Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77FE609E87CF11F0A7260BC4DAE4EC9C.roa
File: 77FE609E87CF11F0A7260BC4DAE4EC9C.roa (raw, json)
Hash identifier: aT7zedJnYwauIVEKX5kC/VSmiKZLOUWvMMGI9HxIpZs=
Subject key identifier: 26:AA:7A:DC:E2:3C:56:E2:93:E4:16:AB:76:98:D3:80:F7:1E:A9:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01761D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77FE609E87CF11F0A7260BC4DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:35:59 +0000
ROA not before: Tue 02 Sep 2025 07:35:55 +0000
ROA not after: Sat 04 Oct 2025 07:35:55 +0000
asID: 152599
IP address blocks: 45.196.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95773 (0x1761d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 07:35:55 2025 GMT
Not After : Oct 4 07:35:55 2025 GMT
Subject: CN=68b69e5f-4313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:06:a2:25:ef:eb:5e:8f:62:e9:c9:ec:de:
ca:db:83:2a:5e:c7:7d:74:82:b0:3f:bf:f2:7f:10:
c0:2a:85:a0:c0:c9:d1:f5:48:cf:59:1a:e2:dc:6a:
06:5d:f1:2c:71:bc:d4:81:f9:91:f4:15:80:4b:c5:
f7:49:68:f6:0a:87:01:4d:f5:40:88:ee:63:ef:fa:
fc:b7:40:67:20:6d:35:db:e8:7b:ff:b5:18:de:40:
9f:2c:9f:44:68:2a:8e:01:02:b9:4f:22:68:07:e7:
23:fa:75:e8:af:d1:1b:70:f3:97:00:2e:82:de:ca:
df:cf:eb:67:dd:29:4b:fa:49:aa:ad:98:8b:cb:a2:
ed:e7:ca:5b:d8:1d:25:96:61:61:e0:5a:60:04:ff:
c8:19:94:41:5a:12:11:e9:e3:f0:a5:dd:56:58:fd:
5e:7d:59:24:f2:b3:eb:66:77:4f:fb:97:7a:ec:64:
a9:25:33:3c:d7:a4:d4:01:1e:19:98:23:14:08:97:
00:3e:e0:c7:ab:6e:8c:66:9a:b3:84:09:52:06:03:
da:28:b3:55:47:a8:af:1f:80:4d:a6:8e:ec:20:85:
78:19:28:39:7a:0d:ed:81:c2:42:b1:60:42:5e:cd:
d0:4a:6e:e2:f6:3d:3e:67:75:b4:39:ae:c0:5b:3b:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AA:7A:DC:E2:3C:56:E2:93:E4:16:AB:76:98:D3:80:F7:1E:A9:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77FE609E87CF11F0A7260BC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:03:0c:69:45:0c:ce:fb:3a:37:5f:64:b2:74:c5:7e:ad:ad:
b3:45:fc:f0:97:bf:a4:81:20:f3:89:5a:da:d5:2c:1c:64:96:
1a:53:36:6c:fa:50:4f:c7:9c:20:58:39:a6:c8:8c:40:6e:2e:
88:8a:0f:39:57:9f:c2:7b:ef:01:f6:dc:48:8d:cf:86:f4:22:
30:47:9e:76:f5:eb:e9:05:e7:3a:95:54:2d:d8:0e:ca:3c:c3:
b6:61:ca:d5:4d:f5:d3:b2:41:07:60:56:d0:96:01:a2:32:6c:
f7:84:aa:af:04:19:df:8d:5c:e1:37:0e:57:0a:b3:c1:9c:8f:
fe:40:6c:ca:3d:a0:e0:62:84:fc:92:39:49:5c:67:3e:1e:1a:
9d:ec:bb:25:3e:3a:41:e9:36:91:ab:a8:2b:0c:06:dd:ce:06:
76:9f:2e:12:22:1d:8b:3b:de:7d:45:e7:f2:67:62:19:f8:26:
98:74:be:60:e5:61:bc:ed:61:ab:ed:6b:34:f6:68:fa:3a:5e:
4e:74:d4:f3:c0:cc:1c:10:e8:8d:79:7a:12:c7:f5:e1:f1:86:
36:b5:d9:d2:74:7f:83:9b:08:af:be:1e:3a:39:79:4a:71:a3:
d9:23:f5:b3:12:6d:3a:56:ca:72:62:96:33:15:8f:d7:38:a2:
da:2a:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:47 2025 by rpki-client