Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/330145EC8CCF11F0BA55ACAEDAE4EC9C.roa
File: 330145EC8CCF11F0BA55ACAEDAE4EC9C.roa (raw, json)
Hash identifier: IAfxIddhzDjkR2p1XecQCJXR/rGPSuaXlU6fzAyEudo=
Subject key identifier: E5:71:19:C6:85:C3:9E:4F:EC:93:00:76:08:93:FD:4B:6D:22:EF:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0179D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/330145EC8CCF11F0BA55ACAEDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 16:16:39 +0000
ROA not before: Mon 08 Sep 2025 16:16:34 +0000
ROA not after: Fri 28 Apr 2028 16:16:34 +0000
asID: 17561
IP address blocks: 45.204.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96729 (0x179d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 16:16:34 2025 GMT
Not After : Apr 28 16:16:34 2028 GMT
Subject: CN=68bf0167-a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:7e:3b:a4:b5:a8:bb:75:f9:26:a9:9d:14:
4c:1c:35:b2:36:c4:fc:44:94:8d:f2:ef:5e:df:99:
d5:d7:9e:9c:5f:25:d0:22:a0:6f:7f:2f:7c:84:40:
b7:73:df:a7:e8:17:0d:de:cd:83:08:7c:7e:50:b2:
0c:11:3f:d0:77:f1:be:7f:62:d4:a2:b2:f2:e5:f5:
53:9b:31:d8:26:28:58:89:1c:a5:36:62:1b:d2:c6:
9c:74:f0:78:bf:3a:ab:15:a8:44:46:7f:81:c7:6f:
07:15:19:9a:be:4b:b0:30:f9:8d:4a:d9:b4:0f:59:
6a:a8:0a:c1:25:a9:16:82:6b:0d:08:f1:27:9e:a4:
0b:9a:ab:7d:67:3c:87:84:20:06:c2:d1:c9:a0:88:
2e:03:37:92:d4:20:1d:a5:d4:d1:9f:e6:65:b7:8a:
45:13:7f:1e:e9:8d:5c:6b:ee:93:c3:c6:18:29:5b:
12:48:87:0e:48:f5:05:17:64:9b:8e:6c:60:6d:d7:
c1:ac:e6:98:9f:c1:8a:ad:6e:82:a8:40:17:aa:c4:
4b:f3:da:36:1a:8e:e9:e7:fd:37:80:37:93:da:43:
88:5e:e9:06:62:cf:0f:91:f8:c1:0b:d2:b7:49:0b:
89:4b:86:7a:77:7d:06:4b:13:5e:3f:c0:83:32:6c:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:19:C6:85:C3:9E:4F:EC:93:00:76:08:93:FD:4B:6D:22:EF:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/330145EC8CCF11F0BA55ACAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ff:48:db:33:10:f4:62:ac:f7:ab:9e:48:8f:e1:88:ef:6b:
01:92:ba:13:47:7b:b5:48:7d:f2:b4:75:1d:24:5f:92:59:35:
9c:29:f7:9e:60:8b:c2:c2:a6:1c:3c:49:2d:4d:7a:23:56:8c:
0b:20:4c:cb:ed:fb:16:22:45:d0:fa:13:3d:08:3b:13:10:77:
65:68:18:50:98:dd:9c:db:1a:d2:fe:36:d3:47:c2:01:fd:47:
04:40:0a:2b:a3:28:99:47:91:82:f1:41:d5:1d:aa:1d:81:68:
c9:c0:0d:6d:3d:ca:62:6a:05:82:8e:61:69:c9:ac:ca:3f:9b:
fa:e0:d7:ea:77:ce:6a:6e:9a:f3:aa:41:74:38:f3:14:f0:db:
77:2f:84:0d:75:f3:dd:c2:39:23:4c:c2:82:29:94:e3:e4:08:
9d:20:b9:93:73:ae:91:5d:22:c7:d3:2b:ad:02:c3:e1:2f:d8:
4a:41:dc:fb:25:19:27:5a:2d:5a:fa:cf:f4:36:61:0a:a7:db:
5e:11:eb:db:47:c9:14:69:db:c3:f4:b7:46:c6:5d:dd:4d:24:
2d:cb:87:12:b4:e1:aa:dd:2e:6d:86:5d:65:f8:2c:bf:f7:a1:
61:63:81:81:44:f8:ea:0c:42:9f:15:62:b9:11:c5:7f:a6:44:
2d:5f:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:08 2025 by rpki-client