Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9302795A85F611F082F140A2DAE4EC9C.roa
File: 9302795A85F611F082F140A2DAE4EC9C.roa (raw, json)
Hash identifier: F+3lp0m21a5d8yvTWiEBlJzIh7SnOFwjj13QCMyzGTk=
Subject key identifier: 50:6D:A0:41:E4:62:31:20:27:92:AC:4B:EE:1D:2D:36:2A:E9:77:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01744C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9302795A85F611F082F140A2DAE4EC9C.roa
Signing time: Sat 30 Aug 2025 23:10:53 +0000
ROA not before: Sun 31 Aug 2025 23:10:46 +0000
ROA not after: Sun 07 Sep 2025 23:10:46 +0000
asID: 54801
IP address blocks: 45.200.24.0/21 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95308 (0x1744c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 23:10:46 2025 GMT
Not After : Sep 7 23:10:46 2025 GMT
Subject: CN=68b384fd-a105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:ae:bc:97:9c:cf:82:e1:a6:c1:bd:25:98:
72:fb:98:0d:b4:20:78:7e:0d:b9:8e:d0:dc:28:c0:
79:af:5b:4b:50:3d:53:26:d8:13:bd:27:27:cb:8e:
d6:01:f4:73:c5:93:23:c6:93:21:e2:86:dc:75:3b:
da:bd:94:00:58:dc:ca:5a:1e:ab:f4:8b:3b:eb:48:
93:45:c9:1b:06:7c:40:88:15:66:da:ae:53:03:6f:
8a:33:46:b6:0d:56:ae:a0:be:a4:18:1b:03:15:b7:
1b:cc:3a:d6:7d:c9:80:25:45:9b:f3:3a:67:4a:69:
40:49:82:c1:f5:32:0b:ec:3d:af:dd:e3:65:42:ee:
6a:67:da:aa:62:e0:6e:cd:1c:76:0e:db:ea:d7:62:
18:39:3a:8d:bc:6d:95:da:ec:6a:a0:70:fb:41:ab:
08:29:05:2e:5a:31:10:63:0e:b4:f0:26:a0:a4:87:
26:ad:2e:08:73:2f:30:25:d7:6b:6a:ad:1f:6b:e1:
fb:13:ee:5c:eb:b1:60:08:6d:02:fd:fa:98:f8:dc:
09:71:e8:3b:4f:58:a6:ca:99:ec:59:98:39:e7:bb:
c3:96:ba:d8:83:a6:3f:f1:d8:c3:fe:83:38:58:b7:
92:16:4a:41:70:45:16:18:99:80:5a:e1:b2:32:a0:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6D:A0:41:E4:62:31:20:27:92:AC:4B:EE:1D:2D:36:2A:E9:77:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9302795A85F611F082F140A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
45.201.216.0-45.201.231.255
Signature Algorithm: sha256WithRSAEncryption
6c:67:e9:02:95:a2:ac:b9:4c:48:30:a4:71:a0:c6:1d:13:51:
5b:52:ff:91:b5:5b:7e:db:8c:71:a3:cb:ce:09:b5:8d:a6:2d:
e9:4e:9d:96:d2:c6:21:86:93:b5:80:a4:2a:90:97:ab:69:d1:
e4:48:fc:96:f8:6e:86:97:b9:8f:50:e0:55:1b:90:84:c8:a5:
49:05:be:eb:9b:81:9a:f5:fe:7a:5d:b6:0c:5a:43:b6:09:5b:
c6:28:5c:52:12:5a:41:c2:54:ac:1b:ce:bc:1f:b2:27:64:a9:
0e:41:37:64:67:1c:9a:ec:21:f8:b3:fe:c2:20:76:56:58:f2:
61:41:b6:39:8c:bc:b5:58:70:7f:4d:65:ca:b1:a9:5c:49:75:
c5:fa:f2:ba:c2:fa:22:4c:b3:15:be:4d:73:c8:de:5d:8b:4d:
da:6d:f6:d5:74:a9:aa:91:49:a0:a4:7c:43:ac:00:3c:98:22:
81:21:88:0d:88:c2:ad:6d:e6:f4:b0:89:05:42:2c:88:80:f4:
d9:54:3a:5c:6e:61:8e:f4:f6:13:b4:5e:9f:4a:51:2a:2b:09:
06:c0:9e:e5:73:58:d2:c0:e3:d8:8b:04:68:15:63:ab:3a:51:
b1:0e:90:1a:b9:96:e9:4f:06:ab:5e:a7:be:69:a1:53:41:cb:
e0:1c:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:43 2025 by rpki-client