Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85013F84267511F09DD174C7DAE4EC9C.roa
File: 85013F84267511F09DD174C7DAE4EC9C.roa (raw, json)
Hash identifier: 92wbHkQfsYBMKHdR9GRnJAcGPm0vJ8/Z1rORHXoDh1k=
Subject key identifier: 06:5F:4D:90:23:D3:B4:DB:2D:D3:08:B9:B6:88:0A:5D:CB:A2:1A:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01513C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85013F84267511F09DD174C7DAE4EC9C.roa
Signing time: Thu 01 May 2025 10:17:44 +0000
ROA not before: Thu 01 May 2025 10:17:39 +0000
ROA not after: Fri 28 Apr 2028 10:17:39 +0000
asID: 17561
IP address blocks: 45.203.64.0/24 maxlen: 24
45.203.65.0/24 maxlen: 24
45.203.66.0/24 maxlen: 24
45.203.67.0/24 maxlen: 24
45.203.68.0/24 maxlen: 24
45.203.69.0/24 maxlen: 24
45.203.70.0/24 maxlen: 24
45.203.71.0/24 maxlen: 24
45.203.72.0/24 maxlen: 24
45.203.73.0/24 maxlen: 24
45.203.74.0/24 maxlen: 24
45.203.75.0/24 maxlen: 24
45.203.76.0/24 maxlen: 24
45.203.77.0/24 maxlen: 24
45.203.78.0/24 maxlen: 24
45.203.79.0/24 maxlen: 24
45.203.80.0/24 maxlen: 24
45.203.81.0/24 maxlen: 24
45.203.82.0/24 maxlen: 24
45.204.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86332 (0x1513c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:17:39 2025 GMT
Not After : Apr 28 10:17:39 2028 GMT
Subject: CN=68134a48-6aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:9e:58:c5:3b:7d:b0:6d:c9:2e:90:06:64:
d3:84:f9:96:6b:93:6a:3d:4f:81:3f:2a:5d:7c:1b:
e3:18:2c:de:2f:bc:5b:96:47:90:6a:5c:c9:1c:ff:
76:33:3f:95:c4:60:26:b9:1b:d6:9a:f3:fb:96:7a:
ee:e8:5d:21:28:94:e6:9a:4c:20:2f:a4:bd:c1:20:
bd:a7:07:77:15:eb:37:5f:d6:e4:c6:e4:fe:aa:3f:
f7:d8:55:7a:14:17:f0:e3:ab:e8:88:3e:13:74:a6:
62:ef:fb:b5:b8:4b:c3:8d:ed:41:bd:e9:86:fa:8e:
48:f7:67:df:ca:52:50:62:47:1d:87:b5:a2:de:1e:
3b:1e:89:02:03:b5:f0:6e:5d:97:66:c7:f8:5d:d5:
31:f6:38:97:18:a2:0e:34:5e:84:88:6a:d2:46:6c:
56:b8:ca:81:a3:bd:3a:c8:ab:cf:ea:c5:ed:15:e7:
6f:cd:b8:7d:b0:30:e0:fd:f1:a2:f7:5e:28:fb:52:
66:14:1b:3a:d7:b0:87:d0:5b:2b:b5:9d:84:41:f0:
1b:ae:a4:ff:39:af:8c:c7:f4:84:70:82:7a:e2:33:
c6:98:3d:24:6a:76:a5:be:fb:94:41:55:36:55:e2:
0f:17:fe:10:c8:6d:d7:42:63:b2:25:8e:b0:ba:12:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:4D:90:23:D3:B4:DB:2D:D3:08:B9:B6:88:0A:5D:CB:A2:1A:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85013F84267511F09DD174C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.64.0-45.203.82.255
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7a:68:e6:4f:a4:f8:a6:ad:9f:00:5d:bf:cd:69:b3:f6:b5:
de:5a:16:4c:48:0e:e2:0b:31:ef:9f:67:38:ff:c7:ea:28:fc:
38:15:97:e2:59:6a:47:69:ba:c5:30:e0:20:40:af:0b:da:f4:
b1:0f:9e:9c:84:ff:ef:69:1e:70:5f:59:65:39:5f:7c:6f:a8:
8c:dd:df:9a:2a:0b:9b:1b:3d:90:24:27:57:8a:dd:f9:8f:c9:
70:f0:6b:74:fd:ac:3b:e4:af:d6:89:47:ab:1f:8f:5a:ac:36:
f3:60:8a:b9:6d:03:c7:e1:f8:8f:d8:4e:1d:32:cf:29:71:38:
8c:a5:30:97:69:4e:fb:7f:c8:ad:1f:ec:3b:bc:0f:1e:a1:f3:
9f:db:c9:60:1e:f4:3a:79:75:f9:0a:3f:b3:da:93:48:2e:56:
a8:01:cb:14:bc:05:22:45:97:4f:72:64:da:8e:8b:2a:a3:12:
8c:87:fc:ea:94:2c:bd:aa:a5:d1:eb:93:63:98:f0:b2:43:a3:
02:0e:b2:90:ad:a1:ab:de:8b:89:20:c3:d9:b2:29:af:a4:f0:
7c:42:4a:da:d2:c3:f0:2c:79:84:c5:d3:ad:91:07:6a:84:9d:
37:bb:9f:8e:7e:8b:7f:92:fd:46:f9:d3:5c:0f:a8:4b:b4:d3:
19:9e:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:53:11 2025 by rpki-client