Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33FD7536780911F09A637BC5DAE4EC9C.roa
File: 33FD7536780911F09A637BC5DAE4EC9C.roa (raw, json)
Hash identifier: NdwuSjQ9S63dHajbOmk7OicSHAeEp/KnOfarLwwkbpU=
Subject key identifier: 2D:C8:2A:6D:36:75:89:7F:90:5A:47:41:B2:A2:EB:D4:72:4E:93:87
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 05D1
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33FD7536780911F09A637BC5DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 05:48:57 +0000
ROA not before: Wed 13 Aug 2025 05:48:53 +0000
ROA not after: Tue 10 Feb 2026 05:48:53 +0000
asID: 401838
IP address blocks: 45.221.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Aug 13 05:48:53 2025 GMT
Not After : Feb 10 05:48:53 2026 GMT
Subject: CN=689c2749-b4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:03:6d:ec:17:ad:2f:4c:d7:29:b2:64:32:
7a:12:99:9d:f0:78:e2:96:7c:17:50:aa:b7:43:29:
13:9b:1c:5e:ed:84:7d:e5:e6:ce:83:62:b5:a5:46:
ef:8e:b6:8d:ac:55:b0:c5:21:01:ed:56:73:3f:74:
fc:74:ac:d7:bb:ef:8f:73:11:72:c1:e6:b9:a1:81:
27:e8:d4:ad:9e:70:cb:7b:41:9c:01:fc:47:78:77:
46:35:ac:09:1f:0e:4b:d6:60:33:32:31:c2:ce:b9:
e4:36:54:3f:5b:32:78:90:49:d1:ea:34:00:b5:c9:
96:c0:20:35:23:c9:73:83:eb:56:03:16:c2:2f:8e:
c2:b6:af:56:f7:72:1a:bb:32:87:b2:1a:8a:56:a1:
6a:4b:1a:65:8c:b4:5e:1b:38:03:af:27:c7:5d:1b:
9b:8f:99:1a:2d:58:44:70:9b:5f:90:c2:19:63:8e:
d2:66:4e:83:60:21:d5:84:04:85:86:d6:dd:a8:d8:
43:1d:09:0e:72:a6:e6:c7:34:86:29:9f:00:5e:64:
f1:99:74:fa:c1:cb:93:06:95:48:44:53:79:d0:47:
e1:44:f6:34:52:e8:d8:93:f6:81:cb:5a:f6:76:d1:
53:49:64:19:1c:c0:43:ef:29:91:57:1c:92:a8:ac:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:2A:6D:36:75:89:7F:90:5A:47:41:B2:A2:EB:D4:72:4E:93:87
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33FD7536780911F09A637BC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.69.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b8:e5:6e:e2:e9:c3:00:41:ad:18:7b:18:a6:ad:b4:54:55:
f1:4e:ac:24:ce:4c:ee:d7:b9:de:95:3a:2f:9a:aa:ca:dd:95:
1a:a5:1d:5e:0b:4b:98:dc:28:5a:e7:fb:90:cc:e2:e2:48:76:
68:0f:03:55:8f:56:65:28:3b:80:c2:fe:19:13:54:20:47:bd:
0c:fe:5a:5a:11:f4:8e:5c:f6:da:ea:d6:b8:fd:a1:98:3f:fd:
0c:37:0a:39:bc:94:d0:4b:fe:df:e1:1c:78:6c:3d:dd:04:3b:
c0:b6:af:a8:ed:4d:90:07:98:80:97:37:fb:d5:07:17:0a:d5:
69:93:80:86:b8:3a:2d:fa:48:4a:d9:18:cb:6f:70:6a:18:78:
94:67:d5:81:db:ac:63:0b:90:07:75:c8:56:5b:4c:94:cc:fc:
13:6e:71:31:84:60:63:4b:4c:29:cc:ce:5e:5f:30:a0:74:6c:
16:62:19:06:0f:fb:68:a1:a2:22:8e:6d:33:3e:5b:ae:30:29:
6e:ec:5a:b7:ac:92:4e:1e:01:46:08:e7:2a:86:01:86:22:a1:
33:82:ed:c6:d5:cd:3e:d7:6b:88:05:d0:a7:bb:ba:15:9b:3a:
93:d3:cd:97:9f:16:77:ab:37:a9:70:b5:8b:a4:2c:5a:0c:4b:
e4:4c:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:50 2025 by rpki-client