Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFCAD596801B11F092C1DF88DAE4EC9C.roa
File: EFCAD596801B11F092C1DF88DAE4EC9C.roa (raw, json)
Hash identifier: f296lVs52gpYTf9TX6ZHXLpQQYopJyIHxYNl+jCwssQ=
Subject key identifier: 32:06:0C:BC:4C:0A:D1:F7:F9:F7:8D:11:DC:C4:52:54:56:B4:F6:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFCAD596801B11F092C1DF88DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 12:23:13 +0000
ROA not before: Sat 23 Aug 2025 12:23:00 +0000
ROA not after: Sat 27 Sep 2025 12:23:00 +0000
asID: 400536
IP address blocks: 45.198.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 18:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93965 (0x16f0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 12:23:00 2025 GMT
Not After : Sep 27 12:23:00 2025 GMT
Subject: CN=68a9b2b1-d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:55:d2:26:0e:ab:b5:a1:26:0b:b3:5e:84:
7d:25:02:64:4f:00:10:53:ae:31:0c:2b:bf:a6:88:
19:fb:70:aa:cf:09:73:88:7b:52:7d:8d:04:16:e0:
80:50:b1:d3:03:34:60:73:f9:d7:69:f8:da:4b:da:
c9:78:84:30:4e:f0:a8:2e:0e:93:11:db:ad:fe:f6:
c0:71:bc:17:5c:51:fa:e1:7b:ef:19:c7:d4:de:9e:
31:64:e4:f2:17:de:6a:c7:19:d5:d2:48:19:e4:ba:
c0:dc:35:57:d1:8c:17:c1:0e:1f:cf:66:79:50:ad:
ce:57:2d:33:2b:5c:a8:ad:7b:cf:bb:4e:e3:1f:20:
ea:73:c6:4f:da:4f:99:ca:4a:1b:bb:a0:f3:82:4b:
c9:39:31:08:1e:7f:70:7a:2a:c8:92:72:b9:68:b5:
f4:cb:e8:ac:69:dc:ba:6a:4d:cf:e0:01:a8:c5:61:
0d:29:fd:2d:e3:03:9b:36:57:6b:fd:28:b9:a7:df:
09:e4:1b:a5:85:ce:b0:eb:68:9c:50:f5:78:c7:5e:
0a:7b:7f:aa:13:43:ad:89:03:5b:29:01:d7:79:fc:
fa:42:39:96:88:4d:24:87:f4:a5:1d:53:77:67:3e:
d4:20:eb:29:6b:80:49:a0:1d:50:fb:50:1d:97:e6:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:0C:BC:4C:0A:D1:F7:F9:F7:8D:11:DC:C4:52:54:56:B4:F6:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFCAD596801B11F092C1DF88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.162.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:13:2f:09:c1:6a:7a:f1:fc:fd:32:c1:e8:3d:b6:cb:c5:
aa:de:f9:f5:3c:82:60:af:17:29:ce:1a:7e:bb:7a:07:2b:ff:
5b:bd:c7:6e:b0:4e:76:1b:39:01:68:98:25:a1:db:57:e1:0e:
3d:fb:29:80:8d:46:6d:c0:0d:dc:06:21:9e:4f:25:98:da:f4:
5c:71:ff:66:61:08:be:96:29:7e:e5:4d:6d:73:0d:b8:8c:44:
d2:0b:dc:c2:20:5f:c3:1f:0d:7d:b3:c4:ac:93:c3:6e:14:69:
8a:2f:30:60:b5:f2:49:91:d4:8c:da:83:ce:18:ac:0d:61:02:
e5:69:e3:0c:4a:33:32:ef:49:89:b4:2d:d6:b9:69:3e:ea:9a:
b5:a7:da:91:08:0d:31:73:9b:b6:1b:c6:00:51:22:01:39:9f:
84:be:d2:0c:b4:51:cc:d5:9e:de:31:3c:75:a1:da:78:6f:a9:
d7:1f:b2:f1:b8:94:9f:bc:48:f4:79:83:71:b5:87:34:41:9d:
27:b8:72:9a:e0:41:ef:67:25:03:3e:f1:f6:25:6e:73:ae:5a:
dd:77:c3:c3:c8:ea:18:3d:a1:12:10:74:af:fb:7f:36:ba:9b:
43:b3:73:f5:6a:bd:5a:08:fe:ce:c0:23:cb:2a:55:4a:c0:28:
b2:fa:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:07:20 2025 by rpki-client