Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A5D9BA4836311F098259FD7DAE4EC9C.roa
File: 7A5D9BA4836311F098259FD7DAE4EC9C.roa (raw, json)
Hash identifier: BKQBEsYnDPi4DV9vh2ppocv3LC6xptPFbW+Rm/HDNWM=
Subject key identifier: 6B:22:3D:E4:7A:77:C2:E8:FA:BD:CC:16:7D:AC:64:48:03:9A:75:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A5D9BA4836311F098259FD7DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 16:32:53 +0000
ROA not before: Wed 27 Aug 2025 16:32:48 +0000
ROA not after: Mon 13 Oct 2025 16:32:48 +0000
asID: 20326
IP address blocks: 45.202.100.0/23 maxlen: 24
45.206.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94688 (0x171e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 16:32:48 2025 GMT
Not After : Oct 13 16:32:48 2025 GMT
Subject: CN=68af3335-e01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1f:a1:03:a5:0c:92:3b:51:3d:1a:f0:dd:57:
43:fe:e2:f8:43:9d:99:f4:83:22:6f:4f:bc:f6:96:
20:c2:d5:2e:ef:5d:d5:8b:15:47:d6:e1:66:a7:09:
1d:26:5c:a2:86:4e:9e:92:18:c3:8d:45:0c:8f:6a:
6b:f1:16:a4:d0:79:16:e5:1f:23:c8:02:a4:ad:7a:
21:61:be:41:0d:f3:36:fd:a0:ff:75:e2:53:d4:5e:
e4:b7:37:ea:dc:c0:21:ca:78:52:a3:39:7e:51:91:
d5:ab:06:68:6f:ba:f2:d7:1e:de:1f:d4:39:26:f9:
91:5d:ee:f9:55:6f:b5:ab:ec:32:98:a1:f0:f2:9a:
0c:df:6c:9f:0d:5b:ea:6b:40:ff:5e:78:86:9d:1c:
b1:89:cb:47:0e:66:9b:9f:a2:08:03:cc:9d:47:af:
40:eb:7c:f6:88:ac:2d:0e:e3:0b:62:e7:77:61:b2:
fe:ac:1c:a4:cd:7f:6f:8e:6a:29:ef:ae:17:2d:fd:
ef:25:1f:f0:a7:7b:ed:07:f3:23:4b:0a:8b:3b:d0:
db:9e:2f:d2:ef:2a:ec:8b:f8:bc:8b:f5:b1:6e:f5:
f2:84:46:f3:29:d7:52:61:a0:e8:8f:63:09:56:64:
89:3a:4f:e7:6f:8f:e9:06:17:b9:b0:ec:19:e2:f1:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:3D:E4:7A:77:C2:E8:FA:BD:CC:16:7D:AC:64:48:03:9A:75:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A5D9BA4836311F098259FD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.100.0/23
45.206.10.0/23
Signature Algorithm: sha256WithRSAEncryption
60:a3:32:94:88:f9:23:2b:1a:e1:2a:b9:f9:67:b4:5b:9b:f8:
3f:52:a8:a4:1d:e3:70:1a:61:c3:e5:ca:08:30:ab:de:f1:d2:
de:de:a1:b3:bd:ec:75:48:73:e8:a4:ec:7d:de:e0:58:e2:c3:
90:79:c5:1d:f8:de:fd:c6:89:b8:5d:f5:7d:8d:01:80:bc:13:
d1:b9:1d:2a:a6:55:94:1e:d7:1d:5d:57:ca:1b:dc:57:af:12:
ca:bb:98:34:52:af:e2:ea:ff:59:72:e1:f3:60:e2:0b:7c:60:
ee:ae:9a:5a:f3:7a:11:a2:f2:0e:38:b5:bd:8f:46:4a:fa:52:
ea:7f:22:15:6a:00:3e:9e:bc:1c:98:48:75:89:83:ca:d3:3c:
ce:f6:d7:26:d5:15:b2:e6:1b:23:4e:46:e1:f8:61:e3:0e:a7:
79:d4:6f:84:2a:11:69:99:5a:13:47:40:bf:4b:88:ed:a1:6c:
25:96:54:f7:5a:5a:c3:4d:41:f5:a1:22:f6:76:0e:e8:46:26:
a2:e9:e8:bf:86:4c:4e:ac:ad:3e:0b:b3:36:94:f1:a6:41:79:
6b:23:28:69:7f:ec:a5:68:bb:66:1b:bf:25:cd:60:19:c4:8a:
40:16:eb:dd:0a:c8:96:2b:95:d0:98:eb:44:ae:1a:c5:a5:5d:
c4:f8:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:49 2025 by rpki-client