Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/154784BE7F1C11F0B682847FDAE4EC9C.roa
File: 154784BE7F1C11F0B682847FDAE4EC9C.roa (raw, json)
Hash identifier: oP7AM2a1XGsfVn//Z0UFl0CM0xZlv4XOf7ACLw3aT+4=
Subject key identifier: 7F:C9:75:E4:90:4B:AB:C3:36:76:D2:B0:F0:6F:F0:E4:2A:F2:08:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/154784BE7F1C11F0B682847FDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 05:51:44 +0000
ROA not before: Fri 22 Aug 2025 05:51:39 +0000
ROA not after: Fri 29 Aug 2025 05:51:39 +0000
asID: 134548
IP address blocks: 45.194.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93842 (0x16e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 05:51:39 2025 GMT
Not After : Aug 29 05:51:39 2025 GMT
Subject: CN=68a80570-f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:c2:68:c8:c4:84:47:d9:c7:74:3e:e4:56:
72:7a:1f:ce:a1:69:e3:54:43:55:3c:bb:d5:96:a9:
2b:11:38:01:cf:1f:9b:85:92:1c:c1:f8:b8:da:40:
8e:25:c4:a7:06:c1:55:59:c1:cf:97:03:49:41:ab:
da:bb:1b:8e:b1:e4:6d:d2:a0:d9:b6:68:dd:91:37:
c1:c5:a2:ae:07:e0:8e:1e:73:c7:89:24:ba:2c:e4:
13:17:39:b3:dd:49:20:9a:e2:f4:c8:ae:55:6c:51:
b6:31:13:12:6b:0c:a1:b4:49:13:b3:bf:07:d8:d9:
fe:82:a7:c9:a6:ed:b5:32:ad:a9:92:e3:0a:dd:4c:
ad:1d:61:96:29:5d:e1:b0:97:78:f2:53:86:55:e3:
6d:bd:e0:49:26:bb:22:b0:c6:62:f4:ec:99:cb:42:
17:94:5e:7e:ef:d3:82:5f:38:46:e5:89:6f:62:b7:
28:8c:0b:46:9c:ff:e5:49:4b:18:0a:c3:63:c8:f6:
88:b5:ab:ee:4d:25:23:97:20:ef:7b:82:d8:f1:b3:
3a:d1:bf:4a:87:01:84:a6:7d:7f:24:e4:61:09:fd:
3a:b3:ce:9e:64:e2:a7:cb:e0:42:ca:49:51:71:df:
58:91:f1:08:17:1b:ce:9a:55:21:8e:36:77:25:06:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:75:E4:90:4B:AB:C3:36:76:D2:B0:F0:6F:F0:E4:2A:F2:08:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/154784BE7F1C11F0B682847FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.128.0/17
Signature Algorithm: sha256WithRSAEncryption
61:c0:fe:2a:02:6e:f3:dd:55:03:f7:ad:21:22:ed:42:e4:13:
15:95:7a:0f:8e:3b:01:92:36:d4:45:b1:87:6e:92:76:eb:22:
41:83:35:73:06:3a:ad:b4:d8:f5:8a:db:e0:62:72:fc:ec:5f:
62:d4:08:62:16:04:39:6f:86:59:cc:7f:19:95:d9:21:68:8f:
e7:bf:e5:67:59:be:9a:9b:2b:8f:15:e8:c9:cb:b5:86:68:1f:
1e:54:8e:0c:fb:81:97:c9:d7:bd:23:72:ee:77:70:da:b2:99:
3d:92:13:9d:84:a8:50:00:1f:3f:a9:b6:bd:dd:df:11:bb:91:
0f:74:80:38:2e:29:52:8d:83:8f:5b:97:a6:29:d4:c2:4f:46:
1b:aa:90:96:cc:ab:b1:a9:a0:84:85:fd:b4:32:8e:25:84:d7:
af:d0:f7:a5:c9:60:c8:f9:4a:13:c9:e8:66:e2:83:b5:71:b5:
1d:9e:64:8b:2c:2a:36:e3:3b:c7:0b:98:43:98:e6:07:36:cb:
11:14:6c:a3:48:2a:8d:a0:9c:17:a7:00:30:f3:79:13:ad:7e:
b0:b6:17:80:40:61:8e:f8:be:c0:9a:a1:e9:9f:c1:31:4b:36:
2c:76:cd:b6:a0:12:e3:06:77:e7:b9:9a:69:fb:9a:c3:ba:47:
cb:26:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:25:06 2025 by rpki-client