Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE28A68833C11F08D5BC3DFDAE4EC9C.roa
File: CDE28A68833C11F08D5BC3DFDAE4EC9C.roa (raw, json)
Hash identifier: izOfRO6Rw7fj77DMgaQ7n2G0ZupTOSo/AlS9r9H3fK0=
Subject key identifier: D3:EA:5D:3D:46:AC:2F:41:07:63:92:13:94:32:FA:BF:7C:3E:38:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE28A68833C11F08D5BC3DFDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:56:03 +0000
ROA not before: Wed 27 Aug 2025 11:55:58 +0000
ROA not after: Sat 04 Oct 2025 11:55:58 +0000
asID: 401783
IP address blocks: 45.192.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94641 (0x171b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 11:55:58 2025 GMT
Not After : Oct 4 11:55:58 2025 GMT
Subject: CN=68aef253-fea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:45:6d:59:94:df:0a:47:a7:78:a8:15:36:
f5:3e:9c:4b:79:40:33:ef:da:c4:89:f2:35:b0:81:
bd:5d:c5:51:96:1e:7a:1c:cb:67:d3:6e:7c:a1:d0:
dc:d1:bf:f7:76:53:16:9b:7a:ca:65:6c:3b:ed:4c:
21:cb:ef:65:9b:3e:5c:39:27:c8:0f:7f:50:db:68:
73:4a:93:0f:b1:0e:37:06:30:ac:d1:94:a2:4b:be:
d4:51:2c:93:0a:1e:6b:e3:9e:38:6c:7c:b8:42:26:
f6:7a:f0:8a:ce:2c:68:51:b3:18:ec:62:d8:95:1f:
db:82:f0:cc:4d:5e:ee:e5:a3:0f:5d:93:8d:b7:ad:
b0:6b:bf:9b:04:16:97:24:da:a0:6c:4c:b6:5e:2d:
93:47:9e:c0:8c:02:94:c3:97:94:2c:f1:a9:62:79:
19:8e:aa:d4:75:01:d5:16:02:d1:38:a8:fc:11:a3:
88:2b:41:cc:8b:e1:20:12:d5:de:f9:ec:bd:a8:97:
96:ac:72:44:5b:dc:7f:5c:5b:18:7a:49:1b:c9:d3:
ed:6b:95:dd:18:15:10:fe:9f:fb:f1:bb:11:2f:75:
35:16:f6:80:18:e2:4e:56:bf:58:b5:72:32:b6:9d:
f7:22:e5:84:83:0c:0e:c4:d5:25:47:17:f3:ba:58:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:5D:3D:46:AC:2F:41:07:63:92:13:94:32:FA:BF:7C:3E:38:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE28A68833C11F08D5BC3DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.235.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fb:02:f5:d9:99:70:e3:01:6d:73:6d:2f:31:bd:75:d8:c7:
cb:5a:31:41:07:5f:b6:a0:be:3d:6d:ee:05:07:17:21:fa:3b:
a5:0e:6d:5b:23:7d:0a:71:46:0e:fa:90:f3:59:75:08:62:a7:
c6:a8:71:7c:bb:c1:7e:1f:54:b1:14:cd:29:58:3f:4a:c1:4c:
66:6f:77:1a:4e:02:be:d6:ef:2b:1a:a6:e6:a6:0a:dd:4f:bb:
f7:6e:13:d2:3e:8b:f6:63:21:77:48:d9:d9:aa:6f:5e:f8:ac:
ad:90:93:8e:83:cc:54:e7:a5:4d:91:a5:c0:5b:e7:f5:e5:d5:
c8:e3:d0:06:ed:86:64:6a:29:03:ba:6c:65:ce:12:c4:72:38:
13:0e:39:05:b4:3f:39:cc:42:fa:63:b1:91:1d:c7:20:2b:7c:
7c:3e:25:50:9c:9a:3e:2d:b6:88:72:9c:a7:15:80:a6:73:61:
ab:5a:6d:fd:8d:44:c7:90:42:5e:fc:5e:2b:80:73:36:80:29:
9d:ed:ad:69:02:54:c5:3c:b2:63:92:25:f9:72:21:3f:fd:34:
38:94:a1:e7:1c:e5:39:e0:7d:83:3c:59:fc:7b:63:3c:59:a3:
cd:8d:74:13:2f:81:ec:5b:aa:37:18:c8:c9:79:71:6d:df:e9:
23:ac:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:09 2025 by rpki-client