Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/222D1C9A87CB11F0A4165FA7DAE4EC9C.roa
File: 222D1C9A87CB11F0A4165FA7DAE4EC9C.roa (raw, json)
Hash identifier: etI0DdBb5hunFnZ0mbyeHj9oOIMmoDy6cY+LJ3U71GU=
Subject key identifier: 13:3F:59:5B:0C:BA:B1:AB:CF:B2:45:25:75:3C:9A:E4:59:46:88:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01760C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/222D1C9A87CB11F0A4165FA7DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:04:57 +0000
ROA not before: Tue 02 Sep 2025 07:04:52 +0000
ROA not after: Sat 29 Aug 2026 07:04:52 +0000
asID: 393559
IP address blocks: 45.199.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95756 (0x1760c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 07:04:52 2025 GMT
Not After : Aug 29 07:04:52 2026 GMT
Subject: CN=68b69719-9fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:4b:cc:ae:d4:8a:97:4b:ec:ce:a4:07:8e:
67:a2:e5:bc:98:48:32:19:50:40:da:b9:14:0c:b8:
df:b6:24:5f:55:15:f0:98:d5:86:df:f2:d9:11:bf:
fe:08:a3:6f:4e:50:f6:7f:43:ea:97:8a:3b:84:34:
b3:5a:59:58:3e:f0:e6:2c:4f:3e:1f:a8:cd:64:b2:
04:35:61:9d:16:d9:29:56:4b:b2:a1:ed:6c:a6:69:
10:d1:96:d9:20:02:2e:f5:35:ca:97:7b:68:22:96:
cb:77:78:bd:a1:70:82:75:aa:be:ca:ee:cf:e3:b6:
0d:96:d1:50:5c:ab:3b:77:b7:12:96:bd:28:da:bd:
39:c5:c5:a7:0f:92:59:48:4a:2a:ae:38:31:90:ba:
f3:90:8a:dc:b0:ff:3f:ee:e4:b1:c6:d4:14:6c:1f:
d3:c1:85:b3:56:82:9f:d7:eb:76:49:d4:41:b0:ab:
22:d9:80:62:a3:9f:25:df:ad:ec:7d:f1:be:70:b9:
ba:9c:62:9b:fd:9a:34:ef:cd:e2:b6:95:ec:73:6f:
de:3f:bf:30:da:0e:d2:36:af:93:61:ad:a2:9a:d6:
e2:5f:bc:74:ee:35:4c:9d:23:e1:cc:82:bf:2e:4e:
2e:88:eb:99:ca:e5:ba:33:0e:f0:c3:bb:79:27:4a:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:59:5B:0C:BA:B1:AB:CF:B2:45:25:75:3C:9A:E4:59:46:88:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/222D1C9A87CB11F0A4165FA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.176.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2f:12:a5:b7:96:0b:6f:bd:f8:9e:7d:a6:ce:1b:63:98:a1:
c1:eb:f7:72:a5:0d:c0:5b:43:42:0b:66:76:ce:b9:07:76:08:
c5:8c:0e:95:18:cd:0f:6b:54:20:55:b1:d7:76:99:bb:de:ac:
ab:7b:93:5d:28:9e:eb:5a:d7:0f:75:98:60:e1:fe:3b:f6:d0:
3d:5c:b3:7b:af:d3:c6:67:e7:cc:dc:a0:ef:54:5f:82:33:c5:
27:84:c0:01:eb:ae:d1:05:e6:d8:b6:5c:ec:3b:63:ab:72:f8:
94:02:59:74:15:62:53:84:a6:5a:48:5f:10:eb:02:e7:36:d8:
6b:7c:8f:40:92:14:9f:f2:64:e9:d8:81:f0:49:c7:2e:d0:9c:
fc:b4:77:e7:5c:e5:ef:20:39:ba:17:1b:28:93:ee:b4:bb:5c:
ad:b4:44:a0:14:1e:f7:d0:71:8f:78:8c:68:e9:02:fd:5e:62:
19:c5:ee:d9:f8:a0:49:98:3f:5c:86:67:ed:99:e6:f1:1d:81:
8b:42:e3:1f:f0:14:1b:e2:88:17:61:83:da:6a:3b:b8:0a:43:
8b:b8:38:69:60:b3:58:4d:9e:10:3f:c8:d2:34:d8:6c:d3:8e:
e2:3f:91:d0:4c:28:9e:a7:c4:cc:9b:b8:c7:df:b0:57:a3:36:
e5:46:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:20:57 2025 by rpki-client