b:
5a:ea:f0:b9:d1:2b:cb:f0:93:e5:64:e1:5b:9c:7f:
6f:f7:3e:ce:1c:bd:ad:7b:6f:94:a7:47:8b:73:fc:
c5:a7:94:5e:5c:70:7e:2c:05:08:07:16:0b:9e:e3:
e5:36:96:ac:4e:ad:d2:b1:f2:77:b5:02:aa:05:7d:
78:c3:8b:87:bf:df:a1:c0:43:81:f2:58:f1:49:53:
22:ec:71:82:77:f2:fd:3d:25:f4:84:87:06:77:32:
47:e4:a2:ce:b3:47:3c:ad:1e:a7:94:e8:ec:e5:51:
99:4b:65:e4:23:a0:05:c8:c1:9a:f4:b3:96:95:60:
78:c8:97:c5:a9:47:c5:ae:0b:e2:2f:ed:36:f9:c7:
3e:b3:69:39:61:f8:6e:60:47:77:62:3a:d3:7d:a2:
e4:67:56:c1:64:26:36:83:9c:8d:76:5a:1e:b2:ac:
1b:b0:5b:94:cb:46:4a:3c:94:bf:fa:cb:6b:0e:67:
5b:c8:e2:36:36:a4:49:fc:f8:71:37:a7:cf:da:3d:
5b:69:03:ca:63:20:a1:26:49:0d:62:4c:a6:09:87:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:A0:ED:1F:46:55:9C:7A:18:EB:C2:F0:68:54:A9:31:37:68:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/977C4CA6833311F08C0983A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.156.0/22
Signature Algorithm: sha256WithRSAEncryption
74:f6:00:aa:57:ec:61:7d:ad:99:e5:ef:a6:d1:e9:a6:5c:f2:
e4:e5:08:04:1c:e6:14:f2:9d:21:2b:ee:75:f9:84:e8:ca:70:
80:a0:e2:67:af:aa:3a:db:03:94:f3:a1:5d:c9:ef:81:bf:cf:
c9:79:4b:e1:b8:8b:80:35:60:fd:ef:1c:2c:f4:16:36:69:06:
c3:e4:80:12:04:82:dc:6f:0d:6d:28:d9:5f:1c:fa:68:7d:1f:
b5:e0:1d:d5:23:38:24:bc:c1:a9:c2:54:e0:78:43:e9:8e:8b:
19:94:35:d1:9d:8e:dc:a7:d9:6b:16:69:56:5d:be:6a:e4:d9:
3d:63:2c:79:96:01:e6:4f:c2:7a:e5:3b:b3:24:2f:97:2a:cc:
ae:e6:cf:fc:c0:9a:21:75:70:b7:6b:6b:f0:53:4a:fa:2e:eb:
88:cf:59:d9:fa:f1:13:dd:c7:84:9b:d7:f9:8b:b2:5c:7e:c0:
93:5b:d7:c0:e3:c9:e9:14:dd:6b:e5:f1:ff:45:43:75:1d:5f:
76:76:a2:56:82:22:38:8c:37:1d:92:ee:05:d0:9e:c9:dd:30:
04:a7:d2:18:23:88:54:af:51:d7:60:1d:fb:be:22:ad:e8:bb:
9f:dc:18:73:d0:58:54:de:ab:b4:42:8b:fd:ee:80:a7:e2:09:
56:e0:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 21:18:22 2025 by rpki-client