Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C80E842A862F11F0AA58CCABDAE4EC9C.roa
File: C80E842A862F11F0AA58CCABDAE4EC9C.roa (raw, json)
Hash identifier: 2YQLDPO0ipD8IrzEsnU7vETptGiU6kq22sqYsEGeWj4=
Subject key identifier: 49:A1:86:3A:0D:03:13:43:6A:2C:B4:0B:6F:4A:F0:4D:A2:37:BA:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017474
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C80E842A862F11F0AA58CCABDAE4EC9C.roa
Signing time: Sun 31 Aug 2025 06:00:23 +0000
ROA not before: Sun 31 Aug 2025 06:00:15 +0000
ROA not after: Sun 07 Sep 2025 06:00:15 +0000
asID: 54801
IP address blocks: 45.207.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95348 (0x17474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 06:00:15 2025 GMT
Not After : Sep 7 06:00:15 2025 GMT
Subject: CN=68b3e4f7-8909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:f1:18:d6:9c:3c:d4:61:3c:eb:4a:9e:d4:
e6:da:bc:21:c4:b1:b7:8d:87:56:11:d9:3e:5f:5a:
a8:15:7d:c2:dd:f1:9b:7c:c4:7b:7a:21:df:95:11:
69:94:4d:22:ec:08:38:aa:88:82:14:75:a4:de:c6:
1e:87:a9:f2:40:dc:f7:4a:15:81:80:e7:b8:94:f9:
a7:0f:11:53:db:d1:c3:3c:c1:28:4e:03:ba:20:bd:
8c:c0:bd:03:62:4b:da:c4:b7:fd:12:35:bb:5a:53:
2d:b3:4f:c5:48:c3:1d:49:20:e9:ac:f8:51:ee:08:
f0:e2:2b:c0:98:32:d7:ce:24:5c:e5:d4:80:2e:b7:
61:c6:d8:fd:21:2f:52:49:13:86:71:3a:5e:9e:b3:
9d:25:63:9b:ee:05:97:b3:8c:86:8b:11:e7:36:c0:
f7:ac:c8:d8:5d:8b:9f:e8:d5:bf:cd:c3:e6:ca:78:
3b:84:72:b1:14:4a:27:88:a2:97:05:9a:67:ff:28:
b9:ce:8d:2c:75:b1:b9:e1:7a:29:04:d1:d7:95:70:
cb:04:fe:72:84:1d:91:94:fd:65:bf:f4:fd:7d:4f:
8e:5a:f4:51:e6:76:13:8c:63:88:47:5b:61:d2:8b:
f3:9f:f5:78:17:c6:e7:a1:5c:8c:bb:9d:62:dd:2d:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A1:86:3A:0D:03:13:43:6A:2C:B4:0B:6F:4A:F0:4D:A2:37:BA:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C80E842A862F11F0AA58CCABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/24
Signature Algorithm: sha256WithRSAEncryption
24:19:19:e0:16:20:fe:17:14:ac:91:71:08:7c:d6:04:ff:16:
f2:63:95:4a:c2:c9:d9:6f:a0:3c:67:74:54:12:1d:bf:5e:06:
f2:42:f3:78:5f:63:ad:34:94:49:1b:35:ed:e9:2f:c3:6d:c2:
98:b7:78:10:31:56:1b:fb:f7:7a:c9:17:2c:67:61:8b:de:f4:
46:12:0d:9e:3e:d0:6e:b2:f3:dc:2d:92:13:88:b8:32:f2:53:
c5:8e:18:60:32:68:31:84:09:f4:0f:75:8b:86:73:68:8e:be:
1b:08:f7:3e:40:a8:8c:e6:4b:5e:25:6e:bd:9b:85:d4:b7:90:
4e:17:70:c9:d3:0d:97:8b:c0:ce:cf:b3:3b:8a:0c:c0:ff:6a:
6b:20:43:4b:8c:6b:ca:a8:24:bc:6d:f9:18:3e:45:0c:98:f1:
d5:12:b1:5e:ed:8d:7d:6b:e8:8a:d7:0a:66:c4:02:5e:a4:2e:
dd:04:ea:c2:6b:eb:7d:01:60:cb:f5:a6:dd:2a:39:3e:0f:ed:
39:a1:64:cb:aa:33:05:4d:69:5b:71:b6:91:9f:3c:d2:d6:1f:
47:1b:f2:40:82:ab:71:a5:dd:86:b9:86:a4:98:ad:e1:df:2a:
35:da:46:91:e3:86:63:16:39:49:20:f2:63:a4:1e:49:f8:d0:
75:a8:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:58 2025 by rpki-client