Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8C1FE368CE011F086FDE39DDAE4EC9C.roa
File: B8C1FE368CE011F086FDE39DDAE4EC9C.roa (raw, json)
Hash identifier: awvSSkmmp1aqnZ4PovRDTchnIBMC2fDQ+siL2TUFUjQ=
Subject key identifier: D6:86:97:12:AE:85:2F:B4:F8:6D:34:1B:4E:71:A4:C5:5B:6B:7E:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0179E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8C1FE368CE011F086FDE39DDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 18:22:05 +0000
ROA not before: Mon 08 Sep 2025 18:21:57 +0000
ROA not after: Mon 01 May 2028 18:21:57 +0000
asID: 17561
IP address blocks: 45.202.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96737 (0x179e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 18:21:57 2025 GMT
Not After : May 1 18:21:57 2028 GMT
Subject: CN=68bf1ecd-bae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:9a:8f:f7:6a:4d:cd:7b:a2:b8:8e:af:a4:
f4:f8:ed:7d:1c:b8:6c:24:26:a8:3d:e2:99:32:08:
dd:d7:53:08:c1:ba:76:f8:f2:a6:fb:a3:2d:e6:a0:
cd:f8:0b:64:89:fe:19:42:b3:57:b6:f4:a6:24:9b:
e1:cb:3c:61:0f:fd:97:0a:2b:7f:66:31:7d:d1:1e:
fe:9c:de:04:9d:f0:81:d6:6f:be:ba:eb:2e:9b:d8:
5c:38:1b:71:87:94:4d:c6:dc:da:04:1a:2f:3a:2c:
db:b6:32:48:6d:27:c9:9d:c1:38:b6:29:70:44:35:
95:d5:07:5e:dd:df:d2:27:c5:b7:cd:bf:9d:60:f9:
85:02:4f:e2:3a:20:7f:2d:d7:ad:7b:5b:94:f5:b8:
cd:51:88:c4:3f:b9:01:ee:dd:f0:50:d9:ca:e8:7a:
4f:da:61:d7:9b:aa:7d:c9:f2:4c:12:93:54:3f:9a:
1e:0c:5c:70:b0:d5:54:a0:4e:e0:fd:d1:d3:1f:6e:
a4:79:99:f1:53:06:ba:6e:de:e5:01:10:d3:e5:08:
d0:17:21:10:ea:da:c0:c8:54:f9:d4:ab:f8:18:b4:
74:ff:34:6f:87:65:1d:64:52:2e:22:f0:6c:bf:3c:
9c:9d:59:09:98:3d:c1:9d:0a:76:f2:6c:f9:6e:e8:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:97:12:AE:85:2F:B4:F8:6D:34:1B:4E:71:A4:C5:5B:6B:7E:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8C1FE368CE011F086FDE39DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a8:dc:aa:a7:e7:03:80:b5:5b:e2:0b:d9:51:b1:52:b6:35:
25:9d:52:85:9f:7b:97:61:50:f4:64:5c:bc:9e:c7:df:e8:fc:
43:c7:68:98:9b:f8:b9:06:1a:aa:b7:40:5e:34:da:9e:d4:24:
1f:a4:4c:39:a2:9d:9f:91:b8:ae:a7:8a:e8:b6:bb:ed:bc:0c:
42:79:7b:e8:ce:18:28:33:7d:1b:2d:f1:18:cd:26:ae:f0:4a:
30:35:87:c1:0d:18:d7:3d:60:a4:48:34:60:66:95:a0:f9:a2:
cf:2a:53:eb:ef:f4:f3:f7:de:10:a9:cc:1f:50:d5:a4:e7:8a:
86:a7:17:22:1b:81:de:55:9d:b3:35:db:53:ad:e5:58:05:84:
53:df:8a:c2:29:bd:f5:e9:c4:8f:34:27:37:3d:12:62:1f:75:
68:99:9c:78:03:0d:db:37:57:6e:cc:f5:0c:d4:92:a5:94:62:
78:8d:34:77:70:3b:3e:f8:77:6e:f7:99:12:88:ca:71:4b:69:
1e:25:92:92:00:a0:ee:6a:23:9f:60:c3:2f:d5:6c:65:14:a3:
a4:34:5e:ab:22:08:4c:98:ea:10:c3:5f:19:e8:36:5b:74:f2:
e8:38:76:3e:05:37:5f:ba:02:50:57:e5:74:50:ec:33:62:84:
6a:fa:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:02 2025 by rpki-client