Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E774A57A774711F0B90718D4DAE4EC9C.roa
File: E774A57A774711F0B90718D4DAE4EC9C.roa (raw, json)
Hash identifier: zpZ4PU3KVTd3wTJBeXh+7uCMCO+v2rk3PxMdGoj8PXo=
Subject key identifier: 0F:4A:22:84:5B:3A:D4:70:66:15:7A:B4:D1:8B:EC:8C:6D:C8:9D:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E774A57A774711F0B90718D4DAE4EC9C.roa
Signing time: Tue 12 Aug 2025 06:45:16 +0000
ROA not before: Tue 12 Aug 2025 06:45:10 +0000
ROA not after: Wed 17 Sep 2025 06:45:10 +0000
asID: 10103
IP address blocks: 45.196.206.0/23 maxlen: 24
45.196.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92790 (0x16a76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 06:45:10 2025 GMT
Not After : Sep 17 06:45:10 2025 GMT
Subject: CN=689ae2fc-5d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:0d:76:ff:cd:39:c5:16:98:07:08:e4:0a:
f4:d7:16:ea:fa:e7:6e:a5:0a:e1:b4:f7:a0:18:a6:
a1:92:66:1e:b4:0d:02:e5:d5:97:05:03:17:7c:d8:
ee:48:45:88:a1:0c:03:c7:45:28:c0:43:2f:30:d0:
cf:e5:35:9e:f2:48:00:c5:48:32:98:4d:aa:6b:c2:
56:5c:f9:c6:22:05:ee:37:47:8c:f0:25:17:6f:0f:
61:f5:9f:3b:5b:2c:ab:08:3f:bb:ca:fe:3a:82:a5:
26:93:ea:03:b2:90:6c:01:58:98:c3:43:d1:e8:ca:
d7:47:39:0c:a8:d9:ff:48:0d:ce:ba:12:cc:c5:1d:
80:3a:a1:73:82:39:bc:43:17:b6:a7:fd:5a:76:aa:
d9:b6:53:dd:d4:4a:b8:dd:31:69:6f:68:01:c2:fb:
66:cf:18:0e:b1:1e:ec:10:52:8d:f0:fd:f8:aa:14:
aa:b3:07:cc:94:8b:23:79:1d:40:af:fe:e8:e4:22:
01:18:f6:a8:13:25:ea:3a:ff:0a:3a:c0:fe:b8:e6:
1a:cf:0d:23:4e:68:ea:95:1c:05:d6:3c:63:fc:98:
78:23:e0:6c:32:c6:5b:0b:9a:94:9c:34:b7:09:a7:
3f:22:ae:4b:10:b1:aa:33:3b:35:87:49:16:92:01:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:22:84:5B:3A:D4:70:66:15:7A:B4:D1:8B:EC:8C:6D:C8:9D:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E774A57A774711F0B90718D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.206.0/23
45.196.228.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a2:2e:0f:d2:a3:50:ca:43:bc:2f:9e:49:a9:51:59:62:20:
fd:eb:06:37:69:f9:8d:0c:bc:b6:8b:14:3c:37:c5:2f:c0:f2:
de:3b:9c:91:e1:66:80:4b:c3:31:28:b5:e6:20:28:bf:23:b0:
30:02:9a:c5:a9:36:a0:28:9c:5d:b2:4a:2e:64:36:45:44:83:
0d:bb:e6:18:e6:78:fd:48:b1:90:dc:93:de:32:49:76:a2:f9:
3c:83:91:5e:2c:2a:5a:18:20:da:25:5a:37:57:7f:d8:25:0f:
79:14:06:b9:97:96:9a:c4:26:12:9f:90:7c:e0:63:98:1b:79:
91:2d:7f:d6:7c:c2:67:43:f3:ff:43:bd:3b:00:e4:1f:9d:8a:
19:e8:dd:8a:3b:a8:72:e3:15:d0:6c:b0:d7:9f:a8:9c:d0:c5:
dc:22:b1:41:32:51:23:82:9b:75:5a:93:0c:c9:8f:2f:fd:33:
4a:43:40:d5:74:04:12:06:6f:79:11:2d:8f:39:e8:66:85:6f:
dd:51:57:52:34:f2:c9:62:82:39:9f:ba:00:f9:26:b9:6c:88:
b4:a4:cb:e7:9b:56:73:7e:32:7c:e2:10:cc:d6:fc:ce:41:31:
0d:92:c1:7e:38:67:11:5e:6d:ce:fb:8a:17:17:a8:c6:43:24:
6a:6e:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:10:50 2025 by rpki-client