Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86168BE804711F08D8D54A3DAE4EC9C.roa
File: B86168BE804711F08D8D54A3DAE4EC9C.roa (raw, json)
Hash identifier: o7Mv8ylvjeNDEHvC2ZiCMuikedBUKz3u/XjHG0/T/zA=
Subject key identifier: 5A:CA:1D:3B:A9:92:D2:78:E9:63:76:19:43:D6:FD:0A:E3:06:8B:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86168BE804711F08D8D54A3DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 17:36:38 +0000
ROA not before: Sat 23 Aug 2025 17:36:33 +0000
ROA not after: Tue 30 Sep 2025 17:36:33 +0000
asID: 9304
IP address blocks: 45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
45.204.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94015 (0x16f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 17:36:33 2025 GMT
Not After : Sep 30 17:36:33 2025 GMT
Subject: CN=68a9fc26-acf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:a8:1b:3e:dc:36:e7:e6:20:84:5f:77:2e:
85:c9:c1:b3:52:2e:e7:c8:35:be:3b:14:85:3d:a4:
b0:6a:ed:de:24:fc:87:a8:da:03:72:ba:12:2b:88:
0b:20:30:55:d9:1e:9f:6e:dd:65:f9:cd:a3:1a:40:
f5:19:81:42:b8:68:9f:19:b7:67:3a:fa:f6:84:fb:
ad:63:fc:02:f2:f3:bf:5b:43:95:75:8c:1f:69:14:
89:9d:55:97:65:c2:d5:0d:11:1f:2d:56:a5:11:1a:
35:e9:05:fa:49:0b:e2:34:7c:2f:3b:90:a4:63:a6:
22:fc:81:4d:92:13:e9:08:64:f8:9c:c0:75:97:8f:
cd:63:19:73:e1:0e:6e:75:97:be:39:97:1b:94:c3:
49:8c:5a:f3:bb:89:81:70:54:15:7e:b2:e4:0f:9a:
c6:50:ca:dc:66:e0:e8:1d:b5:71:fd:b9:00:50:4a:
22:d7:da:9e:80:0b:82:bd:43:30:c4:6a:fe:ef:56:
6a:14:b4:9a:48:86:10:9e:89:f7:cb:6f:05:9d:45:
81:57:14:32:60:58:44:99:16:9c:71:90:35:39:92:
74:36:d7:de:ed:a3:67:14:95:d0:d2:21:d8:f4:da:
1b:0e:4f:7d:27:5a:fb:b6:09:94:39:92:7c:03:d7:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CA:1D:3B:A9:92:D2:78:E9:63:76:19:43:D6:FD:0A:E3:06:8B:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86168BE804711F08D8D54A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
45.204.132.0/24
Signature Algorithm: sha256WithRSAEncryption
46:45:cc:e6:ef:04:e6:d8:3a:be:6e:b9:45:7e:41:f8:ea:8f:
0c:c8:bd:81:f3:4d:b9:14:a4:db:0e:1a:32:13:55:81:16:51:
43:d4:04:3e:e4:33:92:ed:cb:6b:c8:ca:5b:a4:da:55:6e:a0:
c5:3a:1e:af:86:3c:a7:69:98:89:d7:4b:94:64:f7:9f:a8:43:
3b:42:f9:42:95:08:f8:52:e1:e7:b6:7c:a8:d3:59:cb:0a:19:
70:df:12:d0:1d:fb:b0:d4:e5:b7:c1:1f:01:cb:7c:c0:68:17:
bb:04:e7:d3:88:03:69:9d:7c:c4:3e:c1:bb:b9:bf:8f:6d:52:
d0:20:1a:db:3b:c6:2d:b6:95:39:5f:7d:93:6d:75:ee:f7:7e:
b2:d2:67:c7:de:d2:c7:2e:15:2d:1d:78:1c:17:ff:bc:a6:1b:
e8:c7:41:ee:0a:23:ad:9c:14:62:2a:de:68:83:6d:0e:5d:42:
ef:83:02:8e:a3:0f:5d:f5:11:b1:d4:56:3b:49:67:a8:9e:7a:
f3:77:8a:77:46:91:f2:00:4d:aa:8b:49:8c:97:a7:df:7e:4f:
67:9a:a5:6c:ce:96:dc:5a:e1:23:ea:5e:a1:ac:8b:bf:cc:90:
b7:84:34:24:3b:82:84:eb:58:76:dc:fc:eb:7c:4f:ab:d1:1f:
40:06:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:51 2025 by rpki-client