Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D346046532E11F0A8DC27DFDAE4EC9C.roa
File: 9D346046532E11F0A8DC27DFDAE4EC9C.roa (raw, json)
Hash identifier: 3X8URkFiubAMOcy0C47YcpBvTQutc4fN/zAFWnhS8x0=
Subject key identifier: 70:3A:F7:B9:F3:3D:88:09:6B:87:FB:13:21:E2:C8:0B:F2:AC:E5:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D346046532E11F0A8DC27DFDAE4EC9C.roa
Signing time: Fri 27 Jun 2025 08:13:32 +0000
ROA not before: Fri 27 Jun 2025 08:13:27 +0000
ROA not after: Sun 03 Aug 2025 08:13:27 +0000
asID: 207901
IP address blocks: 45.197.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89863 (0x15f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:13:27 2025 GMT
Not After : Aug 3 08:13:27 2025 GMT
Subject: CN=685e52ac-ee39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:9a:cd:e9:82:fe:81:b0:78:01:26:67:11:
2e:10:36:13:fb:0a:00:b6:3e:87:7e:d1:44:cd:a0:
cf:b6:89:75:93:f4:e9:69:97:59:28:aa:dc:74:86:
c8:e8:c3:4e:a9:00:5c:d1:be:b2:8c:e7:0e:de:30:
9f:11:b0:83:dc:5d:4e:23:34:5d:cb:c0:cf:aa:9c:
ec:1c:20:29:5c:97:7a:69:ff:48:12:c1:2b:f2:47:
38:55:8f:9d:a8:a8:5f:d1:f9:0d:85:62:9a:11:54:
f2:8b:a0:ce:7d:f5:e3:22:c2:ed:7c:0b:bb:2b:fd:
b1:fa:68:14:d5:a6:1a:4f:02:06:5a:69:32:b5:0c:
0c:39:48:b7:be:14:72:b1:ea:05:cc:b6:32:3e:ba:
59:e1:9b:3d:51:0f:02:22:9e:1d:3e:e5:aa:4a:0a:
8d:57:14:5d:05:8a:b3:ea:0c:a8:a3:a3:08:52:4a:
8d:5e:be:ce:6d:88:d1:79:39:26:89:8f:4c:d2:6d:
8b:88:a8:8a:a8:da:20:0e:df:40:31:5b:9d:30:56:
2b:2b:64:b7:16:ba:31:f7:10:07:16:b9:93:45:3f:
09:56:34:d6:ef:a9:7e:d3:fe:ba:5f:78:b2:81:e3:
15:2d:11:f1:30:6c:2b:ec:aa:62:07:17:97:34:8e:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:F7:B9:F3:3D:88:09:6B:87:FB:13:21:E2:C8:0B:F2:AC:E5:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D346046532E11F0A8DC27DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.131.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bc:ae:60:19:4f:f6:83:5d:89:22:56:14:ee:44:35:b7:d9:
a4:b9:1b:20:bb:47:5a:6f:96:0f:e6:09:c8:3f:85:b4:a9:20:
9a:ef:5d:2f:ae:55:d3:2a:fe:6a:05:31:a6:95:3c:61:bf:ff:
81:8f:4b:6f:37:a3:6d:1b:7a:62:58:2c:3e:71:1f:56:fe:20:
ca:dd:10:70:9e:e3:b0:a2:c9:a0:08:12:a3:1f:e2:29:82:ef:
cd:65:97:0e:86:a7:df:1c:48:45:2d:11:4f:dd:e5:de:46:2c:
20:8f:54:b6:bd:f1:1b:49:06:af:fe:be:e1:e7:c3:a3:f0:cd:
44:40:7f:e0:93:26:b2:bb:30:6f:46:61:0a:46:d8:b9:84:4c:
09:0f:6a:47:c8:53:f0:bb:99:31:34:94:5f:a1:5c:56:44:56:
2b:9b:41:06:41:9d:83:6e:c3:ee:77:18:32:09:e3:25:3b:c0:
c3:34:1f:68:a0:63:45:ec:89:61:a3:1c:7a:fa:5f:5d:2b:3c:
fe:ab:1d:f4:7a:b8:a7:43:c6:35:ff:dc:51:b7:9f:30:a1:3b:
ca:9f:23:75:57:54:06:2b:68:bb:69:61:e4:11:d0:5c:62:f0:
7a:66:21:0d:04:85:ae:6e:a5:4f:67:ea:65:87:ed:49:f8:55:
da:fc:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:57 2025 by rpki-client