Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/503F66C4834811F083665DAADAE4EC9C.roa
File: 503F66C4834811F083665DAADAE4EC9C.roa (raw, json)
Hash identifier: lCGp8yZ4+E5ZV7Ek6P9oGa9aPbefSuQ+4glApsRjPk0=
Subject key identifier: 3B:FC:C1:3D:B6:E6:78:55:C8:18:59:CD:46:71:5A:A9:52:44:DD:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/503F66C4834811F083665DAADAE4EC9C.roa
Signing time: Wed 27 Aug 2025 13:18:26 +0000
ROA not before: Wed 27 Aug 2025 13:18:21 +0000
ROA not after: Sun 05 Oct 2025 13:18:21 +0000
asID: 204741
IP address blocks: 45.194.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94647 (0x171b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 13:18:21 2025 GMT
Not After : Oct 5 13:18:21 2025 GMT
Subject: CN=68af05a2-c153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:2a:e3:fd:7f:f9:78:b4:92:64:11:8f:08:
1d:bf:44:00:ab:b4:24:01:89:82:ba:1a:ac:d7:41:
bf:51:11:74:a3:1c:f2:cc:ca:8e:0f:8d:36:4b:de:
e1:eb:47:96:31:e0:b8:d8:40:cc:e2:e8:39:e4:5b:
10:1c:6d:9f:1e:94:fb:28:11:ed:03:3e:60:eb:72:
c9:92:fb:e0:45:d4:99:77:6a:1e:d3:a8:3c:7a:60:
27:92:e3:4f:e4:6f:00:6f:20:9d:fc:d5:72:67:fb:
63:1f:64:a7:3b:4d:83:f8:1f:f0:a3:12:2b:20:3a:
0c:b0:33:b6:20:90:90:1a:62:42:50:f4:8b:4e:f7:
f3:d0:12:8e:b7:55:e3:56:9f:f1:27:73:f1:d3:41:
59:dc:13:60:08:94:f8:39:86:4c:da:1f:e2:d3:89:
3e:6e:ff:f8:f0:55:04:04:bc:1c:dc:9b:f1:96:21:
65:66:55:45:df:14:c8:08:75:c8:e2:dd:9e:0e:72:
3d:08:74:9d:79:fa:42:11:0c:6e:f2:92:85:9c:3c:
fd:e3:5c:6d:d6:32:46:21:c5:2e:51:b2:c5:1a:d7:
35:72:e3:9a:93:aa:e4:84:a6:45:2f:34:f3:ae:b5:
4d:a2:1b:bc:7f:a7:be:81:c4:3f:72:9b:2e:20:16:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FC:C1:3D:B6:E6:78:55:C8:18:59:CD:46:71:5A:A9:52:44:DD:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/503F66C4834811F083665DAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0c:d0:62:8a:09:f9:a4:bd:8b:0e:8a:36:c6:89:69:c0:22:
d4:6b:3e:6f:dd:67:7c:13:a9:7a:17:c0:07:2a:2d:2f:eb:63:
4c:5c:55:53:54:0a:ca:c4:15:18:d0:16:68:68:5d:98:64:e0:
1c:c0:d7:3c:cf:7b:f0:e0:1e:63:56:65:38:10:d8:2b:aa:ea:
f8:b1:33:c8:a4:b9:54:4e:14:f2:a8:2a:40:44:af:c9:dd:88:
ea:72:73:3a:44:58:91:e1:d9:91:fa:db:01:ba:f2:51:30:e8:
5b:80:99:26:28:f8:fd:a2:0c:77:4f:c2:b0:54:9e:d3:bd:93:
04:f7:1f:3a:ec:9e:91:10:2b:21:45:01:b2:de:e2:55:de:e1:
0c:7f:9c:93:34:9d:37:7f:67:d6:65:ae:ce:ba:fc:6b:b2:30:
8b:8b:a8:64:cf:74:3c:ca:b7:9c:e6:3a:9f:f8:da:b5:34:a9:
f0:2a:72:72:18:30:94:e6:c7:7c:24:22:03:64:13:e7:b6:10:
42:eb:93:89:86:96:53:c6:bb:d9:32:24:00:67:ef:30:68:bc:
67:f5:ec:03:a6:c0:5f:95:09:f7:3d:24:0a:78:1b:5e:73:bb:
48:a2:48:36:ae:4e:ff:23:27:1b:47:b3:b0:b2:33:43:75:06:
21:7f:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:01 2025 by rpki-client