Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0C4C0885F811F083AE16ABDAE4EC9C.roa
File: 2A0C4C0885F811F083AE16ABDAE4EC9C.roa (raw, json)
Hash identifier: o48kbYl6ZREP0ey1V81fVS/8nIkk7QoQqhNqVsCoNlc=
Subject key identifier: 03:CC:BC:2D:07:22:99:3F:38:EA:E2:B1:56:25:06:0E:0E:9F:18:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017450
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0C4C0885F811F083AE16ABDAE4EC9C.roa
Signing time: Sat 30 Aug 2025 23:22:16 +0000
ROA not before: Sun 31 Aug 2025 23:22:10 +0000
ROA not after: Sun 07 Sep 2025 23:22:10 +0000
asID: 54801
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95312 (0x17450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 23:22:10 2025 GMT
Not After : Sep 7 23:22:10 2025 GMT
Subject: CN=68b387a7-16cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:96:36:3d:7e:31:ae:38:ff:ce:3e:31:04:
a0:c3:92:ef:f8:71:b3:e7:82:9e:11:1f:32:47:c9:
50:8d:62:5b:a4:48:e5:6f:ef:93:0c:46:44:6b:83:
97:ad:63:09:de:6f:9a:a7:62:5a:76:a1:b9:46:e1:
19:59:55:ea:dd:8d:26:7b:93:4a:4a:b7:09:86:67:
fa:79:85:e1:87:21:93:94:d6:8d:b7:2d:d1:7f:69:
8a:b5:98:94:c0:d1:68:36:97:53:a1:4f:2f:93:1e:
80:92:8e:2b:53:6a:a4:7c:83:6d:72:54:1f:b1:70:
3f:6a:90:6d:36:08:76:50:ff:c7:63:c8:df:6d:63:
14:4e:86:98:d2:fc:61:3a:c8:4e:fa:14:7b:0a:8c:
14:8b:77:dc:c0:f7:fe:ff:0e:59:90:11:30:72:23:
70:2c:00:ca:6b:44:93:1e:48:c0:d3:1b:0c:2a:d4:
07:d5:94:cf:2d:44:9a:9e:0d:9d:6c:3b:bb:04:bd:
c1:76:97:0a:9f:62:57:05:5e:e3:6f:0b:57:4b:83:
e2:10:3d:d7:34:6b:c0:a1:05:ec:02:12:10:f9:99:
30:0a:a4:bb:c5:9a:6d:af:d9:e9:d6:c2:b9:6c:1a:
1b:db:7e:2c:88:d5:f2:45:e5:38:a9:43:81:63:b7:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:BC:2D:07:22:99:3F:38:EA:E2:B1:56:25:06:0E:0E:9F:18:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0C4C0885F811F083AE16ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:91:86:5c:10:27:26:5f:c3:aa:31:14:f7:c3:e0:ca:19:f2:
23:bb:92:47:03:b0:30:fa:e2:51:fc:b1:ea:bd:42:b0:c6:81:
d5:11:da:37:43:be:1e:9b:65:2d:47:9c:66:d0:db:0d:92:86:
de:ff:c8:26:f3:ee:ab:18:42:6f:59:d3:f0:46:9d:17:96:20:
12:01:cb:2e:d6:96:30:ff:4c:84:09:d7:59:df:eb:37:24:64:
1b:5b:bb:d2:dc:04:4e:18:a4:b2:be:3a:47:8a:55:39:01:7f:
35:ed:ad:c2:e4:e2:c5:2d:9b:c1:30:2f:3f:b3:a6:5f:7c:e1:
b4:2f:fd:b7:75:64:2e:43:93:e2:8a:c9:6b:c4:c1:08:13:5e:
a0:09:96:55:43:7b:7b:f5:43:a4:0a:26:14:8e:ac:28:cb:9d:
68:8a:09:c9:bb:46:bf:6d:aa:9d:6e:ec:2c:40:ae:11:97:f3:
3c:76:31:96:ba:28:54:84:f8:23:9a:5f:3f:d7:a4:77:84:44:
97:3e:b8:26:d3:16:2d:0f:e8:3b:16:ad:56:7c:d1:65:a3:33:
21:4f:03:41:11:65:74:52:11:32:4b:5f:a4:05:1e:b7:02:45:
2f:12:b6:4b:f0:00:3b:89:b0:b3:01:4b:72:87:b1:fa:f9:c2:
c7:bc:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 05:13:36 2025 by rpki-client