Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1A1D00A782711F0B90AAC87DAE4EC9C.roa
File: A1A1D00A782711F0B90AAC87DAE4EC9C.roa (raw, json)
Hash identifier: erae+O/zEmBJF0eVQWwu2A1aNKJMF0f/pP/8N+aFklg=
Subject key identifier: BA:BE:E2:4D:74:63:24:A4:D8:86:7F:B0:6E:65:F4:4E:A2:27:42:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1A1D00A782711F0B90AAC87DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 09:26:46 +0000
ROA not before: Wed 13 Aug 2025 09:26:40 +0000
ROA not after: Fri 19 Sep 2025 09:26:40 +0000
asID: 202736
IP address blocks: 45.207.21.0/24 maxlen: 24
45.207.42.0/24 maxlen: 24
45.207.46.0/24 maxlen: 24
45.207.57.0/24 maxlen: 24
45.207.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92845 (0x16aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 09:26:40 2025 GMT
Not After : Sep 19 09:26:40 2025 GMT
Subject: CN=689c5a56-d870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:22:51:c5:a0:9d:ce:b5:c9:45:e4:4e:4b:
2c:a1:bc:9c:bc:ea:1b:88:19:9f:2e:45:00:fc:1d:
a6:64:da:e2:0c:59:a5:1c:23:75:4d:50:50:b3:4a:
ed:64:95:7d:d5:a0:d0:7a:97:60:57:be:b7:cf:32:
7f:93:5e:45:ec:ec:d6:9a:3b:9f:64:c8:6a:44:c1:
3f:9a:82:c7:d5:f8:75:e6:ce:de:b2:4a:30:9d:4e:
29:c8:0c:93:c8:57:ff:58:f3:29:87:74:92:05:65:
9d:ba:e1:56:d0:56:8c:81:f8:99:ec:7c:8a:3b:9b:
61:3d:c4:9b:7f:33:29:d7:04:75:16:9b:64:0e:51:
10:f0:53:32:e6:8d:81:81:4b:bf:b3:e2:7a:ca:d3:
62:33:b4:00:ff:0e:7d:13:99:47:ec:d1:c2:96:f4:
79:e4:4d:fc:25:93:61:49:76:6e:a9:d8:ba:43:c2:
fb:f2:f3:ee:42:f1:69:d8:a0:ad:08:fc:8a:b3:12:
8a:4a:3c:41:56:50:48:80:0d:51:ef:79:35:d0:8b:
8e:77:7b:60:0c:0d:2e:f3:a6:2f:ca:62:8d:66:b8:
19:75:ca:2f:ef:9c:56:06:81:1c:85:fd:f4:69:4e:
07:43:fa:22:45:e3:17:dc:73:05:de:a5:23:60:f9:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:E2:4D:74:63:24:A4:D8:86:7F:B0:6E:65:F4:4E:A2:27:42:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1A1D00A782711F0B90AAC87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.21.0/24
45.207.42.0/24
45.207.46.0/24
45.207.57.0/24
45.207.171.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f5:f4:60:e7:61:29:66:dc:8f:82:7f:56:be:95:e9:5c:63:
75:6b:8a:1b:22:80:e0:d4:75:cb:a1:48:d8:eb:b7:50:0d:16:
01:72:21:4f:90:3f:33:d7:f5:c1:94:1d:99:25:6d:73:08:ec:
c7:d8:b7:1a:0f:d3:d7:56:f3:7c:d9:9a:40:a3:0e:31:b2:28:
45:2b:5a:c4:d3:fb:2f:a2:29:0e:7c:8c:7a:c0:5f:0f:37:ab:
da:9b:12:19:1a:71:b7:1f:fb:88:8b:38:ec:dc:27:d4:12:85:
61:61:ef:a1:64:32:6b:66:73:cb:06:d0:ba:4b:f4:0b:83:16:
19:72:1e:d8:f2:6d:9f:82:12:85:ee:44:a1:a2:1e:02:e7:61:
bf:64:b6:51:88:db:d8:cc:83:03:6e:75:c0:05:34:47:1d:5c:
d8:a0:11:42:c8:7d:8c:7a:0b:0c:e4:b5:e9:9d:b4:32:38:62:
0c:65:12:29:40:8f:a6:27:53:22:3d:cc:a2:ee:55:47:d6:9b:
60:4a:45:aa:8d:b6:90:63:10:3d:52:d4:44:46:48:d6:fc:18:
0b:a9:5d:93:6e:c6:93:af:09:d0:0a:e1:44:a7:33:e1:8b:87:
11:84:db:cf:9b:51:54:da:89:d9:1c:15:62:81:e3:d0:ec:11:
ef:51:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:06:23 2025 by rpki-client