Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1F2B3606F9811F08012C8BEDAE4EC9C.roa
File: D1F2B3606F9811F08012C8BEDAE4EC9C.roa (raw, json)
Hash identifier: sSPYxkj9rsVR+9Iag3Wcy2Ue7D6UR0uBWpI454vaSIo=
Subject key identifier: F0:3A:F1:5A:01:0E:E5:25:26:72:D1:2E:86:7E:75:0B:FD:6E:3F:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01687C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1F2B3606F9811F08012C8BEDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 12:04:20 +0000
ROA not before: Sat 02 Aug 2025 12:04:15 +0000
ROA not after: Sun 07 Sep 2025 12:04:15 +0000
asID: 9009
IP address blocks: 45.192.130.0/24 maxlen: 24
45.192.131.0/24 maxlen: 24
45.192.132.0/22 maxlen: 24
45.192.136.0/22 maxlen: 24
45.192.140.0/24 maxlen: 24
45.192.141.0/24 maxlen: 24
45.192.142.0/24 maxlen: 24
45.192.143.0/24 maxlen: 24
45.192.144.0/24 maxlen: 24
45.192.145.0/24 maxlen: 24
45.192.146.0/24 maxlen: 24
45.192.147.0/24 maxlen: 24
45.192.148.0/22 maxlen: 24
45.192.152.0/22 maxlen: 24
45.192.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92284 (0x1687c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 12:04:15 2025 GMT
Not After : Sep 7 12:04:15 2025 GMT
Subject: CN=688dfec4-6f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:98:9b:85:61:84:1c:fc:69:69:cd:89:2d:
c3:32:78:97:13:ae:cf:45:2e:6b:07:b4:2b:8a:ce:
48:c2:0d:ab:7e:86:6c:fe:e0:80:b7:3c:4b:ab:d7:
51:5d:f5:f9:bc:ba:dd:68:4a:6d:1f:bb:9d:6d:2f:
0d:6e:ef:dd:e4:c3:75:96:e9:42:d1:21:34:31:c5:
09:38:70:69:17:0a:0f:ea:92:3d:ca:5a:22:22:c0:
67:7f:df:1f:5f:26:5a:53:6b:a2:00:77:d0:ce:fa:
3a:5d:85:09:13:cb:b1:a8:69:07:55:ef:44:1d:cb:
03:e7:8d:af:ee:8f:75:31:8d:96:c1:fd:0d:cf:1c:
73:42:f7:eb:97:f7:40:c0:eb:5d:91:77:9c:f6:af:
e7:20:6b:aa:3e:19:c7:05:86:7b:02:06:4d:72:2b:
17:13:41:cc:ca:d1:4e:7b:be:2a:f1:5e:b9:eb:a6:
76:88:52:9f:4b:b9:16:82:f5:10:9f:b9:57:c8:8a:
31:42:8b:28:2d:60:92:4c:66:35:ae:80:3c:f9:1e:
d8:68:af:2b:d9:e5:04:67:e5:9f:5a:05:b9:8d:bc:
dd:84:54:ad:c7:dd:f5:83:02:29:2c:7f:f8:85:51:
2a:dc:70:b0:c1:16:9d:d2:12:68:1d:1c:ec:01:5f:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:F1:5A:01:0E:E5:25:26:72:D1:2E:86:7E:75:0B:FD:6E:3F:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1F2B3606F9811F08012C8BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.130.0-45.192.159.255
Signature Algorithm: sha256WithRSAEncryption
ac:16:0a:71:aa:2d:19:b1:c9:27:4d:fe:ac:25:0c:e0:63:3e:
7d:cd:cd:cf:a0:f9:cc:01:3c:22:bc:c7:16:c1:f6:f8:08:a7:
b5:84:09:8f:00:b5:5e:22:fd:b3:d5:d4:49:4e:1f:55:26:d0:
45:00:b6:2c:bf:39:4e:5a:20:2f:81:06:72:a0:55:67:ce:2d:
e3:12:ed:ef:bb:8b:b8:00:66:09:66:38:db:0f:91:d1:c7:15:
99:5e:c0:0e:54:1d:c2:39:85:59:9a:c4:bf:c6:a1:58:d9:aa:
be:9f:2b:b9:95:8b:89:4e:7a:da:42:86:a6:b1:64:7e:2d:79:
07:25:d9:31:d9:db:41:4c:fe:2c:4a:9f:4a:1d:f1:50:e6:1e:
3c:b6:72:e0:6a:e4:ca:87:e8:8d:2c:97:ec:c3:a2:7f:01:21:
be:6c:e1:58:6d:52:51:32:50:0e:f2:ab:25:33:fa:01:4a:63:
3c:d9:d2:3a:c6:3e:ca:81:5d:f4:1f:2c:19:8f:91:e8:ec:8d:
53:f8:4b:9d:a1:5d:bb:5c:2c:00:37:c7:1a:52:05:b5:c4:bd:
43:70:9e:f0:95:fb:d3:a6:79:f4:10:88:93:a2:de:ab:6a:60:
67:b0:b5:cc:57:94:41:a7:5e:36:4b:c8:d1:b4:04:f0:96:c1:
88:98:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:14:42 2025 by rpki-client