Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9704042566F11F0837E8C84DAE4EC9C.roa
File: B9704042566F11F0837E8C84DAE4EC9C.roa (raw, json)
Hash identifier: 8ROaJ+3GVLNa/5rK8rUmaQr2Pqloa/7xjnnsoQxXvm8=
Subject key identifier: 7D:17:90:44:55:FD:47:1B:02:60:AC:A4:56:1F:C1:68:69:DC:6F:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9704042566F11F0837E8C84DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 11:37:10 +0000
ROA not before: Tue 01 Jul 2025 11:37:04 +0000
ROA not after: Sun 17 Aug 2025 11:37:04 +0000
asID: 394432
IP address blocks: 45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90074 (0x15fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 11:37:04 2025 GMT
Not After : Aug 17 11:37:04 2025 GMT
Subject: CN=6863c866-3fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:bd:d0:44:80:3b:6b:74:3d:71:75:b3:a0:
8d:67:d8:3b:da:98:f0:36:08:e8:6b:ca:70:a0:91:
40:f2:72:95:c5:91:61:85:b7:45:ac:e1:26:71:1f:
71:e8:cb:a0:f4:ad:df:c7:41:81:08:84:da:11:b4:
73:ba:3b:7c:55:1e:2b:68:12:b2:c6:03:00:d5:ab:
31:7c:ea:10:2f:96:5f:0a:19:b9:29:23:29:32:36:
03:ea:fe:a7:77:de:71:4a:03:2d:82:1b:1b:4c:06:
c3:e8:b4:5f:71:d3:2e:02:e8:85:b7:e8:86:e1:89:
59:f2:27:01:d4:40:17:d5:17:63:b3:ec:b6:6d:1e:
38:2d:85:6e:d1:37:d4:4c:8b:c8:b3:63:b0:f0:47:
97:32:76:5d:ac:27:9f:29:09:61:29:e9:44:17:82:
15:ca:94:e1:c2:81:4e:69:99:8e:6e:4c:fd:a8:61:
d2:4b:0d:a7:a9:f9:27:d5:85:97:57:b6:32:72:01:
7c:34:d2:4f:27:3d:c4:3f:39:35:f6:e2:d1:28:91:
6d:7f:1c:fa:13:d9:e6:b2:50:00:47:00:59:12:52:
98:ad:fe:e4:a0:55:d2:fa:ec:da:d4:51:07:bd:77:
48:c9:7c:d5:07:5c:23:88:70:8c:67:fb:0b:e6:ed:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:17:90:44:55:FD:47:1B:02:60:AC:A4:56:1F:C1:68:69:DC:6F:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9704042566F11F0837E8C84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:41:a8:e5:93:2e:62:0d:55:1d:f7:19:a6:19:ea:0f:bb:aa:
73:78:01:45:81:51:bb:29:42:ac:8b:1d:3e:70:41:18:64:a7:
6b:1e:36:3a:bc:1a:76:ec:0a:59:aa:74:c1:d0:70:1e:a4:d2:
92:55:a3:91:5d:fa:6e:0e:fb:cd:f5:85:fc:c0:fa:67:5b:2a:
2f:99:fc:30:b7:05:51:3f:b9:4a:6b:74:02:cc:43:7a:8b:28:
74:96:9d:20:da:91:df:71:85:84:40:43:25:99:94:ce:a9:93:
ac:4c:0a:e4:b0:77:fa:9b:28:ea:39:92:52:3b:80:a3:6d:8a:
74:86:d6:2d:45:c8:95:4d:c6:78:7d:98:14:63:27:1c:30:9a:
0b:e7:47:e3:e0:16:ca:6c:3f:b6:b1:51:72:ee:21:d0:d7:dd:
84:82:84:dc:73:67:28:d1:9b:10:d0:28:bc:30:e0:84:4b:43:
30:db:ed:4e:4e:6a:fd:b3:06:be:fe:85:0b:42:ef:b5:d2:d3:
62:bd:e7:bf:e7:50:e4:d4:14:cb:d5:98:33:44:cd:96:b2:a6:
af:26:11:c2:b1:7e:b9:54:9b:b8:85:0a:bc:be:6a:3c:f1:9c:
bc:f1:6c:9d:9f:07:8c:bb:88:f6:ea:85:cf:01:8b:a5:1f:35:
9a:d7:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:23:44 2025 by rpki-client