Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2A3B0EC5D7211F0BE78DAB2DAE4EC9C.roa
File: F2A3B0EC5D7211F0BE78DAB2DAE4EC9C.roa (raw, json)
Hash identifier: MMNC+3ALmwFPa/sIC2a0RZUijWFY1/3J3V1jmZascts=
Subject key identifier: 95:D3:D7:54:1F:EC:81:86:C3:2B:C2:74:C8:B8:A6:80:32:B5:FF:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016465
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2A3B0EC5D7211F0BE78DAB2DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 09:47:53 +0000
ROA not before: Thu 10 Jul 2025 09:47:48 +0000
ROA not after: Sat 16 Aug 2025 09:47:48 +0000
asID: 22773
IP address blocks: 45.202.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91237 (0x16465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:47:48 2025 GMT
Not After : Aug 16 09:47:48 2025 GMT
Subject: CN=686f8c49-3cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:6f:fd:e4:e2:ad:0e:6c:68:69:11:8e:89:
7c:31:31:4a:0f:ad:4e:52:7c:f0:02:d0:41:69:12:
0e:bc:96:b1:06:8d:2e:c5:b5:a2:65:a7:31:50:23:
9a:bc:52:cf:b1:0b:99:4f:5e:5c:c4:95:01:00:2e:
82:1d:49:34:7d:a4:cd:3a:b1:b3:d5:27:25:4b:af:
8b:33:24:c1:a9:18:55:52:e6:48:a8:d8:20:ea:8d:
03:02:17:4c:4a:cc:fb:c8:97:d3:f0:f2:65:0a:83:
7f:39:d1:9f:f2:eb:3b:ce:c9:0c:4d:d9:f3:2b:27:
5a:e6:77:1d:a2:f8:c1:a9:f2:33:6d:59:23:d6:bf:
a9:e3:0d:28:81:4e:ef:b5:33:f6:76:79:3d:77:f2:
a7:88:a5:7e:36:57:21:36:b4:92:0f:58:cd:8c:da:
57:e9:ed:19:db:d3:99:a0:e3:9a:40:c0:f2:c7:51:
a1:40:8b:32:e9:6f:b1:b8:ea:7d:c2:47:4d:2c:31:
8f:a9:76:65:2d:2e:14:63:d1:20:bb:8c:51:b5:f0:
e2:eb:89:e5:cb:5b:13:41:48:02:08:44:3f:39:c2:
4b:ba:9e:27:d2:8c:b2:d5:8a:51:ff:5a:ec:cc:75:
df:8e:6f:ba:79:11:dd:4c:89:4a:df:6e:9c:bb:6c:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:D7:54:1F:EC:81:86:C3:2B:C2:74:C8:B8:A6:80:32:B5:FF:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2A3B0EC5D7211F0BE78DAB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e9:c9:95:b0:ce:56:54:1a:c3:78:3f:24:93:6b:f0:79:bd:
0e:8e:1f:79:36:f6:f7:76:f2:8b:7e:a5:3f:59:a7:a7:a9:e6:
61:61:c6:26:71:27:7b:f7:70:07:62:af:27:73:ad:38:e5:8a:
eb:d7:51:f1:ca:76:e7:b6:61:6a:02:a2:1b:92:e0:d1:c9:43:
3c:de:c0:64:c4:42:a2:69:e4:8b:ab:09:b1:a0:5b:41:6a:23:
86:0f:26:34:c9:b6:d4:ed:e4:14:09:cb:84:76:4b:81:bc:6d:
e9:44:78:c4:b9:0e:d3:ab:37:12:75:fe:7f:c2:aa:3e:0f:de:
28:43:75:29:02:3c:01:55:63:3c:a5:9d:a6:69:9f:66:c0:58:
e1:2b:15:c5:4f:b9:45:7b:71:d8:d0:ef:55:f0:6a:fd:96:80:
b4:e9:92:95:b1:a3:b7:87:a6:d4:d4:2d:f9:19:ea:3c:72:23:
95:de:d3:ad:db:ae:5c:b8:fe:d5:a0:09:fa:cc:b2:fe:b8:31:
ec:6b:64:b5:68:f1:01:4b:00:0f:6a:9a:48:de:70:a0:bb:ee:
de:21:f0:e5:9a:3a:12:9d:a5:9d:24:10:3f:41:84:40:ee:55:
0b:59:4f:2f:e9:48:d7:d4:ed:e1:d3:d2:ad:47:5a:a4:3f:2c:
df:92:b9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:00 2025 by rpki-client