Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49707BD85D7511F0B1F2B2C3DAE4EC9C.roa
File: 49707BD85D7511F0B1F2B2C3DAE4EC9C.roa (raw, json)
Hash identifier: J/8Bd+vrMUc8IVmuHgEwn0VU6gn0psQx+0JnsQXNflI=
Subject key identifier: 93:91:64:FB:C5:62:F4:7C:76:52:D8:2A:82:B5:3F:A1:3B:0D:5D:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01646B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49707BD85D7511F0B1F2B2C3DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 10:04:38 +0000
ROA not before: Thu 10 Jul 2025 10:04:32 +0000
ROA not after: Tue 19 Aug 2025 10:04:32 +0000
asID: 57043
IP address blocks: 45.198.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91243 (0x1646b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 10:04:32 2025 GMT
Not After : Aug 19 10:04:32 2025 GMT
Subject: CN=686f9036-4e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:8d:ad:16:c2:c6:6c:2e:d5:c6:97:5e:38:
2f:67:d3:05:9b:a9:51:ab:40:01:25:2c:be:0d:c9:
68:2b:29:44:83:5a:99:21:4b:cc:17:f7:87:75:68:
b5:fb:ac:f0:bd:38:3d:54:91:85:15:8d:04:b8:04:
33:11:7b:cb:e3:75:dc:77:02:6b:59:a7:7c:7f:fd:
d7:57:ac:b3:56:ba:9f:92:fa:c6:2b:9f:a8:f7:3e:
6c:68:59:79:fe:62:85:3b:17:92:95:ef:98:7b:76:
22:b8:fe:09:d7:31:ac:44:c7:a6:be:1e:88:52:ff:
e2:ad:59:d8:1e:51:26:04:b9:25:60:d8:b0:6e:8d:
fb:1d:9e:52:db:06:6a:e5:24:73:fd:11:91:fb:24:
0b:8d:60:f9:94:d2:6e:f9:38:14:07:54:43:0b:02:
72:1b:54:01:a2:d1:be:24:0b:ce:c8:f6:11:e0:e3:
ed:ba:01:4a:26:ed:f8:2c:88:83:13:52:33:44:14:
ed:72:90:8d:5c:40:41:87:34:7f:77:78:d1:63:bb:
9d:bf:47:4a:1f:96:e9:e5:54:ff:12:68:64:42:03:
da:06:dc:a1:0e:a3:50:d3:2f:0b:8a:3f:25:aa:54:
92:55:bd:63:ad:8f:74:2d:39:43:01:af:cd:0a:41:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:64:FB:C5:62:F4:7C:76:52:D8:2A:82:B5:3F:A1:3B:0D:5D:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49707BD85D7511F0B1F2B2C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.70.0/24
Signature Algorithm: sha256WithRSAEncryption
01:57:27:32:b9:bb:81:31:9e:b1:80:67:e5:7f:8d:7d:df:e4:
d9:6e:13:6b:ca:64:71:c2:1d:3d:9e:ea:4c:bb:54:44:e1:bb:
84:12:39:8e:e0:55:c8:87:aa:a2:88:36:79:f4:e3:6f:fc:0d:
2d:da:81:de:8e:57:51:ca:8b:80:36:3c:77:d5:96:f1:aa:8f:
7e:1f:53:5f:79:52:2b:d3:8a:8e:e8:69:6b:6d:75:cb:90:89:
83:31:12:3e:d9:32:a0:73:58:34:01:b8:b2:e5:39:7b:9c:b5:
ee:b7:08:90:79:98:7b:a8:56:02:59:85:c4:89:86:31:4e:88:
bc:10:75:b3:8f:d5:f7:38:b1:99:da:48:b2:e8:0d:9e:56:ab:
c7:00:6c:0d:11:ee:58:f8:7f:b5:33:cc:25:ce:d3:81:4e:40:
f0:1c:59:76:01:b1:26:91:5e:32:8f:db:d1:df:ba:86:e5:96:
15:2a:2b:68:4a:f4:cf:28:ab:3b:a8:fc:a1:70:f9:7c:f9:79:
f4:db:b5:c2:03:39:1b:5e:11:7f:e7:0f:46:82:1d:97:ba:94:
c8:fc:15:55:d6:d4:c3:6b:8c:ee:c2:a7:37:0f:8b:91:2d:46:
81:60:16:04:8e:b6:40:23:4d:0e:f2:bc:b4:df:61:ee:ed:32:
e7:43:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:55:00 2025 by rpki-client