Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/088FCC9076B111F09CED1DF6DAE4EC9C.roa
File: 088FCC9076B111F09CED1DF6DAE4EC9C.roa (raw, json)
Hash identifier: BGFrzh0/7tLY4KMUIlpG8jQ1+3jTckmdF+w3dvwuK+o=
Subject key identifier: 72:5D:90:D3:24:D3:80:5B:37:C5:38:12:F7:2F:73:E7:AF:BB:B3:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/088FCC9076B111F09CED1DF6DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 12:45:18 +0000
ROA not before: Mon 11 Aug 2025 12:45:13 +0000
ROA not after: Sat 13 Sep 2025 12:45:13 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92702 (0x16a1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 12:45:13 2025 GMT
Not After : Sep 13 12:45:13 2025 GMT
Subject: CN=6899e5de-496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:d0:f4:9b:e2:63:a8:28:a6:d8:ca:4d:2d:
d6:aa:73:7a:be:88:ec:6d:b0:e5:77:8c:77:cf:4a:
d4:ae:5b:79:d8:ff:03:22:2c:69:5a:3a:4c:c4:f2:
29:fb:cb:14:a5:cb:00:9d:89:a2:c2:e0:df:5d:32:
20:a0:31:d8:f2:6b:9e:0a:81:6c:07:31:a8:d9:28:
af:79:67:81:1d:1b:ea:06:43:5c:6d:4b:0c:66:ff:
62:02:65:90:6c:ba:d5:66:fc:04:7e:52:10:62:58:
87:35:c1:30:c5:b4:08:b9:f4:be:50:43:0f:45:04:
5f:35:f6:35:56:ac:6e:d3:ee:51:60:1e:49:42:2a:
42:cb:47:3c:f9:47:1a:6e:f8:1e:93:0f:89:ce:1a:
0d:f8:c9:94:a2:1a:82:63:f0:93:54:10:11:df:20:
f6:bd:b4:68:f0:58:54:91:94:cf:13:76:90:da:ca:
53:7b:69:d1:5d:5c:d9:61:da:40:a9:93:49:4c:47:
4b:2a:ee:87:f5:de:7e:9c:88:cd:a3:05:05:37:f4:
a9:a7:d7:6b:8c:38:8c:81:28:4f:c5:30:a3:2a:d5:
cf:5e:cf:b0:00:05:91:56:0e:63:9f:a2:13:09:9e:
22:c7:24:f5:60:10:a6:ae:8d:d9:0f:56:7a:a1:8a:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:90:D3:24:D3:80:5B:37:C5:38:12:F7:2F:73:E7:AF:BB:B3:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/088FCC9076B111F09CED1DF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:b6:44:43:62:69:e9:54:e3:17:2b:9f:4b:ae:9a:b8:49:a5:
e8:f8:9e:e9:d7:ae:db:aa:c0:d3:cc:63:b3:38:7e:f3:96:c9:
e7:35:16:5e:fd:29:7e:51:56:fa:74:85:c4:87:d2:35:65:a4:
c4:7a:6e:7c:8e:8c:1f:04:c6:82:02:25:b8:8c:85:25:9a:60:
04:e2:19:9a:7a:22:34:d9:77:d4:5d:78:35:f7:81:90:0a:26:
3e:83:1c:db:12:1f:7e:02:d9:7e:52:6f:2b:4d:29:01:62:a8:
cb:5e:96:dd:f8:7d:a3:a2:09:89:c9:2f:72:08:1f:9c:25:42:
50:2f:bd:f7:13:53:c9:f3:8c:66:84:50:16:c8:f6:26:68:5c:
a5:24:fc:02:e0:c8:8e:ab:70:00:5e:7c:59:4c:22:d7:7f:ec:
49:51:a7:59:4b:5b:67:6c:fe:a9:10:84:1b:04:6a:5e:37:fe:
c0:33:e5:3e:ca:9d:f1:39:91:2c:c0:4f:4b:85:41:0e:eb:11:
e7:63:a6:e1:a2:77:ac:0f:42:92:04:5f:89:02:77:3c:05:92:
1a:24:c3:02:14:91:89:20:aa:db:11:77:c6:09:90:2a:19:c4:
ae:1c:ce:d0:9a:3d:f8:82:9e:b7:e0:fe:f8:63:5c:de:d0:6e:
e1:b1:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:59:51 2025 by rpki-client