Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB48350870F11F096A03EDADAE4EC9C.roa
File: 9EB48350870F11F096A03EDADAE4EC9C.roa (raw, json)
Hash identifier: uSqOvSdszBGSxD78zUsmqpnwhGfFX8etziU2lbrIboU=
Subject key identifier: 35:57:D2:C3:79:3F:15:CF:86:2E:3A:2D:8C:B7:35:B7:38:91:44:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0174FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB48350870F11F096A03EDADAE4EC9C.roa
Signing time: Mon 01 Sep 2025 08:42:41 +0000
ROA not before: Mon 01 Sep 2025 08:42:36 +0000
ROA not after: Sun 07 Sep 2025 08:42:36 +0000
asID: 132513
IP address blocks: 45.207.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95484 (0x174fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 08:42:36 2025 GMT
Not After : Sep 7 08:42:36 2025 GMT
Subject: CN=68b55c81-22dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:fe:bb:3a:79:8b:01:c8:ff:07:8b:72:7d:
22:60:f3:30:77:ed:ee:61:ff:cd:28:85:07:24:30:
7f:90:3b:71:2f:59:1d:9a:af:d5:d6:1e:76:3a:1d:
66:5d:56:0e:28:f3:c0:82:8e:70:42:64:0d:5c:38:
69:eb:92:38:1a:7e:2c:b7:1e:fa:c9:23:a3:b5:8b:
d1:2d:8f:90:b9:46:30:fd:c4:e2:23:f7:e4:4b:14:
05:74:0b:2e:73:73:f2:00:a8:0b:27:40:4e:77:af:
63:94:93:e2:83:a3:26:1c:d2:e9:38:bd:9c:12:45:
26:32:90:a7:e0:4b:7d:ea:9d:5a:fa:d4:20:77:54:
ed:61:29:56:be:08:b5:26:7a:76:fe:bc:11:30:14:
54:54:ee:eb:5b:b1:0d:9c:04:f5:03:32:74:07:33:
bb:fd:59:91:b3:2e:7a:61:06:37:18:61:6a:ec:62:
65:f8:49:3f:62:b5:86:25:dc:fd:fe:d8:93:0b:7f:
cb:86:cb:d3:4a:30:54:6a:57:50:0c:32:33:7e:10:
03:b0:54:5a:5b:b7:b9:23:ca:8a:c2:77:37:81:15:
bc:3e:44:92:6f:50:54:2d:92:3a:e7:30:28:d3:cd:
57:d2:2f:fa:fa:02:d2:4f:16:2c:7b:29:81:fa:b5:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:D2:C3:79:3F:15:CF:86:2E:3A:2D:8C:B7:35:B7:38:91:44:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EB48350870F11F096A03EDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a8:2b:98:c5:15:21:3e:af:39:45:8c:0c:9c:ac:28:17:9d:
7a:14:43:6b:94:32:39:8d:74:7a:c8:e0:8e:34:c4:3b:38:87:
00:7f:fa:29:04:3d:d2:43:1f:b7:c6:3a:55:3f:41:12:de:71:
53:1f:7e:37:22:31:56:ff:1c:90:36:a0:bc:d7:1c:22:e3:3d:
d8:94:a3:c7:eb:07:82:11:06:de:63:67:ed:37:f6:3b:4b:62:
d6:78:8e:ca:a5:9c:14:7c:da:6c:49:aa:cf:88:ba:18:e0:c5:
63:6a:e7:a0:c9:14:9e:6b:32:c3:1c:03:96:38:73:ed:e9:69:
67:50:c4:54:d2:01:4f:0e:bc:e9:af:16:eb:e9:d6:39:76:db:
77:39:c6:97:b8:64:ae:92:65:d2:7e:e4:07:8e:47:4e:32:67:
33:7a:11:12:80:b6:3a:cd:4e:03:08:14:c9:51:d3:50:8e:f0:
98:55:5c:77:15:ab:bf:ed:4f:f8:99:9f:eb:98:d9:1f:66:e1:
71:bf:22:9e:e0:19:cd:fb:fe:02:8a:b1:71:05:cc:83:92:15:
17:5d:fa:09:da:48:fc:ec:d6:cb:83:cc:76:56:f2:34:9e:18:
b2:e8:6c:03:0a:df:5e:63:ec:c6:ee:fa:8f:48:d4:cf:fd:ec:
e8:93:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 05:18:18 2025 by rpki-client