Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B277CBCA841E11F084729BA6DAE4EC9C.roa
File: B277CBCA841E11F084729BA6DAE4EC9C.roa (raw, json)
Hash identifier: Y3Jr9Nfx3Du4hHiO9b0rlWrnVe3PWdxl1yJW+uskmE8=
Subject key identifier: 43:61:01:E4:B0:40:87:6C:F3:32:02:1C:16:95:59:22:67:50:3B:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B277CBCA841E11F084729BA6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 14:53:03 +0000
ROA not before: Thu 28 Aug 2025 14:52:58 +0000
ROA not after: Wed 01 Oct 2025 14:52:58 +0000
asID: 202656
IP address blocks: 45.195.208.0/24 maxlen: 24
45.195.209.0/24 maxlen: 24
45.199.135.0/24 maxlen: 24
45.199.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94900 (0x172b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 14:52:58 2025 GMT
Not After : Oct 1 14:52:58 2025 GMT
Subject: CN=68b06d4f-13e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:83:48:c2:94:fa:8b:8a:fd:ef:92:8d:13:
42:e1:42:28:ea:48:30:81:ce:56:c1:19:72:a4:e0:
b9:9a:93:6e:fa:c3:df:1f:a9:6c:6a:87:69:8c:4c:
fb:6d:f7:83:3d:ca:6e:95:b3:aa:1c:07:8a:cf:3a:
b2:41:9f:b5:e9:2d:da:cd:96:e9:49:73:f0:b1:93:
08:61:35:d6:70:b8:d5:f5:9b:4d:07:a2:a6:72:07:
1e:06:29:69:40:7f:78:a8:49:09:5a:0f:2c:75:98:
b9:2c:fc:e0:8d:d9:12:19:64:f7:2e:17:ce:fc:61:
40:86:f1:aa:bd:4a:fb:c8:f0:0d:24:fe:bd:ee:24:
b1:5e:d2:69:2f:29:fd:c6:32:57:07:17:35:ec:6c:
95:88:e3:f3:fd:66:6a:33:2f:98:f0:d9:03:5f:66:
9e:69:9e:3e:24:30:2a:eb:5a:cd:22:43:17:14:b6:
34:56:1a:74:58:34:b5:93:90:3a:74:7c:4e:48:2e:
9c:18:e6:d5:6b:61:9b:a8:eb:5a:9c:21:c9:a4:1a:
3a:cc:b8:d4:03:4e:58:03:da:ea:f0:20:25:c1:4a:
c8:19:e1:81:e3:7c:45:11:d1:ee:1e:c6:99:04:19:
d9:c9:7c:95:38:f9:fc:29:c1:ef:0d:5b:da:1d:11:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:01:E4:B0:40:87:6C:F3:32:02:1C:16:95:59:22:67:50:3B:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B277CBCA841E11F084729BA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.208.0/23
45.199.135.0-45.199.136.255
Signature Algorithm: sha256WithRSAEncryption
28:31:d2:bc:3d:d4:6a:31:90:a3:d2:a3:aa:a8:0c:ff:fb:18:
8e:e3:d9:82:d8:7e:79:83:81:aa:1f:c7:56:72:90:3d:3b:cc:
3a:3f:f4:2c:89:4f:dc:b5:da:17:98:45:00:d3:c6:77:49:9b:
03:dc:01:78:b5:8b:05:d8:87:9c:21:37:fb:f2:ce:f6:78:a8:
5b:aa:d7:4e:ba:73:35:b2:17:37:86:c4:48:b7:99:04:52:ce:
3b:9a:09:8f:55:26:cc:86:fd:2c:a0:d4:6b:e1:ea:4a:9c:6d:
96:9f:82:01:dc:8c:9b:78:8c:62:f2:6f:ef:18:37:a6:03:8e:
ef:ea:56:9c:90:4e:f7:1b:1f:7a:29:e4:cf:85:f0:93:66:44:
f8:88:df:14:18:cb:e0:26:14:7f:d9:7f:df:32:b7:97:f3:6d:
8f:00:4b:a9:e6:2a:74:0a:3b:b6:21:d5:ff:53:c9:e0:67:87:
cb:b7:4a:c9:16:5d:0c:07:40:49:7e:e9:07:62:46:1b:c7:8b:
55:21:98:c0:7d:f9:7b:01:52:b6:9f:87:83:8d:14:74:38:47:
d3:3b:24:92:a1:9c:60:ad:29:a4:cc:7c:2e:3b:bc:7d:db:a5:
a6:87:9b:b2:89:f7:25:2a:97:7f:a2:7c:f6:88:a7:08:64:4e:
0f:d7:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:11:07 2025 by rpki-client