Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A4A1E6843211F083B215A8DAE4EC9C.roa
File: C0A4A1E6843211F083B215A8DAE4EC9C.roa (raw, json)
Hash identifier: xhdOmDAXMPpV5x6jj4WhG8SGLukUkg22BHFiiHcRBJ8=
Subject key identifier: 51:12:3E:45:81:C0:B7:00:66:03:6D:83:7E:63:E9:BF:50:04:D8:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A4A1E6843211F083B215A8DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 17:16:37 +0000
ROA not before: Thu 28 Aug 2025 17:16:32 +0000
ROA not after: Sun 30 Aug 2026 17:16:32 +0000
asID: 13335
IP address blocks: 45.192.222.0/24 maxlen: 24
45.192.223.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94930 (0x172d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 17:16:32 2025 GMT
Not After : Aug 30 17:16:32 2026 GMT
Subject: CN=68b08ef5-ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:77:9f:47:7c:e8:fe:8a:6c:6d:75:3b:11:
35:94:28:d4:57:99:cc:0c:95:77:f7:c6:bb:c3:87:
6d:89:f2:2e:df:15:d3:c3:ca:0a:0d:de:1e:01:69:
38:8a:4c:66:9c:b6:31:78:86:10:e7:d8:04:d5:ad:
98:17:cf:b8:7c:b8:73:bc:ac:42:c8:be:67:88:04:
c8:0c:69:35:45:8d:c7:0f:d0:25:c5:75:b1:b3:57:
d8:b5:e7:27:7d:8f:66:39:7d:aa:10:31:4f:76:3f:
0f:81:dd:a4:74:89:d1:75:1d:32:94:e5:69:22:f4:
c4:42:5d:53:05:b6:cb:79:16:cb:a2:a7:91:e0:b2:
0b:76:40:11:66:fa:5e:5f:b3:30:cf:df:e0:40:c5:
71:89:48:44:29:5f:4a:16:f0:84:c8:f2:d9:ab:7d:
0a:74:6e:73:73:44:74:79:2a:cf:eb:21:e8:9e:42:
a8:7e:8b:69:7e:b4:2e:3d:0c:b8:d5:54:23:33:1a:
f8:a0:4f:7a:bc:b5:95:a2:87:ea:65:72:dc:90:bf:
44:71:1c:93:6f:45:79:bb:77:ee:74:31:6f:93:bf:
c4:a8:aa:60:14:d0:ed:62:e6:b5:18:61:ec:dd:e3:
2a:1b:b6:98:ff:13:b5:1c:b7:78:78:58:73:20:74:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:12:3E:45:81:C0:B7:00:66:03:6D:83:7E:63:E9:BF:50:04:D8:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A4A1E6843211F083B215A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.222.0-45.192.224.255
Signature Algorithm: sha256WithRSAEncryption
ab:fe:65:7e:66:42:da:0f:89:db:d5:b4:f6:8a:b5:84:20:69:
a5:54:8e:7a:15:ad:23:73:58:c5:2f:20:4b:b3:2c:a4:34:d9:
d1:31:e7:12:0b:d5:5b:18:e2:e6:1c:26:f6:40:9e:50:d7:6c:
17:27:09:0c:b7:fc:a1:dd:43:f8:04:73:fd:13:7d:a3:45:99:
f8:a6:2e:c2:47:e8:f3:eb:be:8c:5a:ac:a9:3b:a5:84:e0:bc:
43:00:61:c6:fa:1e:6c:6f:33:71:f8:3c:00:76:48:72:83:df:
e0:25:68:f6:57:50:e2:56:85:eb:d8:97:8f:df:52:18:9e:1a:
39:b9:cc:c1:40:54:35:01:3b:d3:bd:34:fe:0d:1a:29:05:a8:
8c:a4:dc:5b:1d:10:0c:18:6a:56:8b:6e:0f:5a:c6:01:34:df:
3e:dd:df:95:7b:bc:8d:11:ae:e5:03:6f:89:f7:88:33:d9:04:
c4:fd:dd:1f:e9:88:c6:4a:e4:61:7e:2c:44:58:45:82:d9:88:
75:73:62:9a:7a:94:6a:2f:57:29:b6:48:5e:44:ea:b4:4b:d8:
fc:37:67:bd:87:dc:f0:74:f3:45:0d:4d:d2:37:76:b8:05:5a:
ee:23:f7:30:b4:ec:ad:06:80:27:c1:97:63:2a:65:a4:f5:5a:
82:62:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:52:09 2025 by rpki-client