Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D01A737676B311F08DD09189DAE4EC9C.roa
File: D01A737676B311F08DD09189DAE4EC9C.roa (raw, json)
Hash identifier: 0bFeyTzDBKlNRV9uqNrktmNsXGLsiH1vGi3tKPc+scU=
Subject key identifier: F2:96:4A:A4:24:2D:8C:7A:E8:1B:1A:EF:FA:B1:AE:84:75:82:8E:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D01A737676B311F08DD09189DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 13:05:12 +0000
ROA not before: Mon 11 Aug 2025 13:05:07 +0000
ROA not after: Tue 16 Sep 2025 13:05:07 +0000
asID: 401783
IP address blocks: 45.192.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92712 (0x16a28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 13:05:07 2025 GMT
Not After : Sep 16 13:05:07 2025 GMT
Subject: CN=6899ea87-2bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:93:a3:4d:26:e0:65:83:7f:1e:78:e3:7e:
a6:74:da:70:8e:f5:96:bf:f3:a3:d9:1b:40:23:4e:
23:f3:55:0f:bd:1f:23:d0:96:6c:ef:10:2e:55:db:
9d:b9:cb:a5:e8:60:7d:82:6d:4f:bf:a0:d8:d6:46:
a7:bb:d8:2f:c9:9d:25:fc:ee:34:fd:39:96:f2:59:
7e:7e:d3:36:94:ee:f5:d4:27:29:ca:63:2a:c5:d4:
74:e9:9a:be:89:7d:9e:ae:d0:90:d6:74:8c:e4:2b:
fd:66:26:58:bb:58:49:9a:9c:2e:ed:a4:57:ce:5e:
19:0a:d6:96:17:66:c6:8a:d9:b1:1c:f7:15:26:c9:
a9:47:8a:b8:a1:c4:ce:ce:58:c6:21:3b:92:e9:9b:
4d:f3:14:22:de:7a:3f:03:40:eb:3c:e3:c5:85:40:
42:13:dd:a1:e2:94:2f:40:b8:61:8d:d1:cd:c7:a8:
cf:e5:68:09:39:21:98:56:e0:13:da:78:8c:6d:15:
98:ee:4c:3c:98:17:80:42:88:f1:0a:c5:21:4e:9f:
64:c6:bd:5a:54:b6:77:6c:93:dc:fb:a6:e9:29:a4:
c6:fe:b1:1d:55:a5:a0:aa:55:9c:d2:1c:e9:a4:64:
92:c7:82:c0:87:a4:18:26:ba:1d:b2:65:96:e7:be:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:4A:A4:24:2D:8C:7A:E8:1B:1A:EF:FA:B1:AE:84:75:82:8E:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D01A737676B311F08DD09189DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c4:ab:08:83:92:dd:ec:8f:38:0d:90:77:99:b0:93:07:69:
fa:4a:55:7a:93:3c:62:17:f6:ca:d7:0e:09:0d:f0:1c:9f:a6:
f4:d4:63:8c:ce:ca:e3:62:64:45:cd:10:7a:e1:57:88:8c:8a:
03:4c:a5:b0:66:a7:e9:a0:e7:9d:c4:0f:5c:44:69:f6:f3:ef:
84:92:63:1e:09:15:57:ef:03:d1:fc:48:a1:1a:2f:94:35:a4:
9c:1a:55:24:0f:54:0a:8d:c2:f0:20:54:c6:e3:81:ec:91:d9:
e9:4e:1a:bf:d5:e1:dc:64:f8:3a:e9:f2:75:99:72:6d:53:4e:
d9:0d:d9:d8:89:8b:2d:f8:af:22:65:e4:a4:f5:f7:d5:78:d5:
d0:9f:dc:90:6e:c1:c7:2e:76:af:31:6c:32:0f:a5:5e:c3:d6:
75:49:fd:94:88:10:76:d3:31:c5:36:e1:21:29:c4:af:cf:b8:
ea:c4:19:4b:6c:1b:22:e7:c9:b6:0a:6e:ee:8a:ea:a7:2d:69:
4f:9e:11:68:ff:59:72:b0:66:35:64:07:16:a5:ba:98:b4:79:
5d:f2:dd:93:0f:47:6b:00:c3:47:22:b8:b2:05:f4:9c:3f:63:
a0:4d:b1:d7:fa:b2:d4:0a:cb:8a:fa:70:60:7a:5d:ac:82:58:
ea:92:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:25:02 2025 by rpki-client