Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9010AB4866C711F0A8675BD6DAE4EC9C.roa
File: 9010AB4866C711F0A8675BD6DAE4EC9C.roa (raw, json)
Hash identifier: paoWLfjzkcCV2ms1mNGDrmMJ5UDCHRKbxISgeS8jXbM=
Subject key identifier: 84:8D:9B:11:68:FA:D3:94:AD:DE:97:14:81:78:F0:6E:48:97:C5:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016677
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9010AB4866C711F0A8675BD6DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 06:46:15 +0000
ROA not before: Tue 22 Jul 2025 06:46:10 +0000
ROA not after: Sat 11 Jul 2026 06:46:10 +0000
asID: 137184
IP address blocks: 45.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91767 (0x16677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:46:10 2025 GMT
Not After : Jul 11 06:46:10 2026 GMT
Subject: CN=687f33b7-93e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:e9:3e:0f:13:13:f0:35:12:9c:d2:ab:fb:
8d:ae:ec:3c:a9:02:d4:bb:4e:4d:0d:bc:a6:59:e8:
dc:40:bc:e3:b0:02:ac:90:56:49:66:4b:7f:9d:7a:
1f:00:a2:04:91:7b:ab:cf:5e:7e:8e:d5:78:67:2c:
59:e6:1f:48:60:d0:13:f4:ff:50:71:db:89:9c:0f:
29:3f:c3:4e:10:f5:17:d9:d2:10:32:d2:22:df:63:
dc:cf:6f:09:70:20:f2:80:b6:a2:40:65:a3:29:b2:
06:b4:97:a9:6d:37:03:68:7c:f4:a4:93:b8:6d:58:
32:6f:d3:c8:6e:85:7e:42:9b:53:4b:e2:17:c0:58:
b6:63:82:7a:4c:83:b4:52:8f:09:7b:b9:3e:12:2e:
e2:ea:94:e5:5b:71:e3:6b:11:eb:01:9d:b2:60:0c:
ea:2a:cf:2c:64:c4:c8:30:1b:08:75:4e:ee:21:1e:
12:bb:69:c0:6d:57:6d:2f:ff:e4:a0:52:df:a7:ef:
aa:cf:5e:5b:3e:74:2b:46:82:24:f6:10:c5:82:28:
25:72:53:52:6b:60:2f:06:94:56:a3:9f:e4:af:f7:
fd:c5:99:67:9d:d1:4d:c2:1e:c2:fd:e5:5f:70:fb:
e9:bf:74:70:b8:a1:6f:0e:5b:e3:93:a1:9b:64:17:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:9B:11:68:FA:D3:94:AD:DE:97:14:81:78:F0:6E:48:97:C5:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9010AB4866C711F0A8675BD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8e:ab:cf:83:4e:27:92:67:72:92:91:44:b2:ca:fe:2a:f3:
38:ad:02:e8:2e:a0:10:ae:61:b4:28:29:aa:f2:9b:08:c8:a2:
8c:2b:04:f1:86:07:e4:7b:cb:2e:e0:9c:e2:dc:eb:f7:a7:e4:
91:97:95:c1:3b:73:65:2e:38:09:e0:61:4b:2a:63:c1:4b:aa:
cf:50:47:66:0e:6b:bd:89:3c:80:9b:94:b6:bc:cb:35:1b:4e:
7d:c9:60:98:04:b4:fd:37:64:26:78:4f:47:aa:f1:b2:03:30:
cb:bf:fe:17:30:33:5d:be:10:fc:08:c4:d9:fb:a0:fd:04:c2:
6b:5d:1b:35:8c:59:93:02:78:91:19:9f:c0:a6:b5:c1:30:09:
58:3b:04:1f:b6:4c:d8:ef:d5:5c:85:f9:91:db:f8:0c:d1:f6:
24:71:94:97:c0:f2:80:e0:b0:97:45:59:a4:80:fc:a2:54:03:
d4:5d:18:d8:cd:c2:91:9a:ab:ec:f9:79:8b:11:ad:af:b6:eb:
f6:55:db:4d:ae:92:42:4c:9a:8b:b1:3c:bf:1c:68:ff:20:3d:
ed:a7:e2:f5:6d:de:49:e7:dc:8d:14:94:6b:ec:31:bd:c4:97:
d5:af:a3:3d:3e:18:6c:d8:2e:ad:00:23:da:b2:15:78:13:31:
af:b0:37:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:47 2025 by rpki-client