Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD4AAA3E7C2E11F090683FC7DAE4EC9C.roa
File: AD4AAA3E7C2E11F090683FC7DAE4EC9C.roa (raw, json)
Hash identifier: zghY2l6yVIihdZifrBtFOA7hBUeNmFmfbE+sg4cEqL4=
Subject key identifier: 36:FA:60:DE:A8:37:F1:E9:6C:42:7E:19:4D:8B:D6:EA:CE:D5:EA:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD4AAA3E7C2E11F090683FC7DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 12:27:17 +0000
ROA not before: Mon 18 Aug 2025 12:27:09 +0000
ROA not after: Tue 16 Sep 2025 12:27:09 +0000
asID: 27951
IP address blocks: 45.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93168 (0x16bf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 12:27:09 2025 GMT
Not After : Sep 16 12:27:09 2025 GMT
Subject: CN=68a31c25-b5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:76:a1:9a:c5:52:8e:43:3a:73:13:15:8e:
ee:49:1a:e5:a4:3b:dd:65:19:75:09:55:d1:7d:a6:
64:fc:f9:b4:02:61:21:66:a2:5e:e7:d2:b1:ec:d7:
c7:5b:ed:8a:d3:1e:2c:97:2c:4a:b9:ec:57:a7:70:
37:3b:86:8b:50:dc:94:38:4a:7e:73:30:7a:4f:89:
45:56:8f:16:5a:22:59:41:55:5e:60:b0:cd:92:b9:
71:c9:04:4a:a6:48:6c:3d:3b:c4:3d:07:5e:ca:d6:
1d:17:de:bf:72:f2:5d:51:ec:b2:c7:0c:0e:6e:81:
3b:f3:e7:96:b5:28:24:05:61:52:c2:f9:ac:02:94:
d1:13:0f:7d:51:14:fd:28:69:d2:00:35:ce:61:21:
8f:28:4e:20:63:40:8b:f1:ab:27:76:66:17:12:52:
93:81:99:2b:1f:09:4d:6d:98:ef:3c:74:03:ab:16:
ee:e7:d3:5f:b1:69:5c:85:49:7a:c7:47:98:72:d4:
59:c9:55:ca:ff:e8:50:71:c3:4e:18:a1:2c:30:0e:
20:a5:56:6e:27:9b:97:c3:b6:82:48:11:83:c3:76:
86:75:eb:c0:45:88:5a:00:f6:ac:06:c3:4e:65:ff:
48:a2:b7:a5:13:7e:d5:48:12:27:43:26:e8:40:e8:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:60:DE:A8:37:F1:E9:6C:42:7E:19:4D:8B:D6:EA:CE:D5:EA:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD4AAA3E7C2E11F090683FC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.91.0/24
Signature Algorithm: sha256WithRSAEncryption
89:34:f6:68:af:56:75:cb:a1:4b:3d:75:ee:54:10:f5:66:08:
45:38:6a:da:15:c9:0d:b9:3a:b4:c8:2d:ec:32:5b:90:5b:2a:
37:3d:6e:64:18:a3:05:c2:90:be:13:5d:57:3a:4c:bd:0e:9b:
17:39:6c:70:8d:33:e6:d6:92:01:1a:57:31:2a:45:30:97:8f:
e0:7e:c3:ae:ad:39:7b:62:b6:f1:37:ed:99:39:f7:90:49:bf:
0f:e5:a9:b4:0d:1a:47:b9:23:27:25:ac:88:19:cd:b2:29:f5:
9a:9a:25:75:39:90:46:65:84:30:52:c0:55:88:15:94:9c:94:
b9:3b:2b:b7:f0:ea:96:11:f5:8c:26:6e:b7:45:d1:2a:5f:10:
05:7c:99:41:45:4d:16:a3:2b:ae:2f:72:0c:24:99:6b:8d:b7:
22:59:2b:7d:47:7e:51:8f:e3:77:b5:9e:80:d3:0e:95:cc:83:
b6:ba:39:2f:21:45:bd:e4:35:4a:5e:70:94:92:1c:3f:d8:8d:
2b:ce:62:e0:94:ee:f8:1a:4a:48:ce:5e:c2:28:d6:c4:e0:52:
72:58:c4:de:4b:19:14:b6:d3:6f:f3:17:e9:c4:88:9c:37:83:
22:50:e1:8a:0d:e1:c8:ca:62:14:63:27:62:cd:e0:91:e9:e3:
2e:b2:9f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:19:33 2025 by rpki-client