Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62FF7EE47ACD11F0BDFC48BDDAE4EC9C.roa
File: 62FF7EE47ACD11F0BDFC48BDDAE4EC9C.roa (raw, json)
Hash identifier: FrOc7oY+cioEdiOfa2Dpp3UWqOmaFbD53rZ4HHdGRIk=
Subject key identifier: 5A:FB:74:F9:55:40:02:AB:0C:39:D5:A6:66:8C:7B:95:B2:04:FE:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62FF7EE47ACD11F0BDFC48BDDAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:18:20 +0000
ROA not before: Sat 16 Aug 2025 18:18:13 +0000
ROA not after: Sun 21 Sep 2025 18:18:13 +0000
asID: 16509
IP address blocks: 45.206.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Aug 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93071 (0x16b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 18:18:13 2025 GMT
Not After : Sep 21 18:18:13 2025 GMT
Subject: CN=68a0cb6c-80df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:bd:5b:01:45:40:e8:56:f8:90:87:9b:4b:
cc:83:8d:9e:71:d1:bf:7e:da:c7:6e:b1:82:76:8d:
0f:c3:6f:2f:28:17:5c:8b:c9:57:f7:75:20:43:0b:
bd:a3:e7:06:82:ee:92:79:5f:2f:1f:71:8d:68:c0:
a7:23:86:7e:aa:d0:21:48:f3:19:bb:df:3d:96:5b:
78:df:83:f8:3d:da:9f:a2:96:f8:c4:bb:e0:71:9c:
32:9d:eb:b7:68:c6:d9:1f:e7:f4:b8:2c:b1:e6:df:
9c:9d:63:fa:56:63:d7:9b:a1:f3:37:fa:28:08:0e:
d9:0c:21:9f:20:e0:02:9f:82:20:ef:64:fc:6b:3b:
18:c7:98:73:6f:cd:c2:2b:fc:fb:8e:41:4b:ed:08:
a4:fb:a5:4d:37:12:55:44:cd:76:a8:b1:50:49:0d:
37:e9:4a:77:08:7a:6a:59:8f:58:0c:7c:b9:f9:ca:
68:01:02:7e:66:18:48:53:98:a9:72:05:1d:68:28:
f4:63:3f:c3:e3:69:e4:3d:41:a6:ce:8e:1a:39:dd:
31:c5:38:eb:fe:ef:3f:18:5e:be:80:6a:50:6c:bd:
8d:16:a0:fb:4f:30:22:7c:e6:2b:5e:02:8f:f5:d6:
af:32:3d:25:59:29:fa:7b:6e:ae:0a:74:be:75:e1:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FB:74:F9:55:40:02:AB:0C:39:D5:A6:66:8C:7B:95:B2:04:FE:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62FF7EE47ACD11F0BDFC48BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.3.0/24
Signature Algorithm: sha256WithRSAEncryption
05:06:f1:11:5b:35:8b:1b:4f:93:6c:24:f8:89:c7:af:5c:5f:
7b:85:9f:c2:7f:f9:cd:9f:b5:1f:58:74:f1:5e:ab:4b:3e:44:
c7:b1:12:fa:d8:d9:4e:58:85:79:1e:d1:a3:e2:f3:7d:57:0b:
6e:83:06:23:4b:27:7b:c2:d2:0c:a5:2a:43:93:e8:fe:c6:c9:
67:5d:6b:54:d0:37:22:bb:4b:ec:db:cf:cc:17:57:52:92:ea:
ea:02:78:07:03:6f:f7:90:7b:3f:eb:42:fa:67:06:48:d9:ce:
98:da:76:bf:53:a0:6f:83:1e:c4:63:4d:13:a5:2c:17:83:5f:
97:9c:e9:15:ba:58:ac:51:b5:72:9f:47:03:88:a0:38:53:99:
6a:56:5d:5c:fb:24:9c:ce:3f:ab:9a:5b:cc:71:4d:e1:f8:dd:
34:c4:f0:0f:b0:6f:90:2a:6d:b4:ba:6a:41:52:e5:a0:04:b3:
4d:22:a8:b4:75:32:37:32:9c:d3:a8:e1:17:6c:af:71:07:a4:
d8:cd:df:05:cc:55:fa:75:bd:5b:d8:f0:c7:21:8a:35:18:f9:
60:46:81:4c:69:a6:fb:21:43:e3:c9:7f:44:58:22:00:1d:d9:
19:6e:d2:a4:92:06:7f:76:46:70:4f:11:02:86:03:76:bd:b4:
66:c9:15:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:20:17 2025 by rpki-client