Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11EDA3D8729D11F0A1451BE8DAE4EC9C.roa
File: 11EDA3D8729D11F0A1451BE8DAE4EC9C.roa (raw, json)
Hash identifier: 7jB6RDcLKfTiB7K1jCtgugSvH6ZIIHZ2H64MwRLjfIM=
Subject key identifier: 49:41:73:D7:ED:78:16:E7:48:BB:D4:78:99:65:14:53:BD:E4:CB:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01693C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11EDA3D8729D11F0A1451BE8DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 08:12:19 +0000
ROA not before: Wed 06 Aug 2025 08:12:14 +0000
ROA not after: Fri 12 Sep 2025 08:12:14 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92476 (0x1693c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 08:12:14 2025 GMT
Not After : Sep 12 08:12:14 2025 GMT
Subject: CN=68930e63-7763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:9b:82:32:37:b4:b7:fe:ad:37:c7:86:03:
1a:aa:6f:9c:00:0f:a6:02:ef:33:e2:e3:55:c2:82:
bf:7b:b0:b6:48:26:95:fc:bd:ea:06:6a:cd:5c:47:
d3:c9:f5:d7:4f:fd:b4:ef:6d:96:20:b1:02:f7:fc:
e4:3a:74:95:c7:e1:c0:7f:05:46:5e:6f:7f:43:a0:
7a:b6:e2:2b:14:72:77:a1:33:da:43:64:f0:f6:1d:
27:b8:01:21:5c:51:a8:6f:99:b0:2d:ed:3f:34:bf:
94:14:b1:55:cd:c9:63:c1:eb:02:b1:48:7a:42:45:
93:4c:c5:a3:a7:97:1d:3a:79:f3:8a:a2:aa:97:d0:
f8:8d:e6:4e:e2:a4:ab:18:bd:19:bb:f8:e7:80:49:
78:de:85:5d:1c:54:f6:06:77:df:36:58:42:a0:79:
a6:a3:65:1a:b5:13:ef:70:0d:c0:4c:2e:74:a4:ad:
d8:00:65:a6:4f:cf:df:ef:a7:48:e8:9c:e1:78:d6:
85:4c:47:cf:c7:6b:e7:88:d8:ac:1c:40:d8:83:b0:
0b:9e:5c:78:8b:8f:2d:20:7b:6c:e8:b5:7d:52:7c:
44:12:9d:d5:35:f5:2b:36:08:47:ed:ed:45:9a:2c:
5f:de:09:1f:c5:b3:d3:54:98:98:49:43:d9:8c:85:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:73:D7:ED:78:16:E7:48:BB:D4:78:99:65:14:53:BD:E4:CB:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11EDA3D8729D11F0A1451BE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
62:21:02:5d:5b:5b:b2:6c:8e:f1:32:8b:c4:eb:13:64:e8:95:
b2:ce:4a:09:80:46:7e:90:c0:dd:f3:1e:94:95:03:4c:7b:04:
a9:2d:20:86:f4:9f:e2:ae:35:65:51:72:20:ce:ba:d5:13:01:
d8:4a:ef:f7:3e:f4:2a:29:84:e8:d0:05:cf:7c:06:23:f6:c0:
7e:9a:35:a8:5e:13:d7:6b:49:e3:06:f2:7b:0a:70:9b:21:70:
d5:da:ce:b8:a0:38:31:37:30:93:84:16:c7:ab:f5:1f:8a:20:
3b:ee:01:53:ab:db:3a:ec:f7:2f:49:4c:f1:89:1d:cb:f4:58:
4a:fb:b0:7c:0f:ce:2b:21:5e:ed:41:0d:fe:35:30:6d:a5:6c:
50:26:ac:4d:19:29:86:c8:9a:2d:e5:af:5d:51:d1:31:77:a7:
91:2e:94:c9:0f:e0:32:0b:c9:95:71:ca:b6:7e:0c:7b:11:57:
6d:9a:2f:d2:2d:a1:2e:79:9e:fa:c7:e7:c4:54:84:d6:47:0d:
64:17:ec:66:34:d2:15:cb:52:11:3c:7f:b3:59:3b:73:40:f2:
20:36:80:26:a2:da:36:0a:a9:66:61:fd:76:17:f4:ba:ef:c8:
8a:09:92:ac:48:df:9f:30:cc:86:01:ff:a2:4d:08:47:91:88:
87:0d:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:37 2025 by rpki-client