Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27601232896311F0980FB17EDAE4EC9C.roa
File: 27601232896311F0980FB17EDAE4EC9C.roa (raw, json)
Hash identifier: XLg3TMYC2NbUbJBBSY2lEWMiMSFhtU6jrsCBnWPl0PU=
Subject key identifier: F2:B7:80:CB:DF:86:51:55:A4:BE:0D:26:99:20:CB:35:A1:A1:41:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01782F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27601232896311F0980FB17EDAE4EC9C.roa
Signing time: Thu 04 Sep 2025 07:45:41 +0000
ROA not before: Thu 04 Sep 2025 07:45:36 +0000
ROA not after: Fri 10 Oct 2025 07:45:36 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.246.0/24 maxlen: 24
45.192.247.0/24 maxlen: 24
45.192.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96303 (0x1782f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 07:45:36 2025 GMT
Not After : Oct 10 07:45:36 2025 GMT
Subject: CN=68b943a5-ea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:e0:4b:34:e0:ae:5e:30:65:88:e8:b3:12:
b4:a6:75:e0:96:bb:25:44:90:fd:99:f6:34:a1:0f:
cf:75:09:c2:66:87:c1:f1:ab:3f:7d:13:4b:d7:2b:
8c:38:13:e8:ef:f5:35:f1:44:d1:25:c3:17:90:18:
9d:0d:8b:e1:ec:10:e6:ca:d7:08:1f:ab:19:4d:24:
bb:42:07:52:c2:13:9b:7d:ff:c3:08:29:66:46:f9:
96:a7:27:2f:6b:fa:9a:ba:ab:27:14:71:6f:49:c8:
ae:60:c1:be:7c:9e:f4:4d:75:01:e1:1b:1f:e3:7d:
ff:b1:49:94:fd:48:bd:ef:07:27:f2:11:10:0f:04:
20:a2:9c:f9:d4:5e:e6:fc:e0:b6:f0:81:64:d9:6d:
ff:46:e4:30:03:f3:7c:08:b1:6c:be:64:9e:1c:d6:
c3:23:fd:70:1f:17:d7:50:e5:1b:24:cc:71:d0:15:
45:6f:1d:91:ed:06:7f:11:43:54:1e:51:08:39:cd:
1f:96:a1:a8:da:06:7d:cd:f6:19:7d:45:69:01:ca:
95:e5:b7:a7:13:07:eb:a1:3f:11:36:a5:e1:ae:9f:
0e:a1:9e:c9:8c:88:6b:fd:69:1f:71:16:9e:23:07:
ed:b9:51:3e:78:c8:a2:da:20:65:e3:b6:ff:8c:62:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:80:CB:DF:86:51:55:A4:BE:0D:26:99:20:CB:35:A1:A1:41:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27601232896311F0980FB17EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.192.246.0-45.192.249.255
Signature Algorithm: sha256WithRSAEncryption
32:de:18:70:b7:9a:0e:d5:9d:15:2a:b7:04:e6:3e:28:5d:2f:
e6:88:b2:40:02:a7:0a:90:c0:cc:ab:be:4b:d5:30:c5:f0:27:
7f:1e:21:80:dd:59:b4:ce:d3:ae:18:0a:e2:85:ef:83:74:75:
74:ef:17:7b:de:6a:90:dd:c7:10:25:bf:67:26:98:f6:77:a3:
89:59:3f:dd:74:4d:60:34:fb:92:70:97:77:a7:58:c2:fb:d0:
ef:47:dd:64:11:ef:0d:f6:5e:45:2c:dc:e9:89:44:46:c2:22:
37:33:b0:e3:fa:04:0e:ab:2b:0e:92:5c:56:43:54:09:5d:8e:
95:85:4a:24:79:69:8c:2e:86:ab:37:d3:ca:39:36:4c:5c:6b:
39:03:01:e4:89:40:71:fd:2a:2e:44:db:37:04:73:ee:df:4e:
61:e0:3f:53:76:a7:bc:7a:a4:e4:a2:07:13:52:89:47:a3:c3:
3a:e5:56:42:89:7c:8a:95:ae:d2:d4:d5:ff:c6:e8:c4:c8:6e:
f2:84:a9:47:f8:24:fd:69:44:e4:95:43:a2:25:b8:25:c2:d8:
69:8d:28:00:bb:5e:7f:92:20:57:a5:b4:77:7f:1a:02:f4:fb:
f0:b6:03:43:e3:4e:b4:cd:1a:91:70:14:63:73:5f:c9:18:8a:
8a:c1:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:14 2025 by rpki-client