Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86339826525C11F0A370228CDAE4EC9C.roa
File: 86339826525C11F0A370228CDAE4EC9C.roa (raw, json)
Hash identifier: hewbpcKR6olEysLOtRJxXT8j5xqjzW4Hmm7MVHQcKLQ=
Subject key identifier: 1F:75:A0:65:A6:62:9D:73:C6:68:C1:17:58:60:92:D1:C0:E9:A6:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EDB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86339826525C11F0A370228CDAE4EC9C.roa
Signing time: Thu 26 Jun 2025 07:09:39 +0000
ROA not before: Thu 26 Jun 2025 07:09:34 +0000
ROA not after: Thu 25 Sep 2025 07:09:34 +0000
asID: 135097
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89819 (0x15edb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 07:09:34 2025 GMT
Not After : Sep 25 07:09:34 2025 GMT
Subject: CN=685cf233-ed37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:43:1b:17:dc:18:25:07:0f:09:a1:b7:50:
de:a7:a0:af:0a:43:78:32:73:d4:06:b1:a6:fe:f4:
c1:e0:c4:4b:10:a4:0d:76:86:73:a5:69:cf:42:76:
32:f2:b9:29:fa:59:e6:07:9b:35:03:a7:f4:18:d8:
d0:38:22:bf:91:fd:5d:7c:93:ca:79:50:3e:07:a7:
71:f0:f7:e6:67:a9:d1:f7:bf:59:a0:47:24:d6:93:
5f:6e:f6:bb:20:39:ad:34:70:69:e2:d0:2b:a7:2a:
cd:85:bc:07:88:60:4a:d0:9f:93:3d:ad:83:6c:3b:
5c:44:2a:c6:8e:80:46:4f:02:23:f4:21:f1:a0:be:
f0:8d:17:c4:6c:48:ab:cf:7b:7f:13:5a:4e:5d:79:
8d:82:06:d8:75:99:b8:8b:89:5d:61:61:52:0d:f8:
71:6b:f3:a9:d2:d8:f8:3b:51:20:f9:29:d4:5f:41:
e6:b3:82:07:db:0c:d5:d3:65:17:8f:f9:bd:58:cd:
cf:83:aa:68:3c:cf:56:1b:13:8f:e6:3b:47:ec:63:
6a:d4:d8:91:c7:8e:11:00:6f:b8:6a:76:5e:75:dc:
03:ed:47:67:60:b9:08:8c:9b:b6:90:c5:d4:da:49:
40:22:5f:4b:4b:7b:01:35:6d:14:b9:a0:5f:3a:f1:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:75:A0:65:A6:62:9D:73:C6:68:C1:17:58:60:92:D1:C0:E9:A6:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86339826525C11F0A370228CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8d:08:5a:78:52:68:3b:b7:0b:6a:7a:26:85:25:aa:f2:25:64:
be:78:e5:04:79:3f:93:cf:40:9e:03:06:e6:b3:ad:9a:7a:a4:
4d:ef:40:63:4b:d0:91:a8:a2:9b:a0:2e:b9:9d:01:36:bc:a6:
77:40:97:77:48:96:11:cd:e5:ac:fa:fc:ea:c7:b3:ef:b8:03:
c5:4a:a5:72:4e:41:cd:4e:cb:03:eb:6c:cc:1f:6e:c5:8b:80:
b3:1a:56:da:34:83:55:59:8e:b8:dd:a5:09:34:36:18:14:a8:
3c:6a:ed:60:b0:be:2d:09:23:1b:66:c3:18:05:e1:95:20:7f:
9e:72:dc:49:59:43:74:59:7c:23:10:bb:07:19:d0:77:71:5b:
00:45:06:4e:ee:ae:7b:1a:3e:db:5e:80:58:18:0a:7f:5b:0a:
40:d8:1e:34:98:c0:03:af:63:17:0a:74:0c:23:f2:b6:d7:d7:
48:b5:6d:da:77:3d:67:c5:4c:c7:48:39:99:03:55:e3:22:14:
2e:1f:63:26:ce:ea:4a:96:d4:f7:25:04:de:c9:2f:18:4b:9f:
22:6c:31:c6:82:74:49:f3:cc:73:80:e0:60:68:69:20:74:2e:
08:44:1c:f2:d2:db:3b:f5:a8:94:a9:05:50:59:dc:c5:25:bd:
16:54:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:30 2025 by rpki-client