Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F301F74889E11F0AAEBB6F5DAE4EC9C.roa
File: 0F301F74889E11F0AAEBB6F5DAE4EC9C.roa (raw, json)
Hash identifier: SHkK7ep9BUzr3Z4D501tn3S21bzycfvG2OmfWRvycb0=
Subject key identifier: A4:08:15:E5:CC:78:E0:22:B7:3C:EB:BB:EC:1A:25:AE:E2:BB:53:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01775C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F301F74889E11F0AAEBB6F5DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 08:14:49 +0000
ROA not before: Wed 03 Sep 2025 08:14:45 +0000
ROA not after: Tue 07 Oct 2025 08:14:45 +0000
asID: 20326
IP address blocks: 45.192.251.0/24 maxlen: 24
45.194.90.0/24 maxlen: 24
45.195.82.0/23 maxlen: 24
45.195.90.0/24 maxlen: 24
45.195.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96092 (0x1775c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 08:14:45 2025 GMT
Not After : Oct 7 08:14:45 2025 GMT
Subject: CN=68b7f8f9-4755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:5d:38:9a:59:27:e1:c0:08:e4:83:23:49:
2d:9d:bb:50:4f:6f:80:2b:e4:8b:dc:4d:75:11:eb:
4b:6a:8c:a7:47:0f:26:12:d5:88:0c:fb:be:3b:01:
60:8c:03:de:e8:16:68:df:11:90:20:6a:e3:10:bf:
4b:49:bd:d3:5b:0b:21:e5:ee:54:fc:69:3a:ab:83:
29:81:99:56:c7:63:eb:de:f4:c5:23:65:97:17:b2:
49:79:7b:77:19:99:70:86:58:67:fd:0f:88:e3:88:
58:f0:7f:be:cf:ca:f9:e1:3a:0e:0e:4f:04:1e:a2:
19:e7:9a:cf:aa:dc:be:fd:c0:b8:ee:a5:b2:8d:33:
c3:73:f3:a4:3c:03:69:45:2b:a8:7d:40:4d:d9:0b:
e8:84:eb:d6:40:09:64:57:75:b2:06:a4:46:7f:6f:
89:4c:2d:95:25:c5:f2:26:30:82:b5:7e:32:9a:53:
a2:e2:ba:8d:59:76:34:40:d4:b3:52:12:37:37:a4:
28:b1:04:7b:53:bc:f7:0a:d4:2f:33:95:f3:59:32:
77:7a:17:b8:03:a5:e9:f0:41:bc:c7:48:70:a7:03:
ae:14:88:9f:36:42:33:67:5b:2c:2b:35:97:d3:3f:
d3:e0:bb:33:fb:86:d7:7a:e4:54:e9:5f:2b:33:74:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:15:E5:CC:78:E0:22:B7:3C:EB:BB:EC:1A:25:AE:E2:BB:53:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F301F74889E11F0AAEBB6F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.251.0/24
45.194.90.0/24
45.195.82.0/23
45.195.90.0/24
45.195.106.0/23
Signature Algorithm: sha256WithRSAEncryption
92:23:71:93:05:fb:43:8f:70:81:20:fd:da:7d:fd:a6:9f:94:
fb:49:16:1a:9e:98:97:46:b4:73:28:23:57:9a:51:d8:1f:0f:
65:d8:ed:62:cb:55:86:fd:bb:f5:93:d5:8b:17:2e:ec:95:53:
55:1d:92:39:ce:ff:0a:66:58:b1:0e:9b:ac:71:10:16:28:a7:
eb:83:3f:a5:c0:57:6a:9c:a0:76:81:2f:0f:d6:54:7e:44:ba:
50:13:04:02:2b:ae:ba:93:40:59:ae:22:86:af:8f:59:da:b1:
3e:3a:98:85:76:81:9e:01:ce:f9:4a:39:34:2b:5b:23:4b:d7:
b4:c7:cf:ec:bb:80:53:70:48:fa:a3:ac:ce:c6:ab:20:75:79:
27:9b:2a:94:f8:23:a9:7d:3e:08:33:da:61:22:2c:db:a1:e0:
81:7a:ba:c4:2f:a1:54:71:d8:ae:93:db:59:90:4d:f3:dd:a8:
4f:c9:66:36:59:53:2f:93:88:47:4e:84:e9:ca:78:26:79:a1:
c2:f7:fa:6c:98:7f:71:6f:11:ca:0c:c7:a9:36:fc:fe:c3:93:
76:d7:e7:3f:87:27:d0:f8:2d:ce:14:db:5d:ce:44:72:bf:34:
18:fc:ca:b2:c9:68:f8:8a:bd:01:3f:15:80:f1:17:79:35:51:
a5:28:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:21 2025 by rpki-client