Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3437E71062F211F0831A30DADAE4EC9C.roa
File: 3437E71062F211F0831A30DADAE4EC9C.roa (raw, json)
Hash identifier: KfxAFDcNQ3DpCCmWmsFBgg2TBjY6U2UsK6FdsVUMwzc=
Subject key identifier: 50:2B:9C:83:2C:66:5E:FC:AB:5B:6E:D8:28:EF:92:03:32:AE:52:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3437E71062F211F0831A30DADAE4EC9C.roa
Signing time: Thu 17 Jul 2025 09:41:25 +0000
ROA not before: Thu 17 Jul 2025 09:41:19 +0000
ROA not after: Fri 22 Aug 2025 09:41:19 +0000
asID: 401701
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91602 (0x165d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 09:41:19 2025 GMT
Not After : Aug 22 09:41:19 2025 GMT
Subject: CN=6878c545-cd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:eb:f5:cc:0d:7b:18:c0:33:15:e1:7c:bf:
ef:b4:69:52:f3:ce:90:54:8f:6e:14:c5:07:9d:91:
f1:8e:3a:c1:0b:5c:c8:5d:c1:03:05:4e:e5:b9:86:
ee:9e:89:27:ed:64:c1:1a:f1:56:9f:30:a7:f8:77:
c2:cb:d8:84:e9:89:32:8a:06:b2:65:f4:ee:fd:f0:
65:07:13:ee:7e:b0:e3:70:3f:d4:59:e8:f4:23:23:
53:ac:4d:31:0f:a2:60:6e:c1:7f:a1:14:0e:d9:28:
23:39:9a:3d:4e:8d:8d:0f:c4:c6:d9:35:5d:8a:eb:
4d:6a:eb:19:98:33:27:9a:cf:e5:4f:8d:71:d4:88:
25:77:4e:12:ab:b6:00:ec:c5:f2:0e:2c:48:d4:19:
9c:86:da:14:74:04:9f:f6:34:bd:01:26:e2:89:da:
a2:db:f0:63:a1:ba:2a:ce:1d:12:f1:99:80:55:5e:
7c:0f:67:f0:03:30:e0:64:b9:38:2d:ef:76:6b:2e:
ca:07:cc:f7:95:62:91:e2:5c:8e:5f:0f:f5:89:b1:
fa:a2:78:28:7f:aa:ad:df:30:ad:77:b9:df:0c:a2:
07:10:88:69:ed:20:d0:90:59:f8:67:92:5c:60:91:
fa:e8:74:a3:5f:74:97:d1:77:1a:5e:5c:21:71:42:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:9C:83:2C:66:5E:FC:AB:5B:6E:D8:28:EF:92:03:32:AE:52:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3437E71062F211F0831A30DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
47:87:de:be:ba:e3:cc:8b:f8:be:3a:b6:a0:b9:7c:7c:bb:9d:
5e:dc:29:65:6a:aa:96:17:c9:8f:22:13:bd:22:cc:11:f2:4c:
d2:31:7f:3a:b8:fe:f5:5e:7c:76:fd:62:04:48:75:92:4e:63:
7f:94:44:65:b2:d9:c3:08:a6:70:4d:93:fc:dd:17:be:a3:77:
20:bc:9c:2d:0b:c8:08:7a:d4:18:71:95:2f:92:6a:01:eb:85:
6e:ae:e9:93:35:3a:42:85:98:2f:fd:e4:61:00:8c:fb:e3:22:
ac:b4:41:94:38:eb:80:9d:59:d1:e3:97:67:dc:55:55:6a:e6:
ad:24:98:20:82:41:9a:61:28:20:75:35:94:a9:05:e7:80:54:
45:d3:46:fb:c8:80:41:ed:bb:b9:c9:5b:8c:5c:c3:6b:07:29:
e4:be:45:06:ce:18:3b:45:a0:6b:3a:94:8b:f7:58:b3:ed:95:
f6:26:76:a2:a3:aa:af:a5:d8:fe:6c:c5:f7:9d:cb:36:fd:d9:
35:81:06:93:35:46:f3:39:99:9e:dd:9c:de:05:fa:d6:38:11:
c3:73:67:6f:0b:c2:52:ce:45:b6:08:94:b6:d2:02:88:cf:fc:
e8:73:37:4d:4b:02:c9:6f:bb:f1:60:a5:f8:c0:da:85:df:4f:
7e:29:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:29:19 2025 by rpki-client