Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A14264C6833511F0BB27CDB0DAE4EC9C.roa
File: A14264C6833511F0BB27CDB0DAE4EC9C.roa (raw, json)
Hash identifier: D+J/0OS1xzXwPgb3wyPTcRxpiEUecxYddSMRRQmthI0=
Subject key identifier: 4C:E4:F6:F1:02:C2:36:05:77:FA:5C:9B:2B:61:70:AE:6A:8D:C2:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A14264C6833511F0BB27CDB0DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:04:41 +0000
ROA not before: Wed 27 Aug 2025 11:04:36 +0000
ROA not after: Fri 03 Oct 2025 11:04:36 +0000
asID: 151407
IP address blocks: 45.207.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94627 (0x171a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 11:04:36 2025 GMT
Not After : Oct 3 11:04:36 2025 GMT
Subject: CN=68aee649-260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:2a:ca:94:70:31:54:05:9f:42:55:e0:92:
67:89:79:c1:0b:cf:fe:05:70:2b:64:69:13:41:97:
f2:8b:c1:59:25:b7:5b:36:06:3c:76:98:ea:55:13:
43:7c:e4:ba:71:af:25:01:33:c7:5c:04:51:61:74:
4a:6a:c0:4c:c5:6c:ba:4f:d1:6f:79:9a:55:4d:03:
10:0e:6c:28:38:67:cd:6f:be:68:23:47:9f:4f:ed:
ff:b8:87:ff:99:e6:8b:51:b9:06:8e:fe:2e:18:fb:
bf:df:db:61:c9:f5:a1:e6:fc:a4:3f:84:2d:cf:94:
0d:d8:7d:45:aa:6f:09:cf:e0:12:68:6e:2e:67:5c:
21:dc:90:11:0f:c6:52:63:10:5d:55:3f:43:a9:fb:
31:33:a7:db:6b:d7:ff:57:22:68:ba:62:b5:58:ca:
67:14:af:4b:a5:54:2b:4e:d4:2c:e7:9b:dd:4d:3a:
05:85:e4:d1:0e:29:b2:8d:2d:32:e7:83:e8:a3:94:
6c:5b:12:d9:7f:86:f8:36:c1:71:22:96:87:b8:0a:
9a:c6:c7:bb:cf:6d:a0:d5:d8:48:85:a3:a3:c4:00:
7a:48:42:e1:5d:27:0a:1c:71:53:58:d3:3d:93:18:
19:ef:f8:c2:a3:4b:2a:ef:7c:12:ea:07:6f:8f:cb:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:F6:F1:02:C2:36:05:77:FA:5C:9B:2B:61:70:AE:6A:8D:C2:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A14264C6833511F0BB27CDB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.152.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:f9:d0:7b:4b:1d:5b:1b:9d:25:b1:76:cb:95:22:ac:d5:f2:
d0:17:13:04:59:8b:5d:c6:af:8d:92:5d:48:df:c0:e3:9f:43:
a9:ff:d4:9e:f9:f7:05:34:c5:77:ad:10:a5:18:8d:da:a0:b1:
18:da:89:c7:5f:fe:60:eb:f8:4e:ec:6a:d8:e4:71:9e:4a:a7:
45:89:9e:91:47:58:74:60:06:94:ca:bf:0b:8d:be:ab:ed:f2:
f2:25:e5:b3:dc:8b:5c:e5:c0:99:cc:a5:76:bc:d7:9d:6f:50:
14:4d:20:27:6c:a9:99:c4:82:81:e4:5f:d6:6d:77:44:f2:0e:
14:60:f4:d3:54:cf:13:65:36:54:9a:bf:84:11:7d:ea:73:9c:
cc:5b:71:8d:5d:44:85:d3:61:6b:06:d6:d2:21:12:77:11:29:
c8:9c:95:50:e3:64:b9:54:86:d9:28:10:f2:29:cc:af:03:d4:
43:cc:a4:29:23:54:0b:a3:16:95:e5:7a:af:02:f7:a5:a7:15:
06:52:5a:81:41:39:97:94:b9:90:0f:1c:d0:00:7d:f5:aa:32:
55:fb:59:2c:bc:9a:21:39:9f:96:87:bc:ff:1a:dd:68:5c:f8:
07:17:98:15:35:8d:b6:7e:a6:13:31:ae:37:f8:0b:06:15:c3:
84:87:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:54 2025 by rpki-client