Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD6C0C859D511F0B506B799DAE4EC9C.roa
File: 1AD6C0C859D511F0B506B799DAE4EC9C.roa (raw, json)
Hash identifier: sL2HuCAgx/qVUnX8g4bk2t8EVTLf+Q/HP0Spa6vBw1A=
Subject key identifier: 97:86:39:3D:BF:29:54:14:DA:60:4C:B0:46:A1:35:84:5E:97:B0:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD6C0C859D511F0B506B799DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 19:20:27 +0000
ROA not before: Sat 05 Jul 2025 19:20:22 +0000
ROA not after: Wed 10 Sep 2025 19:20:22 +0000
asID: 395793
IP address blocks: 45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90587 (0x161db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 19:20:22 2025 GMT
Not After : Sep 10 19:20:22 2025 GMT
Subject: CN=68697afa-80f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:13:4d:6d:6a:73:e3:a2:91:08:6a:71:50:
da:ca:2c:33:79:45:16:ff:5b:5e:f2:61:fa:a8:37:
28:08:66:79:41:5b:04:8a:8f:08:bc:73:67:54:5e:
17:6e:28:da:f0:b2:fd:06:18:eb:6c:15:c5:fe:b1:
bf:1f:d4:6e:aa:09:49:aa:09:99:96:1e:d3:9b:cd:
4f:9d:c5:1a:02:4f:8b:68:54:f3:f3:2f:4e:f1:a8:
1e:44:75:c7:1a:f8:af:c3:86:5f:e6:03:e7:b4:40:
c9:99:41:f9:d1:ca:5e:be:69:ba:68:20:d5:99:d6:
9f:f4:01:65:0b:c9:c2:55:6e:e6:21:6d:bf:bd:bc:
e9:aa:0b:74:91:2d:c8:92:b1:9b:88:dd:72:f8:9e:
63:86:bc:55:f3:98:b1:0b:9c:22:d2:11:9a:b3:cd:
20:a9:71:c6:2f:e6:ad:c2:63:c9:13:40:ce:ad:bc:
23:c5:8e:59:db:97:62:cf:73:b1:b7:d1:7e:95:7d:
1d:a5:c8:3b:e7:7d:51:75:ad:c7:2c:c7:03:38:79:
14:41:ed:6d:24:93:bb:b8:02:84:4f:2e:b4:26:21:
3d:2b:ca:11:da:36:b3:ee:04:23:be:9b:50:69:de:
0a:e1:08:a7:fb:0e:f7:11:4c:ff:2b:06:07:49:3a:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:39:3D:BF:29:54:14:DA:60:4C:B0:46:A1:35:84:5E:97:B0:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD6C0C859D511F0B506B799DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.147.0-45.204.148.255
Signature Algorithm: sha256WithRSAEncryption
54:f1:22:88:3a:52:c0:b0:57:d4:a7:7e:5d:1b:24:5f:37:fc:
2c:db:6f:8a:77:9c:eb:cf:b5:84:95:7a:1d:49:ab:54:69:b4:
c4:db:b0:0b:41:3c:e5:7a:09:b3:75:7d:07:97:e9:53:52:d2:
40:c7:dc:21:1d:4d:04:3b:0f:67:9e:74:0b:5a:d9:79:35:d7:
d9:9c:f2:be:4f:52:06:bd:5f:d7:7c:77:e3:3c:10:25:ed:52:
81:c3:cb:97:aa:70:40:bd:32:2e:00:11:a5:c4:9f:a2:b0:86:
19:d5:41:58:c3:89:d6:c4:63:5d:6f:7e:5f:12:33:59:3a:f7:
f0:92:69:05:c7:0b:e6:8c:c5:46:92:b4:ad:0d:be:75:0b:39:
c9:c7:4b:49:59:5a:54:d5:f4:b1:58:8f:43:9c:c5:8e:13:7e:
2f:96:1b:e2:73:b9:a6:d2:f4:23:6f:34:b9:cb:52:19:cf:69:
97:40:0a:7e:52:21:42:57:99:40:73:d7:a6:ea:b1:43:ff:26:
27:73:24:f5:16:ff:bf:d9:29:fe:2b:4e:30:00:7c:65:91:47:
9a:f5:88:ab:b8:8e:5a:93:6b:fb:8a:c9:db:6b:a8:5e:4f:ff:
43:34:9f:e3:fb:3c:dd:d0:ed:73:25:41:0c:5d:78:bc:2e:01:
dd:35:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:20:24 2025 by rpki-client