Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D98C978E803311F0BF56ABA3DAE4EC9C.roa
File: D98C978E803311F0BF56ABA3DAE4EC9C.roa (raw, json)
Hash identifier: tq5KBKe1qvzg+UBQZ50Kf/yaXX+cQhdOrObLfHLuu0Y=
Subject key identifier: A6:92:80:6B:90:FE:B8:57:67:05:B6:E3:3D:50:46:D5:C2:E8:E2:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D98C978E803311F0BF56ABA3DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 15:14:23 +0000
ROA not before: Sat 23 Aug 2025 15:14:16 +0000
ROA not after: Tue 02 Sep 2025 15:14:16 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93997 (0x16f2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 15:14:16 2025 GMT
Not After : Sep 2 15:14:16 2025 GMT
Subject: CN=68a9dacf-3434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:29:91:7a:5e:cf:0b:5d:6e:17:91:59:c3:
b7:77:e7:55:e8:b8:7b:fb:31:26:07:d8:f7:28:cd:
27:a4:f3:aa:57:ee:42:3d:c1:89:f1:4e:46:2b:d7:
aa:4b:a0:36:cd:2a:d7:25:d0:c6:d3:bd:63:07:36:
e1:10:8e:ea:fc:30:bf:89:8a:73:6c:c4:50:8b:85:
a4:f1:6b:2f:2a:81:a7:38:a3:ef:0d:41:59:33:b5:
b2:cf:72:2e:da:1d:d6:8e:ce:cb:27:a1:e1:b5:eb:
ef:a0:ce:f1:63:6d:12:28:25:1b:8a:b2:22:36:29:
93:e3:92:2d:ff:c6:c3:d4:70:03:bf:09:fe:48:a3:
55:76:f3:7f:1c:41:51:2b:61:26:03:d8:f1:83:44:
91:be:bf:5a:a6:01:90:a3:ea:84:a3:2f:e4:a2:3c:
88:26:e3:24:4c:89:cd:d5:c2:a3:a7:e3:49:bc:28:
dd:e5:16:a7:3f:ac:fa:9c:c5:ad:2b:10:de:95:d7:
02:c6:d0:a0:f8:c1:c3:98:43:9b:3d:40:47:f2:c5:
b8:35:c2:8c:a7:19:af:80:99:a8:61:63:5c:13:60:
9a:0a:d9:89:32:4d:a1:cf:94:2a:e4:ee:77:fe:b4:
eb:a7:67:3f:4a:bc:ea:99:a3:09:76:ca:63:02:68:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:80:6B:90:FE:B8:57:67:05:B6:E3:3D:50:46:D5:C2:E8:E2:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D98C978E803311F0BF56ABA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
94:3b:89:a6:fd:3d:d4:f2:36:0d:ac:0f:8a:6c:7b:b7:fa:2d:
19:fa:c6:81:3b:64:d6:de:c3:3f:28:d4:ae:ac:b1:c7:53:4f:
67:df:dd:a8:9b:b3:59:99:d7:aa:72:cc:7c:2b:d1:b0:6b:05:
a6:d3:11:41:db:3b:8f:22:10:b3:32:3a:5a:13:5a:9f:4c:11:
e7:94:9c:57:4a:ec:18:1e:3f:f8:3d:39:00:c3:f0:6f:c1:b6:
59:eb:04:b0:5c:86:c9:22:a2:5a:63:0a:3a:a2:5e:29:9f:95:
bc:1f:8b:d8:de:dc:32:03:f9:60:9d:43:8c:f5:8a:58:b7:ef:
b9:7c:48:d7:68:03:cf:f2:0b:b7:72:10:32:04:68:4a:d3:e9:
4d:fe:66:e3:7c:0a:72:96:9f:78:8a:72:fb:7c:9a:f2:3f:be:
48:c4:cd:cd:40:92:23:bb:0d:e5:c2:d7:3f:cc:02:ef:02:f3:
3e:21:50:c9:8b:08:18:2f:5e:ef:96:76:cc:66:b9:08:42:68:
53:1e:e7:4a:6e:4e:86:25:bb:2b:a8:a7:bd:99:c1:b9:9b:2b:
45:b5:ec:02:4f:72:cf:fd:b6:b0:40:af:a5:c9:e9:26:d5:2a:
d0:a4:ec:23:12:e0:87:78:b8:07:8b:d6:85:8d:ec:e8:9a:c9:
1e:a9:34:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:43 2025 by rpki-client