Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4801E93C66C411F0A696BDBFDAE4EC9C.roa
File: 4801E93C66C411F0A696BDBFDAE4EC9C.roa (raw, json)
Hash identifier: axhYtDRwILwYvmZ5dglKSLz5qs+Fui/JSWQ9b+uWDiw=
Subject key identifier: E5:24:FC:FA:10:14:41:95:98:75:86:FC:C4:29:6D:D8:3A:EE:2E:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01666F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4801E93C66C411F0A696BDBFDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 06:22:46 +0000
ROA not before: Tue 22 Jul 2025 06:22:41 +0000
ROA not after: Tue 26 Aug 2025 06:22:41 +0000
asID: 174
IP address blocks: 45.202.111.0/24 maxlen: 24
45.202.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91759 (0x1666f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:22:41 2025 GMT
Not After : Aug 26 06:22:41 2025 GMT
Subject: CN=687f2e36-d02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:86:00:5b:76:1b:7b:10:4f:2f:97:93:fe:
a9:b1:6f:2f:b6:95:9e:d5:3b:78:03:f5:77:6f:57:
98:de:15:29:68:79:fa:1b:1a:ea:56:cb:2c:9c:51:
28:4f:95:df:2c:66:9b:4e:36:d7:93:d2:0d:89:f1:
ac:e7:77:e9:58:2a:ea:1d:b8:fa:c5:bc:de:ad:69:
fd:98:9a:fc:bb:4c:20:22:b2:e9:c5:76:a7:1b:61:
53:d6:bc:bb:0c:ee:0a:f0:7e:40:f7:77:38:e2:3a:
52:c8:70:56:43:df:e5:d4:80:6a:4c:15:a8:ed:99:
b5:53:5f:ec:e4:16:e8:cb:9d:c6:95:f5:ba:72:58:
19:1a:fb:e7:0e:6c:02:01:1b:0b:f5:ac:35:8a:8d:
9b:aa:55:26:ca:b9:98:c2:69:b7:19:69:75:04:64:
de:08:36:15:23:a0:d8:64:ba:3f:86:a6:3d:e6:dc:
cd:23:f7:81:68:4d:7a:8f:67:8f:00:75:23:db:ce:
03:85:14:00:84:f1:61:36:20:40:03:d5:3f:62:9c:
4d:ec:80:fd:03:f9:59:78:02:3d:2e:a0:71:88:17:
0a:f3:38:a0:de:d2:61:06:84:1b:87:2c:66:b6:3e:
0a:1f:ad:85:a8:21:7d:47:70:69:9d:96:68:20:dc:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:FC:FA:10:14:41:95:98:75:86:FC:C4:29:6D:D8:3A:EE:2E:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4801E93C66C411F0A696BDBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.111.0-45.202.112.255
Signature Algorithm: sha256WithRSAEncryption
83:e7:2a:78:43:34:87:e8:7e:d4:32:13:dc:a3:8c:c9:64:ec:
a2:b2:3c:60:c7:48:0d:bf:03:41:7b:21:b9:cd:db:fb:0c:2b:
7d:9e:7a:60:9d:13:b4:1d:33:50:01:89:f2:a4:72:a2:7c:d5:
8a:91:5b:15:3f:bf:c8:5a:a1:a2:f4:51:8f:dd:a7:f0:1c:15:
04:73:da:88:ef:10:ac:29:a9:28:26:76:ad:f4:c7:de:e0:44:
59:f4:44:c6:97:25:94:a0:7c:30:40:2b:3c:8a:3f:ad:d2:c2:
8b:4b:c6:66:9f:66:b2:6a:f2:13:af:d4:40:cd:97:24:2d:57:
33:31:a8:79:72:12:9b:ab:b6:4d:45:bb:4b:19:97:d8:74:c6:
c7:dd:84:38:6c:e7:1d:2e:95:d7:08:c5:13:52:7c:fb:d7:af:
a4:8f:cd:cc:16:f5:8e:a4:15:55:b1:be:66:6d:a5:8f:65:8c:
2e:d1:e8:16:92:c0:de:32:fa:7e:cc:b4:f0:45:3c:89:c0:14:
86:1f:35:9b:ca:41:24:61:59:06:ce:74:fd:17:26:c7:20:5d:
25:0b:c5:69:ca:7b:dd:ec:5a:06:5d:cd:ab:8b:52:34:a8:ab:
68:5e:04:25:b2:c5:33:37:e7:98:c4:5c:b5:8d:66:67:2e:e3:
7e:70:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:58 2025 by rpki-client