Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7CE4A4C752511F0B38A98E5DAE4EC9C.roa
File: C7CE4A4C752511F0B38A98E5DAE4EC9C.roa (raw, json)
Hash identifier: i9tq54GYI4xnVi464NQcCdVvxOs/jqh97RRWUk5igr8=
Subject key identifier: E0:64:73:25:24:49:7B:7F:5D:C0:3F:61:9A:A7:F4:52:1F:78:5E:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7CE4A4C752511F0B38A98E5DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 13:35:58 +0000
ROA not before: Sat 09 Aug 2025 13:35:53 +0000
ROA not after: Mon 15 Sep 2025 13:35:53 +0000
asID: 400046
IP address blocks: 45.195.64.0/24 maxlen: 24
45.195.65.0/24 maxlen: 24
45.195.66.0/24 maxlen: 24
45.195.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92627 (0x169d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 13:35:53 2025 GMT
Not After : Sep 15 13:35:53 2025 GMT
Subject: CN=68974ebe-c0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:c0:20:1e:5a:b9:81:18:b5:76:15:42:7a:
ed:87:4e:e3:76:96:0b:f4:8a:cb:c2:f2:17:f7:cd:
d5:59:59:26:c7:62:a8:47:7c:aa:f8:bc:ce:bc:d6:
19:13:83:a7:ef:03:f9:be:f0:cb:31:ea:d4:80:88:
08:87:aa:a3:36:ae:dd:d5:82:c6:e3:c4:cb:2a:d1:
07:3f:5a:ff:b9:84:8b:b3:8c:f7:95:cc:f5:56:62:
c0:03:8e:46:75:d4:4c:88:2c:66:18:97:b7:d8:8d:
a6:5e:90:2d:33:68:d2:3b:cd:af:a8:83:ea:56:be:
46:7a:0d:40:04:fc:43:a2:dd:9d:30:25:a4:4f:b4:
8a:df:4e:88:b9:9d:c7:ce:e7:6f:9b:4a:46:0e:24:
1b:bd:77:a5:ec:c4:a3:38:c4:86:d7:09:d3:ff:3c:
73:53:c3:f0:5e:b0:60:a9:5d:63:4f:2a:97:c2:05:
8d:9c:f9:98:31:37:74:aa:26:95:e6:51:34:b3:43:
eb:f4:f2:be:72:9f:cc:77:2b:b3:21:ba:7a:7f:1d:
dc:2a:89:63:b1:f9:f7:92:80:da:66:bb:b4:8c:25:
1d:9d:1e:6b:d2:e3:7c:43:73:49:66:36:9a:24:71:
68:8c:be:7d:3d:a3:eb:3c:c8:2b:7d:75:91:f8:c0:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:73:25:24:49:7B:7F:5D:C0:3F:61:9A:A7:F4:52:1F:78:5E:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7CE4A4C752511F0B38A98E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.64.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b1:f0:fd:b7:20:59:6f:b1:a4:9e:d0:85:18:35:84:6b:2f:
9b:dd:b3:04:9a:b8:85:47:94:4d:f5:3e:1e:79:7d:4c:ea:cf:
1d:7d:07:60:6f:b0:06:8c:51:07:6c:2f:bb:f6:06:ca:16:0d:
f7:b2:eb:fb:20:10:8a:eb:75:fa:ff:90:d4:4e:36:42:af:d2:
0c:25:f0:0b:62:fd:8c:25:94:e7:68:10:57:53:d9:2c:e4:84:
4f:9b:93:d7:d8:35:16:43:26:c9:e8:39:34:44:f4:06:4e:a9:
28:2b:2a:61:4c:1d:0c:a4:a9:b2:f9:c6:e8:d7:39:a9:ab:cc:
e5:0d:82:29:0e:76:ee:5f:65:e7:df:e0:e3:ca:d7:7b:6f:9a:
38:23:0a:77:67:90:26:69:0d:64:33:78:d1:45:cc:ca:70:5c:
c8:26:32:69:13:06:7e:ee:c2:d2:0c:0a:0a:fa:0f:5d:1e:2e:
79:7d:dc:d4:d8:5a:d1:1c:31:7e:6a:d2:b3:01:66:48:30:67:
00:bd:c6:69:e8:ff:eb:02:10:ca:71:02:7f:07:c5:40:e6:88:
f4:48:51:d4:17:e3:9a:42:6e:05:19:1b:12:fd:81:ef:b0:5d:
af:ea:dc:cd:f9:24:b9:60:47:c3:6f:6a:1d:a8:39:a2:b8:39:
a9:a8:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:00 2025 by rpki-client