Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/147405A878FF11F0BC9AF484DAE4EC9C.roa
File: 147405A878FF11F0BC9AF484DAE4EC9C.roa (raw, json)
Hash identifier: iT9NrRoS8rzHjdDO/f/idjG7ra7o2w+NXd1FQqMaL7g=
Subject key identifier: E0:D7:25:CB:9E:5F:F9:EA:6D:CA:D7:A6:FB:4F:FE:35:C5:52:3A:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/147405A878FF11F0BC9AF484DAE4EC9C.roa
Signing time: Thu 14 Aug 2025 11:09:01 +0000
ROA not before: Thu 14 Aug 2025 11:08:56 +0000
ROA not after: Sun 07 Sep 2025 11:08:56 +0000
asID: 54252
IP address blocks: 45.199.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92919 (0x16af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 11:08:56 2025 GMT
Not After : Sep 7 11:08:56 2025 GMT
Subject: CN=689dc3cd-4d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:62:e0:49:14:13:70:cd:aa:ac:65:a8:93:
f3:20:65:bf:09:20:b2:bb:1b:3e:64:44:1b:54:7c:
34:61:86:98:3b:64:42:7c:ff:10:f3:59:07:99:c4:
bf:3f:77:a0:d1:db:fc:0d:12:ee:f3:47:02:44:60:
2c:8f:a0:3c:44:e3:81:f7:fd:b7:af:9f:bb:94:2b:
09:bc:84:c2:cd:fa:7f:0f:76:b0:ad:4b:6d:1f:e2:
8b:52:a8:17:17:65:81:c3:01:61:1b:0e:12:2c:19:
5b:ea:7b:d6:b0:ec:1c:ff:a3:5d:95:c3:57:b0:96:
9f:06:04:1f:17:49:c1:0a:51:1b:72:c6:06:9d:f6:
65:87:a0:d9:aa:3d:6a:8a:49:c4:4e:04:5a:64:79:
5b:43:c3:0b:e5:9b:8c:79:a2:7a:a8:7d:15:11:09:
d3:65:25:e1:0c:c8:94:97:b5:ed:2a:db:bc:ae:95:
d4:62:11:60:b3:9f:96:1f:f6:1b:31:f8:42:35:70:
84:7d:b6:8a:ba:d7:36:97:5e:fd:2c:f4:05:ed:ba:
86:5a:31:b2:9c:a3:71:ae:b5:90:af:7a:9e:d4:b8:
ec:dc:39:96:20:c5:02:81:16:2a:30:dd:45:1e:c9:
f1:fa:13:48:15:d0:6f:c2:bb:05:6b:d6:38:bd:36:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:25:CB:9E:5F:F9:EA:6D:CA:D7:A6:FB:4F:FE:35:C5:52:3A:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/147405A878FF11F0BC9AF484DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:02:5d:ac:54:d5:d8:89:d3:a6:74:78:b6:0a:a1:a9:60:d2:
ca:f5:9d:9e:40:97:51:58:e8:6d:97:ee:fd:5d:98:c5:e0:1c:
b7:59:5a:bf:8f:e1:d4:3a:98:86:2a:9f:8f:f1:38:0f:e2:b6:
24:ad:bd:ed:26:43:ea:c4:59:26:cb:c3:26:2b:db:41:fc:95:
79:e3:89:07:38:2f:d4:29:b6:e9:67:1f:ae:3b:df:78:b5:74:
c5:f4:74:11:38:b8:c7:3f:18:76:e6:ed:70:f6:87:ed:03:2f:
9c:94:32:f0:6f:9f:e7:63:f2:e3:dc:82:35:6f:f3:87:9c:37:
56:d3:41:c9:23:80:81:af:f7:78:67:d4:ae:69:ce:cc:6f:68:
39:4b:b7:6b:bd:ec:20:7b:44:ad:7a:71:ec:f0:53:6f:ba:e2:
33:cd:82:fe:60:4b:a8:3f:a1:bb:4f:0c:1e:e5:5c:57:8c:a5:
38:d3:da:70:dc:f8:d6:b6:6f:ef:c2:a8:67:ba:4d:d0:c6:ec:
4b:13:a7:ca:da:1b:38:1b:58:c1:36:01:97:5e:8d:3d:36:9e:
a1:c8:a0:d9:6e:52:cd:73:e7:7f:25:59:c0:02:c8:a9:7a:f5:
25:b4:2d:16:01:fc:88:78:3b:a4:d3:d3:60:05:99:5c:07:97:
5f:1f:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:34:43 2025 by rpki-client