Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69EAF268871311F09EEEA5F2DAE4EC9C.roa
File: 69EAF268871311F09EEEA5F2DAE4EC9C.roa (raw, json)
Hash identifier: sjVkP/uy9UJChm/Ht5ROc5VairLYGqdWEzSQs/9yBAI=
Subject key identifier: 5E:63:08:28:07:72:1D:F4:54:3B:B0:BE:E4:56:E1:8E:6D:B0:CC:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017514
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69EAF268871311F09EEEA5F2DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 09:09:50 +0000
ROA not before: Mon 01 Sep 2025 09:09:46 +0000
ROA not after: Tue 27 Jan 2026 09:09:46 +0000
asID: 3257
IP address blocks: 45.199.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95508 (0x17514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 09:09:46 2025 GMT
Not After : Jan 27 09:09:46 2026 GMT
Subject: CN=68b562de-db59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:ce:a8:2b:a5:18:94:51:fd:39:4c:ab:3d:
24:36:6a:59:d7:3d:78:24:49:db:cf:9a:d9:64:3a:
a6:c5:09:19:9b:91:b9:83:c9:01:3b:00:da:e7:ca:
e3:0c:57:b0:a3:e4:e0:b8:2c:07:f5:3b:b5:10:b7:
30:2f:d8:1b:28:89:1f:5f:f7:e7:47:19:aa:50:ec:
77:9c:d9:d4:40:54:12:bf:bf:d8:5f:1c:e0:ca:91:
7c:78:24:ce:af:e5:8f:fc:2c:17:cb:39:ef:a7:d3:
c6:eb:e4:73:02:dd:29:ed:f3:e9:66:e5:52:36:5a:
86:2f:4f:ba:9a:23:8d:59:ff:48:d9:cf:8b:dd:6a:
f4:00:f8:13:88:69:8f:f2:24:a4:e5:4d:73:14:5d:
0d:59:21:03:80:5a:d6:ec:90:6d:98:69:43:e4:26:
a4:a5:35:6a:f4:f7:34:06:8d:68:65:ef:e7:88:e3:
7d:bf:3d:24:55:2c:de:59:17:a5:ee:25:41:8d:da:
6d:06:44:ce:f7:55:26:5e:fc:b6:41:55:44:5b:fe:
26:4f:0e:46:43:09:36:5d:64:d5:51:5f:86:9f:f9:
86:1a:f3:71:fb:0c:47:ee:51:54:88:31:c6:57:c7:
f3:c8:9f:26:30:90:b1:d9:ca:b6:50:34:ef:ca:e4:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:63:08:28:07:72:1D:F4:54:3B:B0:BE:E4:56:E1:8E:6D:B0:CC:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69EAF268871311F09EEEA5F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.149.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ad:d2:1d:ad:3e:20:78:d6:42:9c:8c:4f:de:8d:6a:6f:49:
d4:1c:d7:0b:6a:89:2b:27:01:86:18:ae:5a:f1:ff:bc:f8:b9:
cc:12:33:b3:4b:6b:55:47:d3:e9:30:09:b3:81:ed:c5:cf:90:
15:af:67:0b:06:3e:de:11:18:ba:e1:9c:f2:81:fa:80:6b:5a:
b9:f2:a9:5c:ad:8a:26:e0:3a:d3:fb:cd:dc:3e:f5:e2:9a:c3:
f8:01:b3:ef:c1:49:30:41:24:72:9b:37:33:be:43:b0:22:78:
81:02:b6:97:32:b3:49:65:a0:88:f6:95:16:ba:aa:4a:49:b8:
de:fd:ad:68:5d:ea:e6:96:44:b6:34:e4:02:c5:5d:78:0d:9b:
48:a7:0f:07:90:d7:01:e6:cd:be:3d:ce:33:b7:42:26:5a:f9:
fe:e5:4f:ab:08:a4:e0:1c:80:56:87:d5:55:68:59:28:b8:1b:
1a:b9:49:5a:e5:17:a4:1c:5f:74:c7:84:3e:ba:57:f8:f9:47:
10:a4:88:3d:71:f6:96:15:a7:00:e3:a2:6c:ae:54:9b:d3:7c:
1b:0d:d0:71:5c:c1:31:07:93:c5:6d:50:03:36:e1:8e:0f:93:
4c:b6:e1:d6:2b:95:f9:93:7b:5e:9d:91:aa:55:0a:cd:77:96:
07:7b:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:24 2025 by rpki-client