Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C440DB28844911F0BD17E4BADAE4EC9C.roa
File: C440DB28844911F0BD17E4BADAE4EC9C.roa (raw, json)
Hash identifier: BVbKDw+IR+3nbgOT+Vqy8NikVOVdbYznxfzXoDvhcxk=
Subject key identifier: DF:74:AE:BB:36:C6:0E:B0:F7:07:A0:85:86:CC:E2:5F:DC:C5:92:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C440DB28844911F0BD17E4BADAE4EC9C.roa
Signing time: Thu 28 Aug 2025 20:01:25 +0000
ROA not before: Thu 28 Aug 2025 20:01:14 +0000
ROA not after: Fri 10 Jul 2026 20:01:14 +0000
asID: 262167
IP address blocks: 45.199.158.0/24 maxlen: 24
45.199.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94951 (0x172e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 20:01:14 2025 GMT
Not After : Jul 10 20:01:14 2026 GMT
Subject: CN=68b0b595-1f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:b8:e2:22:e5:c7:3d:3e:9a:6a:21:62:48:
4a:09:b9:5d:6e:23:57:32:a4:22:35:07:b0:5a:06:
87:4f:32:ed:0a:e2:22:bb:53:78:a0:81:83:fa:7e:
21:86:ff:b2:f0:77:bc:72:c8:98:d7:a7:33:66:d5:
95:36:d0:7e:e3:53:51:bd:76:4b:6f:15:c6:37:c7:
73:7a:39:6e:56:c5:7f:4a:fb:8c:f6:af:ba:4e:18:
21:31:13:d5:86:63:29:fa:7e:4a:b4:17:b9:e6:d8:
b1:29:a6:f8:39:c5:fa:24:3b:b5:8e:a6:ed:eb:24:
0a:9c:76:7d:39:ef:5d:b0:79:18:03:4e:4c:59:15:
39:d6:0f:82:c4:b0:84:28:21:ae:6c:57:35:f0:e1:
5b:0e:e0:a0:4d:27:b2:eb:6c:ee:fd:fe:8b:c8:27:
80:d9:5b:01:be:86:03:bb:5a:75:78:d7:be:2c:85:
a9:90:31:e9:d2:c1:f1:11:82:54:04:82:96:bf:55:
4f:93:30:53:ea:ed:08:fe:4e:27:60:d3:25:27:b5:
ba:db:64:c5:1d:c7:e5:7a:b2:b8:38:81:02:56:47:
88:54:54:47:c7:db:32:09:52:96:28:a0:f3:9d:aa:
b0:99:1d:26:f8:63:28:b9:b6:c4:c8:92:97:f4:17:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:AE:BB:36:C6:0E:B0:F7:07:A0:85:86:CC:E2:5F:DC:C5:92:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C440DB28844911F0BD17E4BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ee:86:2f:6a:2c:39:d3:0b:6b:0a:8a:20:51:0a:1b:a1:e0:
d6:05:c3:e2:07:53:76:ce:a5:d9:27:8c:df:9f:28:9d:74:d4:
fb:b1:4a:4f:f8:4b:67:ca:0b:d0:1d:29:e3:11:d2:2f:0e:a2:
f1:ef:4e:b3:af:61:4f:e9:b1:8c:e4:de:47:9c:c5:0f:18:ec:
ad:a5:ee:b6:38:d4:99:40:3b:7f:f2:af:66:0b:16:36:c5:9b:
a2:34:b1:59:90:bf:6f:f4:4a:d2:3b:24:3b:51:c4:be:8e:af:
3c:d4:a1:c0:1e:58:b6:a7:76:6c:ba:f7:3c:4c:26:27:f0:d4:
78:2b:ed:d3:88:61:6f:e5:e2:c3:f8:b4:7c:0c:95:8b:5b:07:
2b:96:3e:82:e3:2a:ba:a4:65:da:e1:a2:a9:35:42:f2:d2:0d:
67:6f:34:08:b8:0a:1f:f1:01:1d:68:2c:6a:77:f7:cc:76:f4:
8d:e9:b7:ae:ca:62:bd:c9:a9:7a:30:2f:87:1c:21:a5:f7:1c:
9b:1a:6d:30:7f:fa:89:2f:0e:29:a1:62:1d:40:f2:b1:f8:b8:
a1:0e:04:70:b7:6d:a2:00:be:70:c4:4f:38:18:e6:3c:18:e2:
30:dc:48:3c:fc:21:4c:f4:1f:a4:cd:27:91:39:72:46:68:33:
21:68:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:57 2025 by rpki-client