Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C6E76727C1411F083E9219CDAE4EC9C.roa
File: 1C6E76727C1411F083E9219CDAE4EC9C.roa (raw, json)
Hash identifier: PWV3L3vJG9yLO9D3ioVzR0/7q9IEoROdgpyCky86500=
Subject key identifier: CE:BD:0E:E6:61:B0:09:9C:BB:4E:A6:A6:A9:6C:3B:A4:16:D9:A1:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C6E76727C1411F083E9219CDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:17:07 +0000
ROA not before: Mon 18 Aug 2025 09:17:02 +0000
ROA not after: Fri 19 Sep 2025 09:17:02 +0000
asID: 214143
IP address blocks: 45.207.128.0/21 maxlen: 24
45.207.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93110 (0x16bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 09:17:02 2025 GMT
Not After : Sep 19 09:17:02 2025 GMT
Subject: CN=68a2ef93-b13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:78:7b:8f:6f:96:2d:db:16:cf:90:82:86:
cd:63:07:32:f8:59:08:bc:4d:39:89:dc:2d:44:35:
e7:39:d0:ed:0e:bc:08:da:6b:64:65:1c:a7:86:d1:
f4:01:3a:03:18:2b:90:5e:1c:2b:74:b8:aa:97:53:
d8:16:0f:60:14:7b:ff:f6:c8:46:7d:9e:e5:e0:84:
2a:9c:12:9c:48:b8:30:d0:5e:a0:af:a9:ac:0c:ee:
21:10:c9:37:e3:d7:4e:6a:b9:55:c4:c2:99:a6:72:
63:3a:07:65:80:09:0d:5c:38:2c:98:31:27:30:8a:
66:9c:44:26:84:55:8c:92:6e:61:45:a6:2b:ef:54:
bc:fa:ef:1f:84:02:c7:50:e5:54:48:05:f2:f8:00:
0c:b3:06:e8:0c:6c:7e:76:1b:1f:f8:a5:be:9a:39:
e2:91:34:63:45:00:80:57:94:11:da:a4:e8:68:84:
60:42:29:d3:7b:9f:91:97:9a:46:05:a6:7a:b6:3e:
fe:c5:79:2c:3d:14:12:7b:b9:a5:97:06:3f:ad:99:
bb:1f:34:80:a6:1d:51:72:7b:82:cd:a1:fa:c7:a3:
31:e8:88:42:b4:36:e6:60:fd:ef:81:b5:e9:7c:99:
e9:4a:09:f0:6e:4c:99:34:20:82:b8:84:fd:e7:34:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:0E:E6:61:B0:09:9C:BB:4E:A6:A6:A9:6C:3B:A4:16:D9:A1:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C6E76727C1411F083E9219CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0-45.207.137.255
Signature Algorithm: sha256WithRSAEncryption
26:45:07:ca:83:1f:7f:08:68:fd:e5:a6:b7:33:c1:af:13:7d:
18:f2:56:03:15:93:82:a1:3f:55:0d:d2:4e:45:23:47:b9:56:
10:84:cd:39:67:c9:18:a0:e5:86:22:e2:c8:54:aa:ac:19:ef:
e4:8d:92:50:7e:e3:97:41:da:11:e8:17:8a:46:75:8d:a6:55:
93:ad:a5:69:cc:ce:6f:32:80:6a:ae:6d:40:8f:7d:2f:fe:8c:
84:d2:49:74:48:35:28:e1:84:6b:14:3f:43:22:e0:34:78:d6:
d0:4f:15:44:41:b5:4a:11:65:1d:50:4b:c7:75:af:85:de:45:
8f:e6:a0:f2:df:64:13:f0:a6:49:b7:bc:b0:97:71:3e:8f:6e:
95:70:32:26:bd:21:ab:09:db:43:90:2f:bb:38:3a:60:2d:c4:
c4:fb:ee:d9:d0:e6:8c:e2:5e:3a:21:06:70:12:71:e8:b5:63:
f3:9f:be:fc:07:ce:cf:59:b0:b1:44:1d:f0:c8:bc:c3:84:2c:
66:33:16:2a:8b:0a:07:7c:db:60:b8:a4:76:d0:20:05:81:b6:
ee:f7:b7:39:e9:d9:a4:89:9f:84:89:3d:fb:d2:34:9a:bf:b2:
20:aa:62:43:c4:bb:85:85:94:75:89:12:03:d0:be:19:44:21:
c0:22:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:19:46 2025 by rpki-client