Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/450219FA76D211F08E0895C8DAE4EC9C.roa
File: 450219FA76D211F08E0895C8DAE4EC9C.roa (raw, json)
Hash identifier: p/uKZLMIxUofDGzTV7DxpnCd5i3Swo2UDh9XvyC8/iI=
Subject key identifier: 20:8C:ED:E5:2E:12:85:EA:43:27:26:22:7F:55:0E:4D:4D:33:26:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/450219FA76D211F08E0895C8DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 16:43:12 +0000
ROA not before: Mon 11 Aug 2025 16:43:08 +0000
ROA not after: Tue 11 Aug 2026 16:43:08 +0000
asID: 138415
IP address blocks: 156.246.64.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92751 (0x16a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 16:43:08 2025 GMT
Not After : Aug 11 16:43:08 2026 GMT
Subject: CN=689a1da0-40de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:81:32:3a:31:cb:51:08:aa:b6:27:73:d7:
7f:35:94:a4:98:74:b9:15:6f:09:07:69:60:f6:12:
be:da:67:88:76:40:b1:e4:4b:7e:ee:af:f7:20:b2:
a3:f7:4e:d2:8c:32:6c:b5:23:af:2a:33:bc:47:be:
13:5c:d0:fb:9c:4c:a1:36:12:82:80:0c:ad:cf:45:
73:5b:dc:6d:e7:04:17:5b:af:9a:8a:e5:76:7a:d7:
e0:04:0c:2e:b4:23:99:3a:08:34:9b:62:7a:3e:cc:
d7:a9:9a:39:f7:df:d8:a6:59:39:29:5d:f1:f6:ef:
5a:17:0f:d5:b9:bd:6d:46:70:82:b5:18:d7:a4:dd:
af:af:62:6c:5b:c2:b4:91:8f:dd:dc:40:16:4c:db:
92:1e:d6:42:a2:16:bf:a9:c9:2c:c0:c0:13:66:74:
58:b1:90:a7:e6:0a:3b:83:74:fe:c8:9e:a9:0d:35:
8a:93:6f:54:d6:60:ca:22:80:c4:e0:76:57:ce:e2:
5d:65:92:62:21:73:8c:f2:5d:00:85:1c:65:5e:5a:
16:c3:f2:52:76:1e:b6:7c:60:ed:92:12:6d:db:db:
2d:8b:b8:c1:d5:ea:1f:08:e5:48:c5:db:2c:fe:ad:
67:a1:bc:43:28:7c:08:91:1a:70:8c:80:61:fd:8f:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:ED:E5:2E:12:85:EA:43:27:26:22:7F:55:0E:4D:4D:33:26:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/450219FA76D211F08E0895C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:61:36:3f:26:27:68:7e:33:b5:b4:28:1b:24:ff:dc:16:b5:
9c:fb:43:26:16:87:d4:00:94:50:e4:8f:cb:3b:49:d4:d5:00:
72:25:69:87:8b:68:cb:fa:94:f1:9c:2f:f7:75:52:5d:5d:69:
e7:e8:75:01:f4:3f:e3:02:01:b2:80:8c:77:19:d5:86:9f:c0:
71:64:33:16:70:2b:74:d8:c5:70:b6:49:f3:dd:a3:52:41:11:
dd:82:6b:82:d2:cf:c0:b0:12:12:62:4f:2c:51:b6:a6:65:f6:
52:02:52:ed:90:1c:87:ed:50:cf:8c:e9:96:d9:79:c7:b6:67:
ec:54:4a:0b:0f:88:21:20:9d:47:e5:88:e9:8f:85:2b:c1:6e:
f1:a6:7e:dd:b4:19:e8:b1:4e:72:de:c0:f1:1c:3b:65:e7:46:
37:7f:23:52:8b:41:65:3a:e6:91:b8:5d:2e:b3:30:51:55:b9:
1d:73:26:b6:fe:54:63:da:10:c1:38:a6:53:d4:75:41:ea:dd:
ea:50:51:a8:72:16:ad:56:ed:5b:e9:3e:49:3a:e2:85:2f:08:
30:ad:97:a4:c8:da:dd:82:bf:61:74:b1:c2:41:4f:f2:75:94:
b7:ac:a0:86:59:da:b9:d6:ed:9e:ac:38:60:b3:0a:bd:26:7d:
70:39:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:40 2025 by rpki-client