Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD68BAE83DE11F080474589DAE4EC9C.roa
File: 8BD68BAE83DE11F080474589DAE4EC9C.roa (raw, json)
Hash identifier: gKSZReWNutaiOZzzdVLpME8ty0jbJ9s943YOpiDs0t8=
Subject key identifier: 7F:DC:4D:C1:61:B8:13:7A:DB:23:D9:EF:77:B2:B5:50:D5:8E:01:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017243
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD68BAE83DE11F080474589DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 07:13:50 +0000
ROA not before: Thu 28 Aug 2025 07:13:46 +0000
ROA not after: Sun 21 Sep 2025 07:13:46 +0000
asID: 214238
IP address blocks: 45.192.59.0/24 maxlen: 24
45.192.63.0/24 maxlen: 24
45.195.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94787 (0x17243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 07:13:46 2025 GMT
Not After : Sep 21 07:13:46 2025 GMT
Subject: CN=68b001ae-e57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:11:f7:15:7a:01:d6:45:9b:d5:d4:63:fd:
36:a1:fe:17:9d:c0:ee:86:49:65:bd:00:8c:96:58:
a8:71:35:0e:99:55:aa:8b:0b:ce:e0:5c:fa:11:ca:
da:85:96:c0:dd:eb:63:cf:38:f6:2a:50:a0:8f:b4:
9f:6e:51:8d:c8:d5:ac:32:a5:ca:88:ea:23:70:2d:
c3:e9:1c:71:40:f2:af:a1:f5:4c:bf:38:a0:8e:a0:
4a:88:22:f3:dd:be:c2:33:70:43:64:df:0a:b7:d3:
ae:ac:71:e1:33:bd:53:30:cc:92:f7:27:3c:88:e4:
f5:56:62:52:0a:df:5b:95:38:74:68:ac:ce:7a:7d:
52:68:32:60:3c:d5:2f:8e:e9:13:79:5b:53:6d:43:
94:0c:51:67:df:6c:ac:17:b0:21:d3:08:3e:02:ec:
ff:18:ec:6a:b8:4e:ee:ae:b8:8e:66:99:d9:84:db:
48:93:fd:f8:63:33:da:fe:2f:9f:e6:b6:35:0e:3c:
79:44:d8:40:ef:32:46:fc:7f:d0:9b:30:d7:69:49:
98:7d:02:4f:ab:de:d1:7a:76:31:67:3a:3f:30:e0:
6a:76:4f:5f:e6:b0:3a:f3:cc:4a:2b:2a:6d:93:c9:
1e:d1:a9:be:7b:c4:fe:3e:ea:56:7b:41:dd:28:66:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:4D:C1:61:B8:13:7A:DB:23:D9:EF:77:B2:B5:50:D5:8E:01:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD68BAE83DE11F080474589DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.59.0/24
45.192.63.0/24
45.195.161.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9f:dc:ce:21:4f:8a:0e:83:72:3f:63:47:67:08:0d:ed:16:
c5:c9:0b:df:c3:43:b8:76:93:3a:62:51:aa:74:02:66:fb:63:
10:8d:a3:71:d4:84:dc:28:74:7a:39:cc:4a:a3:a8:5d:e8:90:
2e:50:01:fb:43:f7:a4:ba:0a:29:b6:99:d6:aa:71:da:88:73:
00:58:95:ad:d0:fc:37:7e:2b:12:ea:9e:f8:e4:3f:37:3a:94:
b7:31:54:13:de:b0:42:40:8d:66:88:0f:df:b9:78:39:27:90:
2c:c9:68:58:c2:07:bd:91:ee:58:a0:f1:a8:45:7c:b4:47:3c:
df:23:24:fd:97:a4:c7:a2:17:9a:84:7a:bc:37:8b:ee:28:63:
7a:0f:f0:6c:4c:47:75:fa:45:1e:a1:66:a6:73:c3:d5:21:8b:
12:d5:c7:e6:32:bb:55:e1:19:1f:3a:3f:f1:c8:08:4a:9a:12:
f5:57:e9:a2:40:e2:54:4c:ea:a3:94:b6:2b:d1:90:2b:bd:66:
7d:b9:57:3b:4e:84:e6:87:ad:21:47:91:6f:5f:e8:25:83:a6:
50:68:c1:c3:5b:28:7d:1b:0c:bd:d5:a7:fc:f8:42:69:9e:bc:
af:3c:27:6f:a1:2d:32:b1:22:02:e0:f5:32:ea:11:84:12:a2:
0a:b0:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:15:30 2025 by rpki-client