Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F16D4FE85A8511F0937F1A99DAE4EC9C.roa
File: F16D4FE85A8511F0937F1A99DAE4EC9C.roa (raw, json)
Hash identifier: Vo25B+H/CPChA6n1co8eX82cSMdJN0DzyZcqzmRrHv4=
Subject key identifier: 3E:C9:C7:54:78:21:07:4A:59:40:AE:1B:8D:75:12:32:AA:4D:5B:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016253
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F16D4FE85A8511F0937F1A99DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 16:26:18 +0000
ROA not before: Sun 06 Jul 2025 16:26:13 +0000
ROA not after: Tue 12 Aug 2025 16:26:13 +0000
asID: 137899
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90707 (0x16253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 16:26:13 2025 GMT
Not After : Aug 12 16:26:13 2025 GMT
Subject: CN=686aa3aa-582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:71:e3:f7:17:1f:80:9c:49:4a:58:c7:06:
36:db:55:84:51:60:5b:21:ce:17:b9:21:a6:bd:b3:
23:b6:77:49:22:3e:27:69:f5:f2:f6:0b:67:b0:7e:
70:db:bf:93:ef:1d:cb:92:20:3c:83:71:8b:96:0c:
fc:92:d1:69:a1:56:87:2f:73:2a:c5:1a:cb:13:fb:
eb:85:0d:2d:9c:4b:32:32:69:e4:9a:4c:44:35:53:
91:32:87:2b:ef:63:84:b8:1b:69:93:fc:a9:6d:af:
27:92:41:f4:cd:b8:79:23:51:72:aa:27:85:8c:32:
0f:54:0a:bc:ea:b6:8d:14:29:0b:b7:c6:b9:62:39:
a8:eb:be:e0:94:48:8f:b8:0b:b2:c4:7a:c2:ef:d0:
06:40:61:1b:81:b4:11:57:13:ed:db:d5:6f:e1:0a:
26:d4:fe:d9:7a:aa:a9:0d:c9:3a:58:3d:c7:d7:6a:
a7:72:00:c8:16:b0:d7:97:60:1b:d1:d5:c2:75:0b:
64:3e:7a:a3:ad:24:36:44:0d:c2:fd:ab:8c:7c:ec:
9f:8b:de:bc:d4:84:9b:39:a7:46:b4:82:d0:fa:b7:
ae:ad:d5:5c:80:26:08:db:f3:9b:07:e5:3e:f0:fe:
c5:a9:45:98:97:75:da:95:62:b3:b4:df:37:66:fe:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:C7:54:78:21:07:4A:59:40:AE:1B:8D:75:12:32:AA:4D:5B:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F16D4FE85A8511F0937F1A99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
77:ad:13:53:bb:45:d0:7b:3b:2e:26:3f:bd:40:31:c3:ea:6f:
bb:b5:22:32:92:33:d7:66:c1:f5:fe:ba:ef:a3:c5:3c:80:af:
b0:97:31:ec:c9:d0:23:0c:82:3e:4f:67:7d:87:ca:1a:01:de:
f8:6e:36:e9:50:9d:2f:9c:11:f1:a5:1e:0f:27:79:ab:2e:8d:
50:6e:f3:22:35:84:76:32:03:0f:8f:9d:ee:4f:fe:91:af:a7:
80:12:ac:78:c9:8a:2b:01:b0:a4:c2:e1:a9:33:d1:4a:0b:76:
51:3c:6e:81:4f:6c:7b:5d:ae:90:59:43:dd:e7:71:38:0f:f1:
41:8c:d0:8c:6b:31:7a:c6:d5:ca:38:76:65:23:e7:0c:cf:f3:
ad:6a:35:0d:4e:cb:7a:96:16:49:8b:c9:22:74:0e:e4:c7:91:
d4:a6:d9:2b:45:e9:8e:e1:ba:95:3d:94:85:ab:b4:89:54:41:
c0:ef:3e:3b:13:00:0d:c2:10:90:4f:54:dd:aa:a8:8d:4f:17:
13:3b:98:c5:e4:ec:20:af:9c:1a:38:de:39:6e:bf:fd:93:7a:
ea:ac:eb:36:4f:22:d1:fb:06:f9:bb:2c:cc:d8:ba:26:a7:1d:
e5:fa:32:08:11:5d:d1:ea:20:3e:ad:07:b3:aa:ff:08:5e:c5:
bf:ff:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:06 2025 by rpki-client