Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9689C845D7211F0AE9784B2DAE4EC9C.roa
File: B9689C845D7211F0AE9784B2DAE4EC9C.roa (raw, json)
Hash identifier: zfhHHzsVdYa8hjFmKBoHQW1U6JcQk6ijRpT22wmOafc=
Subject key identifier: EE:15:70:77:4A:FA:0E:83:7D:3C:45:25:D7:A3:F5:FF:30:75:E0:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016463
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9689C845D7211F0AE9784B2DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 09:46:17 +0000
ROA not before: Thu 10 Jul 2025 09:46:12 +0000
ROA not after: Sun 17 Aug 2025 09:46:12 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91235 (0x16463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:46:12 2025 GMT
Not After : Aug 17 09:46:12 2025 GMT
Subject: CN=686f8be9-9541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:f5:16:b0:84:e5:f7:a2:ac:03:e6:43:93:
47:4c:64:a5:ef:4a:44:a8:4e:a5:bd:66:65:4c:c7:
8f:ab:c1:53:cb:50:e2:28:05:be:5c:fe:f3:2b:86:
cd:8e:65:ea:1a:7b:a3:f4:9a:90:c4:bd:6a:81:a0:
59:b0:0b:d5:e7:ca:cf:bf:bb:09:4e:d4:07:e2:e1:
95:9e:ef:8f:0e:d7:b8:d8:c7:2d:fe:fa:c6:d4:cd:
3e:a1:be:0d:ca:fb:12:90:c7:90:7d:ad:f9:12:24:
f9:9d:bf:81:99:ae:37:d4:a3:9f:3a:6a:9a:8f:50:
b5:ba:ba:04:df:9b:aa:86:e6:5f:91:d8:08:ed:66:
ca:a9:d4:cd:81:fc:d6:74:28:28:87:2a:ee:7c:a2:
b2:1b:97:64:29:bd:df:6c:00:19:84:ad:0e:da:b2:
13:00:29:10:77:e5:82:41:85:87:f5:88:08:db:59:
80:1a:e6:70:21:77:19:40:aa:7a:3c:9f:a7:05:0c:
a6:6b:2c:a4:ad:a8:e8:84:19:41:21:d8:f3:90:dc:
3e:78:c4:33:58:80:11:28:5c:bd:06:e7:d2:38:dd:
64:cb:a2:d2:89:28:37:f1:61:60:69:ff:3a:83:db:
0d:6f:3d:e2:04:a2:cb:b5:53:3a:1e:ce:a2:b4:9c:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:70:77:4A:FA:0E:83:7D:3C:45:25:D7:A3:F5:FF:30:75:E0:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9689C845D7211F0AE9784B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7c:e4:74:d2:4e:9d:b6:07:73:f3:45:0f:17:6f:ab:7d:99:
6e:1a:c4:b6:62:8b:26:04:97:8f:df:14:cc:e0:2a:9e:27:e5:
f3:55:b2:11:55:a2:70:d8:5b:db:85:23:fa:e3:2f:1d:35:b9:
d3:97:a5:ff:24:b1:2a:c7:24:b9:a6:54:eb:e0:ab:7e:1e:94:
0a:8b:c9:f9:76:d3:91:ef:02:f3:01:8b:66:33:94:ef:55:66:
be:d7:9c:52:94:8b:26:01:6e:9f:20:f7:8d:3e:be:34:28:5a:
50:8a:18:cc:01:ee:28:bf:7c:12:da:21:c6:be:0a:cd:ca:a5:
ad:0b:7f:b4:e5:c2:5e:0a:dd:c8:93:39:ee:7c:26:6d:5a:eb:
56:5f:bc:1c:dd:d1:77:5e:c8:c9:1f:0e:49:13:3b:24:ec:1a:
fa:34:7d:b5:f0:f0:ce:77:b8:79:3d:8b:77:0a:53:6e:12:ce:
a2:8d:7f:fa:bc:f6:15:42:14:c2:b6:b2:71:ea:e9:a0:d6:86:
3f:4c:c7:bc:4c:6a:6f:8d:9f:b8:d0:b4:3b:14:b9:e8:9e:ea:
cd:b4:81:c6:03:5e:28:0b:ed:9f:86:2b:a1:8c:9b:cc:15:f6:
3a:43:18:06:c5:a6:32:c8:fe:1a:f8:f1:01:b8:49:53:59:c4:
0a:42:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:22:33 2025 by rpki-client