Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FD1CF40828D11F08AAD82DEDAE4EC9C.roa
File: 8FD1CF40828D11F08AAD82DEDAE4EC9C.roa (raw, json)
Hash identifier: b7fZ3grfYyhAUREvV1QXlfkmXOYVQi9VsfGxySl0XYU=
Subject key identifier: 76:73:7F:00:E4:0A:5C:CA:6F:9C:8E:CA:A4:DC:FB:AA:78:84:DA:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0170B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FD1CF40828D11F08AAD82DEDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 15:01:37 +0000
ROA not before: Tue 26 Aug 2025 15:01:31 +0000
ROA not after: Tue 30 Sep 2025 15:01:31 +0000
asID: 401783
IP address blocks: 45.197.3.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94386 (0x170b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 15:01:31 2025 GMT
Not After : Sep 30 15:01:31 2025 GMT
Subject: CN=68adcc51-345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:9b:e7:93:74:b3:30:5a:4e:74:ae:72:ad:
65:3a:f4:28:91:33:9c:bf:80:9f:dd:b6:93:a6:3d:
28:7f:b9:47:32:71:7a:36:1c:b1:58:51:de:2b:0d:
47:91:43:16:13:e8:3d:a7:70:b0:1e:36:a6:01:29:
a7:82:17:cd:1f:95:f6:6e:60:23:c8:20:47:e9:05:
e4:5d:2a:28:41:19:2e:cb:c5:99:95:d3:af:a6:17:
d9:d9:4c:ff:16:3c:04:cb:e9:9c:ce:28:eb:1b:be:
99:30:7f:f6:6d:d3:30:54:ac:cc:a9:73:e7:f1:cc:
35:61:d9:29:98:36:bd:f8:d0:7c:20:73:b3:cd:da:
4d:c7:9a:50:a6:5c:13:3c:03:16:fe:bf:d5:23:68:
6b:47:94:a9:0f:a3:05:98:62:85:b7:ec:4f:f0:d9:
62:0c:24:f2:a2:19:4f:9d:4a:92:5f:b9:87:a2:47:
d9:75:8b:9a:1f:56:df:67:2d:04:60:ab:24:42:54:
d5:cc:ac:cb:c2:a9:9c:fe:87:4c:9b:ff:af:5b:65:
f5:29:79:4b:70:2c:af:f7:31:3b:66:fa:fd:51:21:
06:cb:b0:0b:89:2f:71:06:9d:0f:4d:35:cf:25:1e:
41:37:07:98:bc:12:cb:02:de:d3:49:32:0e:f0:77:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:7F:00:E4:0A:5C:CA:6F:9C:8E:CA:A4:DC:FB:AA:78:84:DA:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FD1CF40828D11F08AAD82DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.3.0/24
45.197.8.0/24
45.197.10.0/23
Signature Algorithm: sha256WithRSAEncryption
58:7b:2e:e0:14:6f:83:2d:e5:ab:59:c5:4a:07:8a:5c:43:80:
88:03:a6:32:50:4f:89:a4:5f:61:c4:bc:b6:85:9e:45:97:0e:
8d:8b:e1:56:4c:e0:bb:c0:e0:42:f9:b7:36:bc:62:33:d9:7b:
53:1a:24:e9:03:72:b2:5c:a2:81:cf:e4:30:53:36:21:18:ad:
18:3b:e0:f1:7a:cc:69:7d:b3:df:21:27:46:3b:53:a7:93:16:
28:0c:71:d1:0b:15:3d:d4:ab:52:b2:97:47:e7:db:b7:0f:bc:
b4:3d:68:d9:d6:b4:c7:1f:9f:cb:72:fc:e5:db:df:b8:ec:b8:
2b:38:21:ba:35:50:ce:22:02:16:a3:22:91:3b:36:be:4d:71:
e4:29:c9:e8:39:78:3a:50:5d:a1:34:60:6b:a1:76:10:5f:6f:
5d:f1:86:2d:fb:87:b5:d6:8f:93:58:b1:2a:1a:e9:26:0c:6c:
ba:b8:a1:08:78:1c:9d:cd:7f:d4:a8:2c:89:a9:11:b0:b6:b3:
a6:e7:f4:ef:b1:88:fd:69:c1:a9:8d:3b:10:fa:b0:57:0b:c4:
27:c7:fe:18:52:fc:96:c2:71:85:47:4f:ab:fa:c5:d2:4a:78:
12:f4:a0:1f:6b:3e:72:2b:21:36:2a:9c:8e:84:a0:d8:26:e6:
85:12:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:51 2025 by rpki-client