Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/9D242BAC50C911F0A85BA2CADAE4EC9C.roa
File: 9D242BAC50C911F0A85BA2CADAE4EC9C.roa (raw, json)
Hash identifier: mKlRYN31yseTRk/G1sqRrST2hma+cqRw0nV4Ec4yQmY=
Subject key identifier: E0:E8:CE:BF:5E:37:83:DB:01:7C:E8:AF:1C:F9:83:D4:49:3D:BF:42
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 057D
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/9D242BAC50C911F0A85BA2CADAE4EC9C.roa
Signing time: Tue 24 Jun 2025 07:05:31 +0000
ROA not before: Tue 24 Jun 2025 07:05:26 +0000
ROA not after: Sat 20 Jun 2026 07:05:26 +0000
asID: 329007
IP address blocks: 45.221.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 24 07:05:26 2025 GMT
Not After : Jun 20 07:05:26 2026 GMT
Subject: CN=685a4e3b-e4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:d7:a1:05:2a:0c:d0:45:c1:df:f3:32:3b:
93:39:85:cb:aa:a3:7f:31:8a:5e:0f:93:07:5a:99:
fb:a9:49:7b:59:50:1f:2a:7a:5b:11:d1:92:f8:c0:
65:fd:ad:a7:92:bd:ee:72:c6:90:db:10:e1:3e:db:
28:a0:72:9b:8a:86:65:5a:c8:18:02:e7:9b:b0:0e:
32:07:fd:46:f0:3c:c8:4b:3c:1b:ab:be:de:4a:18:
2c:64:ca:2b:ab:e7:27:ed:c3:d6:db:b6:34:6e:de:
b1:23:23:fc:d3:da:88:52:6e:7e:8e:53:3a:17:3d:
e2:af:9b:9c:b8:9d:db:26:2b:87:69:9b:ad:c6:c2:
a7:53:b6:fd:67:e2:0a:86:42:f8:1d:59:06:aa:43:
a8:2e:ae:3a:90:89:9e:2e:a2:a8:44:80:75:55:fe:
e0:87:10:b0:b2:e6:bb:68:28:d1:98:16:d8:ec:62:
ba:b4:4f:7d:d6:b5:03:ed:51:3d:67:b4:14:b8:00:
56:bf:25:d2:95:d7:f3:63:9c:29:1d:f2:eb:46:9b:
1a:3d:e4:bf:c4:8f:f7:09:83:1f:5a:a0:75:99:f6:
e4:a3:0f:d9:41:aa:bc:53:cd:2f:d3:6f:7d:1c:31:
70:08:72:de:fc:2e:ae:96:88:86:17:e7:7c:7c:61:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:CE:BF:5E:37:83:DB:01:7C:E8:AF:1C:F9:83:D4:49:3D:BF:42
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/9D242BAC50C911F0A85BA2CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.68.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7d:59:9b:fa:d2:9c:d2:62:c5:ec:f0:6b:73:b9:39:30:b9:
2d:73:ce:34:01:22:d8:d8:7d:95:09:d9:45:15:70:a8:78:3c:
f4:4d:bd:5e:e3:9b:88:3b:91:74:2e:55:4a:d7:96:2a:73:6a:
9a:dc:2f:6a:57:22:d8:41:a9:a0:5f:ab:80:57:0e:06:37:69:
0f:62:16:49:b7:86:8b:16:39:3b:10:07:03:72:26:d7:06:e0:
c0:5b:e5:83:0c:34:82:10:56:f8:b6:1f:fd:63:4c:ff:55:e6:
66:3a:18:5f:42:bd:21:b9:95:80:22:fc:b0:a5:79:c7:32:66:
83:5a:27:a5:ef:21:02:ea:0a:e4:d5:6f:a5:42:56:81:a5:36:
0e:d7:46:c3:8a:4c:30:c9:c4:83:48:1b:f6:28:29:45:9a:11:
ff:a5:c6:96:4f:74:43:fa:83:cf:15:0f:e7:fc:44:72:c0:ee:
34:29:e1:ce:fe:34:47:b9:6f:01:14:2c:73:71:6b:a4:3c:6d:
e8:76:d7:c4:3c:89:4a:80:5f:ae:e1:82:5a:39:52:24:fc:94:
43:c3:32:21:74:73:57:2c:7d:71:37:c6:cb:58:38:35:cd:29:
4c:0d:05:58:a1:99:0c:3a:02:d4:c0:21:a3:aa:e0:45:f9:08:
a4:bc:70:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:48 2025 by rpki-client