Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44EE3356841D11F0AFA3C39DDAE4EC9C.roa
File: 44EE3356841D11F0AFA3C39DDAE4EC9C.roa (raw, json)
Hash identifier: ixrLhZonXX0SWPM4PjA6YDZO4s2qJp/FmKtgpa/BeWM=
Subject key identifier: C6:AB:35:ED:F4:B0:AA:BB:87:64:EC:72:A0:B3:22:AC:85:99:5E:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44EE3356841D11F0AFA3C39DDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 14:42:50 +0000
ROA not before: Thu 28 Aug 2025 14:42:45 +0000
ROA not after: Thu 04 Sep 2025 14:42:45 +0000
asID: 23764
IP address blocks: 45.196.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Sep 2025 14:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94896 (0x172b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 14:42:45 2025 GMT
Not After : Sep 4 14:42:45 2025 GMT
Subject: CN=68b06aea-75a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:21:8b:53:dd:a4:23:d9:01:b6:74:d5:75:
1c:94:c3:03:90:6a:05:53:7b:f3:22:b4:03:9c:a6:
05:46:f1:dd:b4:a7:fd:14:02:29:e1:3e:f3:7d:f5:
ac:7f:38:28:c0:cf:89:7f:1d:b7:13:6d:e8:9e:fb:
38:8d:98:f4:ee:22:e7:a1:01:45:09:d1:29:9c:58:
7b:0c:05:78:28:89:eb:e0:0f:f9:ad:ad:ac:8a:45:
8b:5f:61:ff:7f:a5:01:89:ed:33:e1:61:e2:3f:69:
1e:89:02:b2:10:1b:bb:fb:db:28:14:74:1e:11:20:
0f:14:a0:ea:7c:03:c7:88:45:dc:b7:42:99:60:52:
a4:b9:dd:6e:c0:26:17:75:50:67:ce:d3:87:7f:79:
b7:1c:c3:27:7e:2a:d3:9b:49:71:42:a4:72:17:57:
3a:2c:99:6b:cb:66:b9:b8:1e:d0:e2:db:7b:a2:47:
56:e6:ff:e9:49:81:fa:f9:0e:a7:d5:9e:a8:75:b1:
3e:52:6c:45:2d:9a:c2:aa:22:44:8d:c5:91:8b:b7:
04:29:95:39:b5:f6:e6:a1:b2:2b:b3:48:a8:bd:df:
c7:d4:9d:e3:9d:6c:19:15:be:85:d5:a5:3d:73:30:
a2:ad:c8:6b:8c:c0:7c:b9:c6:23:0b:a1:3a:13:80:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:35:ED:F4:B0:AA:BB:87:64:EC:72:A0:B3:22:AC:85:99:5E:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44EE3356841D11F0AFA3C39DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fc:91:52:63:a1:f6:81:80:d0:8c:be:19:77:68:bc:8e:87:
91:8a:70:fe:6f:f8:2d:8a:ed:00:32:5e:2c:b5:0e:4c:27:e8:
c5:00:b6:d4:95:9e:44:3e:0f:66:c6:57:af:bf:8a:c1:ba:89:
5c:83:b2:6b:c3:5f:e0:fd:e6:4a:12:fc:8d:ec:38:ff:95:18:
ea:3c:ec:97:0c:27:28:2a:26:08:96:6c:db:2f:5e:20:dc:79:
4e:34:e0:f2:f0:02:3f:ff:94:9b:e6:92:7a:b0:cb:a9:e6:74:
e9:a7:5e:f0:79:17:43:f4:e0:3d:52:93:e3:15:d5:af:26:06:
e2:5d:07:3f:30:17:10:4f:c9:3e:0d:cf:59:99:8a:c7:27:15:
fb:93:c9:1e:7b:08:a6:7d:2d:58:b9:14:08:e4:11:6e:66:c6:
3e:ba:7b:70:7a:13:a9:a3:78:d6:fd:90:92:3e:ba:58:dc:b8:
ac:98:97:92:3a:a8:61:4f:21:1d:97:f9:31:21:28:f3:b3:46:
57:f9:15:e5:17:de:fd:8b:c2:e2:82:11:b6:99:26:a7:39:dc:
39:5c:2c:d9:4f:62:2f:56:83:37:6a:1b:a9:7c:2f:09:bd:ad:
19:85:de:84:89:48:6f:ef:99:3a:f5:af:2c:53:37:20:a1:6c:
ab:08:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:54 2025 by rpki-client