Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273CC85C844211F0B275ED8ADAE4EC9C.roa
File: 273CC85C844211F0B275ED8ADAE4EC9C.roa (raw, json)
Hash identifier: tG82/HaFGFwsnrMT90gmIjJfUaAXOEPe7HxRXl8/yWY=
Subject key identifier: 54:FE:9A:99:CF:96:0F:F1:B1:26:A5:A0:E7:6D:BF:14:A6:8A:CA:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273CC85C844211F0B275ED8ADAE4EC9C.roa
Signing time: Thu 28 Aug 2025 19:06:51 +0000
ROA not before: Thu 28 Aug 2025 19:06:46 +0000
ROA not after: Wed 08 Oct 2025 19:06:46 +0000
asID: 62084
IP address blocks: 45.204.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94939 (0x172db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 19:06:46 2025 GMT
Not After : Oct 8 19:06:46 2025 GMT
Subject: CN=68b0a8cb-9315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:b7:51:3c:b1:4c:68:9b:cf:98:65:91:71:
5d:d2:14:4b:1d:86:e0:cb:7f:7a:95:5e:50:68:ea:
58:08:4f:d8:cc:5a:88:5e:04:a4:2d:ea:63:7f:81:
1f:66:50:dd:4e:dd:19:42:92:89:ce:40:6a:7c:83:
2f:61:3e:a9:31:20:da:43:f2:f4:d7:7a:bd:ed:1b:
5e:e4:29:c9:75:e4:c2:a7:c6:7a:6d:81:64:12:3f:
03:8e:62:fa:75:5b:5c:57:c1:91:fa:2c:2f:a9:e3:
01:a4:5f:bd:5a:db:06:a8:25:c8:95:50:c8:7c:b9:
81:02:60:29:8e:a6:84:3e:5e:18:68:a9:ab:15:65:
4c:bd:ce:5a:51:5e:76:5a:e3:0f:0b:4c:68:10:ca:
c4:34:81:cf:7d:54:53:2a:2e:96:d0:7c:40:8d:45:
aa:07:c8:2a:f2:33:2d:b1:6f:72:44:48:86:52:ed:
9b:1d:6c:f1:f4:7a:69:82:5c:10:78:d7:68:60:83:
1b:d9:af:3d:8a:ad:fe:a8:9d:76:d2:e2:19:2a:9d:
a7:ff:c8:1c:45:78:70:e0:58:66:35:fd:ff:5f:9b:
a8:d4:5f:07:01:58:2e:6b:e7:0a:d6:c9:8e:44:99:
59:38:57:89:e0:79:3f:6f:16:f0:75:42:92:fd:40:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:9A:99:CF:96:0F:F1:B1:26:A5:A0:E7:6D:BF:14:A6:8A:CA:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273CC85C844211F0B275ED8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.69.0/24
Signature Algorithm: sha256WithRSAEncryption
33:86:5e:5a:a1:e8:c9:65:1f:49:48:1d:60:f9:bb:7d:11:00:
84:a5:ab:bf:2b:71:57:53:81:fb:55:ae:7a:3f:e9:7c:c9:8f:
42:78:41:f0:0e:b5:08:24:39:88:d2:c4:cf:54:36:7e:07:8a:
8f:34:eb:06:e5:d2:f0:4e:a3:a8:63:e0:fe:f7:eb:da:98:75:
4d:d1:da:d9:56:51:f2:9b:3f:10:50:d5:34:44:10:81:59:cb:
e4:53:d2:6e:86:e0:95:e7:bb:90:bb:9c:e3:1c:1c:0f:81:e5:
ba:80:14:21:19:8c:c9:3e:e6:7e:86:8f:51:fd:bd:b2:10:e4:
ee:f2:9d:7b:03:f4:fb:3e:96:8f:cf:3a:d5:f6:c8:42:ce:e7:
28:84:9e:c3:70:16:ed:27:3b:7f:db:be:d2:59:d6:fa:74:1a:
fe:cd:b3:0b:c8:54:69:c9:4d:f6:56:88:b0:02:cf:c4:85:d2:
66:2e:ae:79:92:c6:ba:f8:01:ff:2a:77:fe:7d:2d:60:12:a0:
1c:11:52:59:1a:ed:d8:6f:1e:eb:3c:05:a4:c3:65:0b:3d:e9:
8d:a4:e8:5d:f8:9c:36:38:00:f4:ff:51:54:b3:2c:42:4c:10:
82:f5:8f:44:98:03:93:13:5a:e2:78:be:0d:f6:38:b2:85:6c:
61:43:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:47 2025 by rpki-client