Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/829720FC802411F09A504BBFDAE4EC9C.roa
File: 829720FC802411F09A504BBFDAE4EC9C.roa (raw, json)
Hash identifier: DLxGB9T24EKAg+SoDck/2uERsp8YeYcDL4JBuo4tRgI=
Subject key identifier: 36:D4:28:EC:F9:6C:CE:A9:BA:77:6F:4F:86:C7:26:6E:FD:7F:9B:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/829720FC802411F09A504BBFDAE4EC9C.roa
Signing time: Sat 23 Aug 2025 13:24:35 +0000
ROA not before: Sat 23 Aug 2025 13:24:30 +0000
ROA not after: Wed 02 Sep 2026 13:24:30 +0000
asID: 18233
IP address blocks: 45.195.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93980 (0x16f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 13:24:30 2025 GMT
Not After : Sep 2 13:24:30 2026 GMT
Subject: CN=68a9c113-d51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:bb:9d:53:1b:d0:05:f7:c1:5e:f4:b6:a6:
9d:b8:55:29:c8:f1:e7:f3:d8:63:0a:56:eb:2a:ec:
25:cf:17:8b:9c:5c:97:7f:30:e0:cc:50:f5:a9:72:
e0:6a:04:62:2f:0b:fd:34:3e:97:40:f6:20:78:ad:
9a:37:9c:8c:7f:64:83:45:b7:6d:d3:c4:ed:68:cc:
fc:3f:81:99:6b:2c:ca:ec:aa:ce:1b:69:e6:e3:95:
92:76:da:bf:cb:57:2c:f0:79:8b:5e:99:bd:19:81:
e8:3c:6b:4c:73:c1:2a:0e:99:7e:6c:32:26:57:d6:
83:79:c8:16:26:e9:19:21:c8:69:06:04:7c:ea:9a:
12:59:9b:a6:2a:a9:54:b2:41:77:0e:19:17:eb:3e:
d1:5a:e2:24:a7:c2:3f:01:dc:af:72:58:a1:1a:65:
3f:95:14:f1:23:e3:89:22:13:0b:9e:ae:97:60:6b:
2a:62:8d:b7:49:b4:00:cd:5e:0f:30:9c:d9:72:6e:
4c:46:01:f3:6f:cd:56:2b:e1:7c:5e:0c:f9:bd:20:
32:46:ff:e8:3c:77:02:0f:52:e9:ab:db:ae:2d:86:
64:c1:7d:e7:26:b6:42:0a:78:22:94:a6:30:dd:a8:
fd:cd:e4:6b:47:39:04:e4:55:ea:fc:8c:ef:ef:b2:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:28:EC:F9:6C:CE:A9:BA:77:6F:4F:86:C7:26:6E:FD:7F:9B:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/829720FC802411F09A504BBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
24:14:da:cd:3b:0d:c0:ce:dd:40:76:d2:6c:97:c1:82:88:b8:
f1:5c:f8:27:f5:6f:59:04:8b:2a:8e:b4:c6:5a:63:cd:ea:0a:
7c:30:c5:43:4f:35:cc:d0:97:00:05:cf:dd:48:bd:87:9c:0f:
92:03:26:9b:e6:ab:3c:c5:17:27:6d:af:27:a9:67:95:be:38:
a5:43:53:ad:d7:dd:0b:cd:d9:39:b4:df:24:8c:f9:d5:8f:3f:
aa:16:79:9a:a7:ed:d2:48:29:c2:54:07:4f:56:aa:a5:35:69:
37:aa:ff:b3:63:40:50:85:9e:22:21:71:37:bb:68:63:b8:be:
40:19:ed:b9:d3:3c:43:d9:b1:dc:1b:62:4a:b7:bf:5c:52:55:
22:e0:52:4b:d2:9d:77:03:3f:5f:be:ab:66:53:fa:ad:55:5c:
26:57:46:3e:a8:06:2d:53:e0:94:a1:e6:b3:f6:86:b1:c9:c7:
1b:98:42:79:5d:a8:45:e7:2b:a7:13:a4:e1:18:3e:53:f4:09:
e1:d8:07:a8:68:7c:ea:dc:c9:42:bf:47:a7:25:a2:75:49:bb:
5c:2f:ad:55:5e:8c:09:98:60:10:9b:a6:f8:2b:1c:88:be:9e:
72:f4:d0:8a:5d:ab:91:b8:e1:03:86:7d:a7:be:2b:bb:35:fd:
a5:22:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:15:29 2025 by rpki-client