Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D524FA6BAE11F0BA2824BCDAE4EC9C.roa
File: 40D524FA6BAE11F0BA2824BCDAE4EC9C.roa (raw, json)
Hash identifier: NDO5aHyb19ZKg5pCTYwNEi5HV1V9bzApNPZSRTWd5tM=
Subject key identifier: 83:13:CE:5B:5E:0F:65:16:AB:CB:13:54:31:47:1F:44:23:61:3B:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D524FA6BAE11F0BA2824BCDAE4EC9C.roa
Signing time: Mon 28 Jul 2025 12:27:41 +0000
ROA not before: Mon 28 Jul 2025 12:27:35 +0000
ROA not after: Wed 03 Sep 2025 12:27:35 +0000
asID: 138995
IP address blocks: 45.192.167.0/24 maxlen: 24
45.192.169.0/24 maxlen: 24
45.192.208.0/24 maxlen: 24
45.192.209.0/24 maxlen: 24
45.192.210.0/24 maxlen: 24
45.192.211.0/24 maxlen: 24
45.192.212.0/24 maxlen: 24
45.192.213.0/24 maxlen: 24
45.192.214.0/24 maxlen: 24
45.192.215.0/24 maxlen: 24
45.192.216.0/24 maxlen: 24
45.192.217.0/24 maxlen: 24
45.192.218.0/24 maxlen: 24
45.192.219.0/24 maxlen: 24
45.192.220.0/24 maxlen: 24
45.192.221.0/24 maxlen: 24
45.192.223.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
45.192.225.0/24 maxlen: 24
45.192.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92152 (0x167f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 12:27:35 2025 GMT
Not After : Sep 3 12:27:35 2025 GMT
Subject: CN=68876cbd-56e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:90:cd:51:b6:38:ac:63:71:fd:c1:67:b1:90:
fb:e9:f8:bc:33:52:9a:5a:b6:9d:50:cb:c2:d9:79:
47:ca:b3:e3:79:a1:f0:98:5d:18:d4:0e:13:be:38:
64:d2:92:2a:6d:8a:dc:2d:df:e0:d5:f3:78:c0:9e:
e8:30:4a:36:08:87:c6:31:c5:66:37:f3:06:ec:2b:
c3:a3:a4:1c:1d:92:9e:e3:00:df:88:c8:fc:8e:dc:
82:3d:af:ba:09:07:2e:3f:76:56:51:c2:49:4c:8a:
6e:7d:f6:e2:47:3d:5f:f1:12:b9:c6:84:d7:e8:f6:
c2:d7:be:90:a7:e0:36:18:3f:ac:48:d0:cd:32:9a:
4c:44:05:82:ea:49:ea:6d:ec:73:9a:53:01:bd:14:
1e:3c:f3:e5:ae:9d:db:bd:17:13:50:a2:f1:75:87:
8a:55:12:03:b5:f2:cd:60:58:43:71:fa:ca:44:b5:
1b:0b:30:02:94:52:4c:0e:4f:e3:ea:e3:7d:31:e5:
a2:a5:a1:f0:74:b7:c0:c5:3e:d7:b7:62:b4:e9:c0:
15:3d:75:e4:ed:33:66:6c:ae:17:21:3c:34:40:02:
21:05:99:c6:dd:d0:4e:2b:f2:40:60:c0:a0:b4:16:
8a:f4:2e:e7:2d:ab:d7:58:67:83:84:c3:8c:45:eb:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:13:CE:5B:5E:0F:65:16:AB:CB:13:54:31:47:1F:44:23:61:3B:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D524FA6BAE11F0BA2824BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.167.0/24
45.192.169.0/24
45.192.208.0-45.192.221.255
45.192.223.0-45.192.226.255
Signature Algorithm: sha256WithRSAEncryption
05:7f:9d:da:7b:9a:aa:4f:fb:ce:32:f0:c6:ff:38:13:93:bb:
20:6c:63:77:4b:ba:1f:2c:4f:fe:3c:01:c8:d7:a1:47:df:73:
02:8a:4a:c9:26:85:b8:85:c2:67:ad:7f:3a:47:5b:66:e2:0d:
19:56:aa:a2:9f:5d:6e:3e:a3:8f:be:f4:07:2f:da:c0:81:33:
de:20:89:c4:9c:76:a2:07:f4:80:79:ff:80:fd:3c:10:44:8c:
59:44:3e:73:e0:bb:73:0f:10:2e:32:59:b7:2e:c7:64:21:ec:
b1:5b:b4:cf:1b:ac:8f:47:81:12:af:a4:5d:5c:4b:44:09:a5:
79:ea:d0:8f:b1:59:9a:f6:61:e6:0c:17:cd:82:5b:ff:2a:9c:
bc:f6:13:d1:3f:90:78:ff:fb:31:95:27:76:da:50:4a:2e:a4:
17:55:75:0f:ec:f7:e9:d2:5a:05:f4:fa:61:06:0b:eb:09:02:
6e:e2:ce:da:a3:42:21:48:a5:6e:ba:5e:4b:42:d6:ee:e9:85:
e2:f7:3f:6a:7b:b6:d6:36:62:72:65:b8:3c:58:0e:6d:7a:c0:
e1:bf:e0:e6:3d:93:11:2e:42:40:15:66:b9:4e:e7:17:93:52:
56:b8:f8:f7:98:3f:bf:dd:67:69:e5:c5:e3:a3:38:6b:41:48:
30:88:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:28 2025 by rpki-client