Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A1E92084AD11F08BB5CECEDAE4EC9C.roa
File: 17A1E92084AD11F08BB5CECEDAE4EC9C.roa (raw, json)
Hash identifier: RMhMI1TDKmah7JRXhgkBvNWoheAcnsGFyDCFiyJf6+E=
Subject key identifier: 10:8B:60:77:DE:55:E8:5D:C5:7E:D3:D2:56:1D:F5:39:F3:F7:8E:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01730D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A1E92084AD11F08BB5CECEDAE4EC9C.roa
Signing time: Fri 29 Aug 2025 07:52:21 +0000
ROA not before: Fri 29 Aug 2025 07:52:17 +0000
ROA not after: Sun 05 Oct 2025 07:52:17 +0000
asID: 20326
IP address blocks: 45.202.115.0/24 maxlen: 24
45.202.118.0/24 maxlen: 24
45.202.126.0/24 maxlen: 24
45.207.25.0/24 maxlen: 24
45.207.28.0/24 maxlen: 24
45.207.30.0/24 maxlen: 24
45.207.44.0/24 maxlen: 24
45.207.47.0/24 maxlen: 24
45.207.56.0/24 maxlen: 24
45.207.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94989 (0x1730d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 29 07:52:17 2025 GMT
Not After : Oct 5 07:52:17 2025 GMT
Subject: CN=68b15c35-3f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:6c:a8:ed:38:b7:40:62:ec:b2:35:25:0e:
1d:e8:d4:86:08:7c:f4:98:87:d0:45:46:d5:ff:c8:
8c:db:e0:80:5e:76:fa:bc:e6:d8:36:18:f6:b3:02:
cf:81:de:0e:95:d7:e6:70:67:a8:80:3f:92:bc:a2:
1b:58:08:55:49:14:f0:c5:44:83:cf:52:c1:e8:f1:
0d:6e:9e:47:20:c6:03:12:50:44:49:ee:c1:33:71:
6f:e4:7c:03:ce:bf:6c:1d:a4:76:cd:71:aa:96:a0:
29:e3:63:a1:51:6b:cf:92:c5:20:cc:d0:a1:44:09:
0e:41:b6:dc:c9:ed:03:17:bd:1b:e2:c8:50:22:5e:
dc:ea:a8:10:5b:30:b1:a0:de:ce:6d:22:b8:66:4c:
94:6a:16:d4:5c:14:d0:12:3b:b7:54:09:00:2b:b4:
32:57:4a:5f:a4:e2:82:86:6d:2b:14:ef:4f:5b:4d:
a8:41:27:ad:3f:d7:17:28:4c:e0:e3:9a:35:98:38:
f8:7b:ac:78:6d:68:c0:30:83:94:a1:41:c8:d5:a6:
f4:02:b8:a8:3d:2d:43:ab:c6:c0:bf:51:9b:31:28:
72:69:61:58:cf:01:66:86:c6:ee:2d:01:83:21:2d:
2c:1a:e8:aa:5e:79:cb:47:a6:c3:de:bd:ab:37:f1:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:60:77:DE:55:E8:5D:C5:7E:D3:D2:56:1D:F5:39:F3:F7:8E:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A1E92084AD11F08BB5CECEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.115.0/24
45.202.118.0/24
45.202.126.0/24
45.207.25.0/24
45.207.28.0/24
45.207.30.0/24
45.207.44.0/24
45.207.47.0/24
45.207.56.0/24
45.207.61.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5f:43:54:ee:cf:17:52:33:e1:79:62:97:db:93:f4:d5:82:
77:5a:e0:9a:c6:c0:0c:e1:07:4b:f9:d5:08:4a:d6:52:b8:99:
39:06:f6:48:da:24:8d:5e:c3:01:89:ce:5c:ea:cd:7f:26:0b:
7e:3b:45:ca:ed:51:30:2c:1d:27:cb:4a:1a:9a:81:b0:e5:d5:
2e:dc:2b:2e:2d:7c:af:12:70:b2:26:9b:50:69:7a:2d:37:33:
ff:4e:47:d7:e2:a9:8b:3b:83:13:f8:71:17:fd:b4:f0:d2:3e:
76:60:0d:9c:09:65:92:a3:48:e1:91:ad:8f:ea:8b:83:55:97:
d6:a4:2d:a2:77:8d:70:9b:74:ee:7b:c2:eb:66:4b:f0:e7:48:
47:92:5f:76:8f:d3:41:64:25:38:e3:d6:7c:e3:60:e7:61:e9:
23:51:b6:57:30:0b:dc:02:20:f3:c1:d2:8d:01:c9:05:cb:e3:
e3:40:a6:d2:0c:7c:56:f5:ea:4a:0a:12:f6:24:35:f6:f6:b7:
8f:a2:7a:45:53:0f:66:e6:b1:b7:d1:41:27:5f:5b:9f:57:9a:
b6:b9:ee:1e:7e:84:b8:a6:1e:98:c2:1c:ff:5f:f9:2b:32:21:
d2:2e:6c:d8:59:58:3f:fe:3f:f9:ef:b4:b5:67:52:7d:75:3e:
d1:47:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:49 2025 by rpki-client