Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AB7F082774211F0B4232BB1DAE4EC9C.roa
File: 6AB7F082774211F0B4232BB1DAE4EC9C.roa (raw, json)
Hash identifier: EgUE+t13z3MKlnBhZwVHqyY350iLyjqZDKJyU8Lx460=
Subject key identifier: 40:24:1C:42:0A:78:7E:5F:A8:6A:1F:59:9C:1B:51:63:59:64:CF:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AB7F082774211F0B4232BB1DAE4EC9C.roa
Signing time: Tue 12 Aug 2025 06:05:59 +0000
ROA not before: Tue 12 Aug 2025 06:05:54 +0000
ROA not after: Fri 19 Sep 2025 06:05:54 +0000
asID: 52468
IP address blocks: 45.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92778 (0x16a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 06:05:54 2025 GMT
Not After : Sep 19 06:05:54 2025 GMT
Subject: CN=689ad9c7-0ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:81:47:e1:cb:0b:a0:b5:fe:8e:b7:4e:5c:
b3:d4:8a:dd:df:21:a5:fe:10:57:25:33:ec:ee:db:
ea:25:99:29:b9:30:c8:97:ef:da:2d:b7:af:06:b0:
5e:2b:59:df:e5:ef:f5:54:cd:ee:01:45:66:0e:2c:
0e:3d:c7:20:bb:66:33:5a:f7:eb:b6:26:ba:89:7b:
ba:ff:6f:c6:66:20:83:6a:9a:c7:82:99:07:34:c5:
50:f6:a3:d3:c2:6e:73:a6:3c:13:ed:84:90:5e:58:
07:d2:92:e4:50:ab:98:c3:99:12:58:03:ee:a1:18:
fa:e8:04:af:58:4c:b1:e8:78:4a:ee:44:b6:dd:14:
7c:49:9d:65:13:b7:57:e9:ed:0d:4b:be:01:19:db:
0e:e3:f3:cd:22:22:7b:3a:1b:13:ba:83:e1:a7:7d:
aa:5d:b4:35:0b:91:32:a9:37:28:50:8f:08:19:35:
58:b2:a3:3f:2a:2b:2e:46:48:d1:15:ea:e2:da:3b:
26:bf:be:79:1b:a8:b9:95:60:46:09:df:2f:01:98:
60:80:ef:c3:b3:ef:89:2e:54:0a:cc:42:23:53:da:
9f:50:b7:fe:83:9f:bb:61:43:e4:50:2d:e8:0b:f6:
20:eb:1e:3d:6d:dc:a7:90:a0:50:2c:26:f2:ca:93:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:24:1C:42:0A:78:7E:5F:A8:6A:1F:59:9C:1B:51:63:59:64:CF:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AB7F082774211F0B4232BB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8b:c0:c6:dc:90:7e:e7:f3:d4:a8:d1:9e:4c:01:19:fe:05:
4d:ba:ae:a5:13:81:87:1c:61:1a:0f:dc:db:ca:40:f6:7f:dd:
9e:b5:1a:71:47:bd:05:1f:15:e2:05:ad:86:1f:a4:3c:89:02:
c2:64:96:1c:66:57:e0:c8:fb:6a:ca:16:90:d2:96:e6:b9:c9:
35:02:30:6c:b6:0e:73:2b:3e:de:25:99:c3:e9:9e:e2:c7:0b:
ec:73:75:59:5e:4f:34:92:eb:cc:48:f7:a9:0c:57:6b:db:7c:
49:a9:b2:49:23:70:7d:ad:ec:01:34:a7:95:ea:e7:db:b8:ab:
d8:f7:ba:df:c8:06:79:61:6b:d8:fa:17:21:58:d4:ee:e1:05:
cd:f8:b6:ac:a0:fc:73:08:a9:46:12:df:6a:56:02:51:c1:c5:
cb:7b:5d:5e:d5:dc:2b:00:02:9e:a5:df:3f:95:41:41:c0:ab:
70:a7:13:f4:9d:40:07:b9:29:cf:ca:1a:b8:82:2b:31:27:cf:
de:08:f5:7d:bd:0b:7a:d7:47:44:ff:98:63:d2:ed:63:cf:bd:
77:e6:82:6c:cb:e8:f6:04:8e:ce:27:9f:bd:bc:6c:f2:57:96:
a2:99:e9:d4:ab:ac:bc:8c:f1:d7:69:96:90:98:49:c6:52:fb:
92:ba:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:12:01 2025 by rpki-client