Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03C6E852737711F080C0CFF2DAE4EC9C.roa
File: 03C6E852737711F080C0CFF2DAE4EC9C.roa (raw, json)
Hash identifier: 5WYq7EbZn7m5Z95xPbbF1W4BEIMGRappfGgt1EjSgWE=
Subject key identifier: 87:6F:A0:03:5C:4C:51:70:C9:7B:C9:35:6E:74:10:1A:B1:CD:71:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03C6E852737711F080C0CFF2DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 10:12:25 +0000
ROA not before: Thu 07 Aug 2025 10:12:21 +0000
ROA not after: Fri 12 Sep 2025 10:12:21 +0000
asID: 53808
IP address blocks: 45.207.216.0/24 maxlen: 24
45.207.217.0/24 maxlen: 24
45.207.218.0/23 maxlen: 24
45.207.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92581 (0x169a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 7 10:12:21 2025 GMT
Not After : Sep 12 10:12:21 2025 GMT
Subject: CN=68947c09-4f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:74:73:2d:60:7b:80:26:a0:8b:8f:c0:8a:
2d:bb:a9:6b:7a:85:22:93:8c:63:69:5f:3c:16:2f:
d1:d1:bd:79:ac:e7:73:34:0c:c4:ca:cd:69:e3:7c:
51:30:f0:53:60:74:86:3d:40:fe:31:e2:b1:37:25:
16:44:aa:69:96:e3:fd:5d:85:11:68:2c:02:58:0e:
ad:61:47:df:21:d4:3a:3f:ce:b1:81:72:98:d0:c7:
31:69:88:8b:9b:d3:51:c5:f4:41:d3:82:6a:17:39:
36:75:c6:05:12:94:5b:16:87:41:61:c3:cc:89:c1:
57:a5:a3:fc:33:a7:ff:5a:3b:d9:ee:ad:8a:bb:70:
64:69:41:66:67:5e:67:8a:c3:7b:a5:86:9b:f3:81:
f7:20:4f:f1:1d:b1:4d:48:79:7e:31:78:d3:34:e5:
b0:65:14:fe:e5:a3:43:d1:0e:d1:53:2f:5e:d3:5a:
29:3c:08:91:43:23:be:66:89:e4:fa:94:4a:4e:53:
23:8e:b2:4f:83:f5:7a:59:2f:fb:97:07:c6:49:8a:
6b:84:e2:d5:20:ce:cb:c4:bb:97:2a:d4:82:17:1c:
2e:cd:cd:fb:a7:28:58:38:9c:51:0f:e0:92:40:4d:
40:fe:bf:38:1c:e6:bc:41:69:3c:42:52:cb:53:4c:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:A0:03:5C:4C:51:70:C9:7B:C9:35:6E:74:10:1A:B1:CD:71:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03C6E852737711F080C0CFF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:27:ba:f9:ed:3d:be:38:f0:94:82:69:70:1e:08:a6:96:bd:
09:24:8f:68:57:33:dd:33:53:90:52:00:22:42:70:56:13:59:
ca:61:0e:0b:41:93:fd:38:b5:d8:5d:c1:32:2e:23:2f:2a:e0:
64:cb:97:7d:61:5f:e2:88:89:91:24:65:e1:c5:df:45:d4:08:
30:36:ba:b7:f9:22:af:8d:a9:7d:4d:f8:b7:96:68:3b:4a:60:
c6:58:39:32:f4:7d:15:91:f8:cf:b2:c6:76:a9:92:4b:36:f0:
f1:80:f1:57:ee:2e:0e:c0:c9:6e:3d:4c:cb:8b:16:cf:ba:44:
b5:92:42:76:81:b3:fc:3a:0f:3d:f8:05:93:02:5d:b4:d5:a6:
ce:fa:6c:13:e2:01:df:15:2f:54:0f:0a:c3:c6:15:4f:e7:46:
22:ef:b8:41:8b:4e:f3:1b:46:dd:5d:9b:2b:fb:bc:12:14:03:
43:ab:dc:bd:07:75:96:8e:27:9a:d4:ca:9f:d1:59:32:3c:29:
f3:e5:7b:dd:76:98:3a:96:91:00:0d:10:39:07:39:e1:ea:32:
a9:a9:08:80:84:bc:ec:d0:cf:b6:81:bc:49:7f:96:47:65:8f:
f2:62:62:cc:61:fc:48:4a:43:9b:a4:11:69:49:1d:c4:7e:3f:
5c:48:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:30 2025 by rpki-client