Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58126C56888F11F084D4EF97DAE4EC9C.roa
File: 58126C56888F11F084D4EF97DAE4EC9C.roa (raw, json)
Hash identifier: k5ZSTI4vjLj4VuqdsjbOkzd1a38HJYjfATDcKoSjUOA=
Subject key identifier: 61:A6:55:84:F1:ED:58:2D:4C:F7:FB:41:6C:DD:24:7B:AC:FF:C2:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017725
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58126C56888F11F084D4EF97DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 06:29:29 +0000
ROA not before: Wed 03 Sep 2025 06:29:24 +0000
ROA not after: Thu 09 Oct 2025 06:29:24 +0000
asID: 273217
IP address blocks: 45.194.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96037 (0x17725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 06:29:24 2025 GMT
Not After : Oct 9 06:29:24 2025 GMT
Subject: CN=68b7e049-ef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:be:be:a8:a9:c8:89:87:2e:18:5f:a0:0f:
7c:65:34:ad:88:3e:d8:6b:09:a1:ed:22:47:b8:d2:
9f:9a:6e:a5:d1:fe:ce:b6:92:e2:4f:4b:28:c8:75:
4a:d4:2a:db:f5:26:44:bb:9a:72:d3:63:33:29:69:
2b:82:6a:7b:0e:98:1e:4a:78:25:6a:b3:6e:24:74:
e2:ef:bc:28:b0:f0:ce:fa:d7:99:51:ef:5d:72:2e:
4a:f3:df:ba:8b:ce:22:4a:45:d4:f6:2a:e1:c0:4a:
58:17:36:b1:eb:1b:60:bf:59:76:cd:a3:32:a5:15:
28:3e:74:cc:a9:6f:cb:db:fe:bc:d3:ab:2e:3b:00:
71:85:b2:be:5d:56:eb:42:d8:3b:e6:2f:fa:ea:06:
8a:93:29:2c:0f:02:60:f1:27:01:d8:f6:40:50:ac:
e4:e9:8d:90:53:3a:bd:59:5d:a4:c8:aa:4f:74:4c:
03:ce:bd:c5:f9:1a:04:61:d8:83:57:14:d7:f1:1e:
6e:84:27:dd:f2:1c:80:25:02:fa:e3:6f:73:62:dc:
47:ce:ce:6f:12:b3:c0:b5:bf:ea:49:57:01:5d:81:
b7:53:ca:d4:97:b0:2b:59:90:32:5d:8c:b9:c7:21:
6a:95:c4:61:8d:df:17:8f:40:bb:e4:55:c5:12:22:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:55:84:F1:ED:58:2D:4C:F7:FB:41:6C:DD:24:7B:AC:FF:C2:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58126C56888F11F084D4EF97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:16:8b:37:0b:e1:48:81:64:c2:3d:9b:0b:c0:6a:d9:74:8f:
97:ff:6e:0b:76:65:ed:18:03:6c:63:ec:a5:52:34:6c:8a:31:
2d:29:4e:16:ad:ce:2c:43:6d:70:92:f8:5c:2d:6f:9f:70:25:
b1:7a:e9:8e:b8:67:57:9d:12:80:8d:f8:38:48:b5:1b:3d:c5:
90:83:9e:89:df:33:bb:22:8f:64:f6:50:2b:dc:5a:8d:f7:90:
3c:40:91:a3:5a:8a:25:15:a8:19:46:02:8f:a6:86:56:30:20:
71:1b:2c:f2:b5:2c:db:56:76:39:46:a9:b8:d2:5b:8e:62:93:
01:dc:e7:78:44:f0:20:a0:b5:0b:6c:f8:28:e0:8a:80:de:97:
31:72:f3:f9:61:ce:81:5b:2d:fa:cb:ed:50:29:a2:9c:33:63:
0f:86:9a:67:2a:80:f7:b0:62:2f:97:ee:b7:3b:02:de:1c:2e:
4a:a3:65:d9:7a:11:5f:4f:af:87:36:34:47:d3:ff:e3:bc:43:
54:61:96:c3:4a:8d:5c:47:e3:9d:c4:a0:7b:ad:b4:c2:95:bb:
ab:de:e6:86:cd:2f:4a:49:97:72:ce:a4:92:22:82:bf:af:1c:
5f:1b:f0:d3:91:ca:2e:42:4f:7e:68:48:2a:bf:d4:a0:17:6d:
5a:38:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:04 2025 by rpki-client