Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/251E0C0E87D311F091EC5DDADAE4EC9C.roa
File: 251E0C0E87D311F091EC5DDADAE4EC9C.roa (raw, json)
Hash identifier: 2h5Sms06IFcO2blBFRfTzXPLPQJI3M5ynYgdjQrU2BE=
Subject key identifier: 34:3F:34:1A:15:25:D3:6D:B2:17:F7:BD:9A:87:64:7D:40:83:22:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017630
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/251E0C0E87D311F091EC5DDADAE4EC9C.roa
Signing time: Tue 02 Sep 2025 08:02:18 +0000
ROA not before: Tue 02 Sep 2025 08:02:11 +0000
ROA not after: Tue 07 Oct 2025 08:02:11 +0000
asID: 20326
IP address blocks: 45.192.251.0/24 maxlen: 24
45.194.90.0/24 maxlen: 24
45.195.82.0/23 maxlen: 24
45.195.90.0/24 maxlen: 24
45.195.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95792 (0x17630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 08:02:11 2025 GMT
Not After : Oct 7 08:02:11 2025 GMT
Subject: CN=68b6a48a-69d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:70:34:13:b0:9f:10:c3:f1:3d:e5:fa:e6:
8e:64:52:74:3c:58:ef:58:99:9f:52:11:f7:e7:b3:
48:75:d7:5c:1c:2d:00:02:25:68:36:c9:4b:d1:ac:
b3:bd:fb:93:bb:dd:3a:9f:ca:1a:6d:0e:96:41:1e:
11:3c:d7:d3:02:c2:9c:3c:fb:cd:e5:66:ed:f3:48:
7f:e0:9f:72:89:de:63:c2:62:7a:52:a4:5d:3c:96:
a8:c6:c1:f2:f2:e5:8d:56:fe:d4:3c:b5:1a:0c:9e:
2a:7c:66:6b:c5:f2:b5:1b:1e:85:fb:cc:98:fd:8e:
26:af:41:6f:37:d8:f4:bb:7c:d1:cb:d3:bd:96:cb:
37:8f:5d:19:ae:8b:9c:f3:9c:1f:18:39:39:d0:9f:
97:62:17:99:f4:19:e6:32:21:dd:7f:03:9f:f9:c6:
c6:00:ad:a0:a9:7d:35:c3:b5:03:96:75:2f:f3:ab:
73:9c:e3:bb:25:83:2f:8a:be:db:d3:a0:4d:d1:d6:
7d:3e:ed:08:e9:77:3f:dd:24:0e:24:ff:e3:97:a9:
c4:ab:be:1c:1d:0d:80:8f:06:61:93:68:ee:6d:c3:
d8:c3:df:d1:91:1d:49:10:17:6f:45:58:ef:d6:d1:
04:42:7e:7e:54:d2:5f:0a:e2:1e:d8:95:e8:04:74:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:34:1A:15:25:D3:6D:B2:17:F7:BD:9A:87:64:7D:40:83:22:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/251E0C0E87D311F091EC5DDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.251.0/24
45.194.90.0/24
45.195.82.0/23
45.195.90.0/24
45.195.106.0/23
Signature Algorithm: sha256WithRSAEncryption
84:90:80:ae:14:c0:bb:7f:68:e1:76:ba:c3:39:98:7e:81:42:
cc:48:ec:19:48:eb:12:91:51:34:a5:41:54:3a:61:bc:9a:6a:
38:0f:fd:c8:3d:b9:81:ff:dd:ee:42:df:06:e9:d3:80:37:44:
2e:74:80:d0:83:cf:30:e0:b5:7b:dc:b5:d9:21:1d:78:89:20:
bc:3b:16:55:53:1c:15:49:91:76:3b:94:40:d8:3e:3f:ad:33:
62:ae:7d:dc:fd:86:13:de:aa:62:ec:bd:d2:84:65:03:01:88:
6c:f5:85:0b:1e:07:1e:e5:a7:9b:98:16:bf:72:9b:53:08:e3:
11:df:6e:d6:a6:6a:94:34:f8:00:d1:ab:02:3b:d3:9c:1d:56:
4c:2d:04:87:32:cd:3b:f9:9e:08:f1:1f:e4:2e:1c:b5:62:f2:
ae:a4:63:7c:22:48:b7:b4:1b:4c:65:c2:fe:22:2f:ae:fd:68:
13:fe:7a:06:29:00:71:dd:3e:68:7a:fb:fe:16:09:ac:26:86:
90:60:dd:d2:69:7f:91:17:c6:53:ab:c9:66:b7:5f:d0:08:7a:
29:6c:26:3b:33:57:b3:e4:b1:d8:24:5a:38:c1:c0:ca:e7:ae:
84:30:95:09:e1:1c:59:c0:ee:c2:79:e1:fd:18:ba:76:b1:00:
5e:47:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:22 2025 by rpki-client