Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/907B19407AC911F09A9ED0A6DAE4EC9C.roa
File: 907B19407AC911F09A9ED0A6DAE4EC9C.roa (raw, json)
Hash identifier: v2CZIXejzpWGH1arxFxl1v3W/4mUEeev1swxHfWZOZg=
Subject key identifier: F7:9F:21:59:C4:42:ED:60:04:75:14:9C:28:08:EF:E8:0E:44:3A:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/907B19407AC911F09A9ED0A6DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 17:50:58 +0000
ROA not before: Sat 16 Aug 2025 17:50:53 +0000
ROA not after: Mon 22 Sep 2025 17:50:53 +0000
asID: 9009
IP address blocks: 45.206.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93053 (0x16b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 17:50:53 2025 GMT
Not After : Sep 22 17:50:53 2025 GMT
Subject: CN=68a0c502-9e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:e6:9b:c0:4c:6d:52:13:08:8d:99:1b:9d:
2b:ba:fb:92:61:c3:37:cf:74:28:70:00:c1:14:21:
17:d8:3d:fd:d9:58:ec:7b:7f:61:ff:18:01:5d:da:
18:a1:6c:c4:d0:1a:a3:c1:bd:84:ec:0b:10:b9:c1:
82:62:30:0a:94:8d:f3:83:ba:fb:6d:63:e9:76:41:
37:c1:85:e9:ca:06:a4:c5:94:6a:e6:29:0b:93:31:
ac:67:99:9d:26:e4:ed:f9:88:e2:74:43:ac:79:4d:
e1:f9:bf:a0:86:5f:e2:73:b7:ac:6d:9c:74:16:9b:
51:7e:e4:59:92:4f:12:4b:6d:b0:3d:3e:4b:ac:15:
d0:18:6e:5e:4a:c4:ec:b7:26:ab:72:0e:65:53:07:
27:dd:11:de:b6:ff:54:e4:56:cd:7c:8f:0d:e1:bc:
b5:6f:76:75:60:f8:40:1c:f8:ef:f2:7c:c0:57:e7:
18:44:11:7a:97:2a:78:ae:22:5e:78:32:a4:37:72:
ff:21:6f:15:51:da:8b:33:21:f1:bf:f2:67:c6:a5:
cf:2b:e1:d2:f6:b1:b4:90:e1:ef:7f:18:e9:15:2e:
d8:fb:cd:04:64:73:ca:ff:c0:61:36:a4:3b:9d:5d:
e6:56:0d:1b:37:04:80:6d:64:95:1d:80:79:32:a8:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:21:59:C4:42:ED:60:04:75:14:9C:28:08:EF:E8:0E:44:3A:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/907B19407AC911F09A9ED0A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.4.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cc:4b:f8:84:16:85:b6:3b:89:c9:75:fd:67:ef:54:5e:16:
a4:1b:6b:e5:7b:a2:ea:bd:f3:9c:ed:d7:ef:7e:19:5b:86:60:
63:b0:91:6e:9e:21:1d:30:c2:c6:3e:57:fb:83:63:37:17:2d:
01:7f:eb:e0:cd:d8:e2:75:8d:84:af:1e:d2:4d:66:b1:48:66:
fc:24:73:da:3f:55:a3:6e:e3:dc:79:a3:af:da:ba:cf:91:b5:
a9:d2:10:d0:cb:9d:b6:dc:b5:77:9d:23:ef:ad:7c:87:81:2b:
1b:8d:3a:c9:cb:64:55:dd:1f:93:02:2d:dc:9b:1b:4f:5b:11:
41:0f:d1:6e:d2:1b:56:23:63:de:75:37:aa:4f:8e:63:40:30:
ee:18:6b:90:6a:66:c4:29:91:5a:91:2d:b9:8b:90:09:de:22:
07:ff:10:83:7b:bf:9a:82:7a:58:ca:17:c8:45:e2:c1:29:e5:
8b:8d:40:a6:a8:a4:42:72:c0:04:e6:d8:81:da:10:70:67:3e:
05:7f:63:0b:7b:f3:ae:75:17:a2:63:e4:92:53:76:98:b8:ca:
e3:30:55:ec:4b:b0:85:0d:55:0a:69:0a:1d:04:72:7d:69:0c:
83:db:d8:ce:42:c7:9d:1d:e1:e3:6b:55:b9:02:22:53:6f:06:
df:8b:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:09:36 2025 by rpki-client