Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28D5CCA08C8E11F0A1716990DAE4EC9C.roa
File: 28D5CCA08C8E11F0A1716990DAE4EC9C.roa (raw, json)
Hash identifier: +A3eHZ2cL1O3iT1Cvj5OnNhP8na+gse7S1wE0Dc5jSg=
Subject key identifier: F1:34:BE:F3:4A:41:8D:C5:B4:4C:10:47:69:F0:ED:98:E0:8F:D6:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01798E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28D5CCA08C8E11F0A1716990DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 08:31:05 +0000
ROA not before: Mon 08 Sep 2025 08:31:00 +0000
ROA not after: Wed 03 Jun 2026 08:31:00 +0000
asID: 395886
IP address blocks: 45.194.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96654 (0x1798e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 08:31:00 2025 GMT
Not After : Jun 3 08:31:00 2026 GMT
Subject: CN=68be9449-11c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:f8:b4:29:60:2b:28:c3:d1:5e:5b:2c:d6:
de:4e:13:ab:59:94:c9:e9:07:35:ff:17:5a:72:4d:
7d:61:ae:ff:42:f5:1d:b2:d5:02:1e:2e:be:f3:c0:
ab:a1:22:0b:31:8b:d7:03:40:03:75:88:c5:a8:55:
7e:11:74:20:7f:2f:33:1a:0b:1d:5d:46:20:f5:87:
6e:4f:7c:9e:fb:9c:c7:64:c9:cc:05:66:ed:2f:b0:
52:75:ca:75:c7:88:f7:9d:ef:6a:df:8e:5f:5f:92:
b2:9b:ae:fc:4c:cb:db:fe:6a:96:0e:36:41:9a:8b:
62:93:04:ce:09:4a:ad:9f:e5:42:b9:d0:48:5b:92:
af:ab:19:ac:06:33:62:66:50:85:74:ad:30:e3:ef:
93:23:aa:72:95:41:f1:0e:eb:33:4b:7c:92:7a:1c:
7e:2b:5e:18:6e:7c:af:77:d4:54:e3:54:cb:ac:cf:
86:3d:f1:6c:d1:44:ca:0a:93:56:f9:44:2f:41:9c:
5e:1d:3c:07:21:51:28:53:ff:fa:32:6f:b0:79:b6:
36:ad:66:df:86:39:af:13:12:17:43:23:a4:ca:08:
94:9d:2a:5d:09:f9:de:1e:66:e2:7d:7f:8f:e8:1a:
1d:86:73:d3:4a:8d:6a:b6:67:0d:d3:ce:8e:0c:47:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:BE:F3:4A:41:8D:C5:B4:4C:10:47:69:F0:ED:98:E0:8F:D6:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28D5CCA08C8E11F0A1716990DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f2:0a:d0:42:fe:81:58:34:87:72:90:26:da:52:65:aa:c5:
43:ab:eb:6a:5f:6e:72:05:66:9a:c5:71:e6:30:e4:6d:f2:7c:
a5:b6:ee:9a:dd:90:9c:b5:f0:e9:81:ee:d2:c8:90:dd:54:e1:
56:5f:01:8e:e4:5a:f4:4c:00:45:4b:8a:18:ec:2b:c6:c3:1a:
d0:92:40:f3:ee:bb:9b:64:84:ff:1c:e5:70:76:81:0a:7e:0d:
f4:6f:54:6b:28:43:ea:26:4d:4b:79:9e:85:c9:51:bd:2f:c0:
0f:ce:4b:5d:63:60:cf:cd:bc:b5:6d:c9:04:3c:d6:93:b2:66:
61:4b:97:20:1f:e6:19:8d:4d:fd:8e:94:55:0b:97:86:b2:94:
61:5c:cb:fe:fd:a2:86:76:e0:4f:b6:ed:42:4a:2d:bf:84:e5:
40:04:76:1a:69:87:02:e2:90:ed:54:41:72:6f:b4:b7:2c:bd:
f2:0f:bd:44:03:18:5b:c7:05:28:00:c0:0a:e5:5e:28:b7:96:
8f:3e:18:00:0d:3d:b2:3f:b6:5a:13:7e:f8:49:19:4d:0c:94:
d2:c8:e4:d5:b3:ff:55:d7:88:03:53:f2:2f:88:90:b6:e1:84:
e9:c2:9f:87:77:fa:68:c7:16:fa:68:bb:85:b4:22:06:54:06:
20:2c:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:27:22 2025 by rpki-client