Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D7071A84AD11F0A22D3FD3DAE4EC9C.roa
File: D3D7071A84AD11F0A22D3FD3DAE4EC9C.roa (raw, json)
Hash identifier: M/kHAEZ3goMxIDWubxbyFR7bbNf7rHOJ+7jtchBww1o=
Subject key identifier: 0F:E1:C5:3B:7A:07:D4:51:8D:FF:B4:68:47:82:73:49:59:33:5C:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017311
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D7071A84AD11F0A22D3FD3DAE4EC9C.roa
Signing time: Fri 29 Aug 2025 07:57:37 +0000
ROA not before: Fri 29 Aug 2025 07:57:32 +0000
ROA not after: Sun 05 Oct 2025 07:57:32 +0000
asID: 20326
IP address blocks: 45.202.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94993 (0x17311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 29 07:57:32 2025 GMT
Not After : Oct 5 07:57:32 2025 GMT
Subject: CN=68b15d71-f004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:c1:e5:bc:b4:7f:9e:3e:62:3f:98:f6:aa:
83:57:9a:0d:9d:79:86:ff:5f:27:c8:00:6e:94:a6:
43:40:41:5e:d6:a7:4e:ea:6f:77:80:8b:5e:f0:fa:
4e:6b:07:45:ea:cc:ad:50:44:17:fa:32:81:73:59:
ff:11:82:5b:25:18:04:5c:f3:cb:85:dd:c7:d2:3d:
35:ea:0f:72:ab:30:00:c8:b6:76:6f:fc:b5:48:a5:
9c:49:2d:1c:f3:8f:cf:d4:17:2c:ff:0d:55:9a:50:
fb:8f:cf:4c:d0:55:c5:1e:58:fb:f8:fa:5f:5b:cf:
ae:b1:0f:dd:eb:f4:82:cb:3c:ff:a0:d1:c7:e9:ff:
18:c4:71:87:b0:1f:3a:5e:40:b5:17:e2:02:89:60:
60:2f:cc:cc:d4:e1:89:e1:d2:a1:a9:57:67:6b:fa:
84:94:71:2f:5b:8d:72:f8:07:96:62:63:9f:77:f4:
7d:5f:18:b6:f7:86:32:e4:2e:eb:29:78:09:6b:c6:
77:96:e5:80:4c:3b:cf:51:93:66:2b:61:d6:78:d8:
1f:fd:aa:2c:9d:85:8a:68:3a:73:38:7b:77:f3:b4:
bc:c0:bd:cb:7c:82:30:55:b2:3d:86:7c:15:0f:a7:
6e:de:37:7f:f1:a1:16:31:5e:5d:12:fc:77:61:8a:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:C5:3B:7A:07:D4:51:8D:FF:B4:68:47:82:73:49:59:33:5C:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D7071A84AD11F0A22D3FD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.89.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8c:31:24:4f:04:d4:02:e7:e8:0f:93:3f:29:b5:93:fb:fb:
23:55:44:0c:bb:30:aa:e9:72:f3:ac:5c:ce:93:52:fb:9d:bc:
72:c3:cd:21:1e:6b:6d:2f:cc:0a:8c:95:bc:f6:08:81:68:93:
9e:0e:70:fe:89:80:db:2b:86:45:93:89:10:d2:ad:5c:90:80:
e9:6d:ef:bb:eb:7e:7a:3e:c9:e7:5a:a6:3b:32:38:ab:b0:6e:
d7:11:0f:6c:0c:07:70:8b:8d:5e:8e:ea:08:24:d7:cf:5c:a2:
2a:77:a1:d2:b4:f2:0d:8c:1d:96:90:03:c7:5e:68:f6:83:a7:
2a:0a:74:b2:0a:ca:f0:de:94:47:0d:9b:75:92:47:9a:5f:76:
c9:77:04:b5:d4:c7:5c:f5:e0:cc:09:5f:e2:20:0c:8d:a7:39:
43:c9:16:e7:50:02:67:1c:a9:62:ae:fe:49:8e:6a:9f:59:5d:
b9:2d:f0:2f:0e:65:9b:ce:41:2b:cf:d7:51:7b:21:fb:96:48:
27:5f:69:07:ba:4c:d3:68:01:21:95:e3:97:17:5f:61:18:99:
b0:b3:f3:ac:77:69:44:06:dd:ee:52:a3:a5:e2:c1:03:19:3a:
e2:23:52:8b:d4:2d:77:22:56:b4:40:33:c9:a1:b4:aa:f6:25:
0e:68:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:02 2025 by rpki-client