Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D0B4BF65CA111F09D9846DCDAE4EC9C.roa
File: 6D0B4BF65CA111F09D9846DCDAE4EC9C.roa (raw, json)
Hash identifier: HYRsGz+Pj/iwZdbKGeA/f/mLzYaL92+6FhybOOMLTU8=
Subject key identifier: 16:61:39:99:26:97:DD:E0:33:B0:C6:3A:EC:30:00:DF:13:2F:F4:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016381
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D0B4BF65CA111F09D9846DCDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 08:48:04 +0000
ROA not before: Wed 09 Jul 2025 08:47:59 +0000
ROA not after: Tue 28 Apr 2026 08:47:59 +0000
asID: 262167
IP address blocks: 45.199.158.0/24 maxlen: 24
45.199.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91009 (0x16381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 08:47:59 2025 GMT
Not After : Apr 28 08:47:59 2026 GMT
Subject: CN=686e2cc4-721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:11:97:73:c0:2f:57:7d:e2:33:a8:6f:85:
4a:5e:47:ad:5a:3d:6c:ef:82:27:f7:f8:55:3c:ca:
65:3a:eb:1a:28:c3:58:2f:ec:96:c6:a7:32:74:bf:
da:14:ca:78:cf:2e:09:cd:e0:db:91:6e:94:36:11:
f4:ec:1e:0a:9f:62:58:8a:d9:7b:7d:4e:b6:e4:f6:
6c:63:1f:dd:84:27:fc:0c:e0:cd:03:17:88:82:45:
e6:d0:23:84:46:dc:79:c8:cf:56:12:5b:87:5e:3b:
bc:c6:2f:5c:28:dd:8e:fa:69:16:0c:6e:a6:16:a1:
ac:ad:fb:d8:c2:ba:aa:dc:07:b3:65:79:60:68:14:
7a:84:f0:1c:27:fa:fe:f5:0e:14:fb:6d:e8:c7:52:
c7:75:eb:aa:bf:e5:de:fc:bd:a3:e1:19:8b:a1:4b:
ec:c7:bb:2e:3e:66:a6:58:c8:a1:c7:ef:49:2f:85:
29:ea:23:b1:1f:21:c7:bf:a3:97:47:9f:21:67:2c:
6d:f2:9a:dc:d0:59:0e:e9:39:0c:2f:6e:5d:07:84:
0b:06:4d:ff:71:d1:d1:0d:27:41:ff:a3:b9:3e:6c:
07:f6:8b:db:2e:8a:cf:24:9a:45:36:a0:58:7e:ca:
55:c5:16:64:e7:9d:59:a3:60:48:78:5c:c8:2e:93:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:39:99:26:97:DD:E0:33:B0:C6:3A:EC:30:00:DF:13:2F:F4:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D0B4BF65CA111F09D9846DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:b1:01:64:5d:6c:21:30:9e:ac:23:c6:8b:ab:cb:98:95:9f:
b5:d9:40:e7:9c:5c:93:de:9b:6a:9c:44:04:c4:9f:5d:ce:3e:
28:76:b2:59:d3:f3:30:e0:d3:b2:e3:99:4e:42:f5:ee:ce:e0:
47:40:3a:93:7c:19:96:ff:d7:de:4f:12:a0:9f:e0:d5:97:fa:
a2:3b:92:ac:a2:90:15:ec:9b:74:eb:1e:01:9b:cd:3d:b9:67:
7d:57:d6:08:f0:c0:d4:1d:fa:29:71:7f:0e:1d:8f:0f:aa:cb:
56:15:3a:8d:ad:aa:64:33:97:2b:8d:50:cc:19:ee:e5:46:27:
31:3d:a0:15:53:87:c0:96:00:fc:5b:90:e8:71:2e:d7:3e:41:
8b:f7:7f:a0:41:b7:c4:06:19:f6:9c:8a:78:b3:52:7f:b0:2c:
96:33:1f:2f:48:4b:af:91:8c:44:52:b6:38:6e:30:2b:3b:70:
3d:6a:3a:b1:e8:37:e7:22:43:e0:8d:90:95:39:58:4f:53:5c:
b8:8d:86:07:b6:ba:d6:89:fd:c4:98:b9:60:72:7d:f6:c3:6d:
34:1b:3d:bc:ad:28:c8:93:e7:a8:72:8a:b2:40:bc:23:3b:9c:
5d:f5:13:5d:ee:d7:ca:dc:4a:0e:ce:54:cd:8b:3b:70:35:00:
39:94:98:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:44 2025 by rpki-client