Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03DE0C447C1E11F0B5FEAEDCDAE4EC9C.roa
File: 03DE0C447C1E11F0B5FEAEDCDAE4EC9C.roa (raw, json)
Hash identifier: 1U/iyjxkcV957sjUlM0Tru4IwE/3eBlR4678aP7VC1A=
Subject key identifier: F8:4C:B3:83:D8:A6:20:E4:62:3E:37:B9:45:8F:CD:16:02:28:5F:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03DE0C447C1E11F0B5FEAEDCDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 10:28:01 +0000
ROA not before: Mon 18 Aug 2025 10:27:56 +0000
ROA not after: Thu 25 Sep 2025 10:27:56 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93141 (0x16bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 10:27:56 2025 GMT
Not After : Sep 25 10:27:56 2025 GMT
Subject: CN=68a30031-158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6a:28:fe:f8:3d:d1:e9:97:71:71:41:41:05:
7d:a1:75:47:41:f6:3c:7e:61:2c:1b:0c:d1:f1:32:
99:7c:a8:23:82:aa:ee:91:a3:72:68:1d:66:c8:ae:
b6:2b:0d:04:f6:67:ea:85:d5:50:b9:fe:76:05:30:
c2:fa:0c:81:99:11:60:99:62:6f:8c:11:42:e5:0d:
1e:58:47:71:76:49:24:09:8a:fe:45:ed:58:00:0e:
94:da:ab:39:e8:29:69:23:52:88:ce:c4:dc:aa:24:
1b:ad:36:7c:ab:1b:a3:29:d5:00:b7:0a:7e:7d:c6:
7b:dd:4d:52:63:2b:9a:51:3a:26:db:de:d4:c1:2f:
ec:1f:ca:46:3d:ec:de:49:03:76:32:02:a7:45:5c:
4f:6c:17:bb:b7:f4:08:ac:e0:ab:74:36:4b:55:ce:
09:ec:a0:b3:5a:8f:f5:f5:d3:a2:99:d9:79:41:22:
0e:6b:9c:c7:21:87:06:47:b0:46:5d:b2:d1:92:05:
53:e4:57:9c:42:bf:7e:e8:f5:d8:0b:2e:13:48:0c:
20:af:50:38:55:13:ae:37:59:8c:ae:c7:e4:0b:80:
05:71:ac:00:90:3b:c3:b4:11:2f:b6:32:a8:b9:e7:
c1:46:b3:a8:ff:d7:91:4b:d7:84:c7:8c:bf:ab:d6:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:B3:83:D8:A6:20:E4:62:3E:37:B9:45:8F:CD:16:02:28:5F:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03DE0C447C1E11F0B5FEAEDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
2f:71:cb:9a:6d:51:6a:a4:9b:fe:4c:ca:67:b3:51:d5:42:8c:
cb:dd:aa:63:56:8b:e5:dc:c4:e0:7f:fe:b6:84:c8:51:cf:2a:
0c:26:40:46:8c:db:29:21:ce:96:b2:6d:ab:61:55:cf:8c:64:
02:b2:4d:13:71:e6:03:d8:c0:8e:d3:f0:d4:b2:ec:91:a2:7c:
de:50:78:e9:04:1d:a3:33:3b:09:a0:a1:92:47:2d:5e:66:8e:
f8:2a:a1:c8:76:35:c9:23:a6:07:82:bd:e0:c7:00:82:d2:f6:
2c:a3:32:b2:17:19:4d:6a:a4:5c:df:bf:d4:77:04:9b:0e:4c:
ec:ff:1d:b1:68:0d:32:25:7a:c0:fd:ea:8d:74:6a:f6:e0:6c:
17:a6:af:52:fb:7a:82:70:ff:d7:d5:12:44:12:31:6e:c9:58:
27:02:79:6f:d5:ca:9d:f8:0c:77:a5:46:f2:8c:55:59:5d:df:
1c:e0:f0:60:08:a2:1a:94:b7:32:6f:1e:35:49:4d:18:47:dd:
58:55:50:1a:43:df:13:73:3f:ef:76:ba:02:a1:43:e3:bf:05:
f3:08:3f:86:bf:81:5b:7f:b5:04:8c:79:63:53:d2:34:17:7b:
fa:73:e0:71:47:64:a2:6a:b3:5a:f9:d4:5e:1b:0e:68:2e:94:
33:a3:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:30:46 2025 by rpki-client