Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/259BD33679D311F09D9AB1E5DAE4EC9C.roa
File: 259BD33679D311F09D9AB1E5DAE4EC9C.roa (raw, json)
Hash identifier: ID7Nk4SBN0Fjg8xeCqmLoW28SHPn4gOF7fx+aJWXaxI=
Subject key identifier: D0:8C:05:62:D5:58:20:AB:22:1E:31:D4:A5:58:E8:C7:39:53:A2:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/259BD33679D311F09D9AB1E5DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 12:27:03 +0000
ROA not before: Fri 15 Aug 2025 12:26:55 +0000
ROA not after: Sat 27 Sep 2025 12:26:55 +0000
asID: 20326
IP address blocks: 45.206.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93006 (0x16b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 12:26:55 2025 GMT
Not After : Sep 27 12:26:55 2025 GMT
Subject: CN=689f2797-0242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:87:15:a7:bb:ca:21:4d:b7:5d:87:84:92:
4d:71:26:b5:c5:4c:72:e8:2d:22:07:3c:b8:d8:6f:
b9:2d:59:b7:01:a6:95:84:af:08:61:48:3b:62:61:
77:82:e8:f1:d5:b7:ce:a6:ca:78:c3:9d:f2:25:00:
fe:74:66:ec:15:eb:82:14:f0:17:d2:bb:62:a3:a9:
90:9b:43:3d:45:a4:21:36:75:2d:0d:46:50:b4:92:
6d:ec:f1:a1:33:f5:7e:5d:b9:d0:61:23:fe:d5:1c:
41:ea:12:3f:ad:16:ac:51:2c:e7:ff:8a:f4:aa:ec:
5f:f3:34:5f:42:3c:94:d0:e6:b6:45:fb:fd:e5:40:
33:12:3e:6f:98:ad:63:96:72:25:b1:6e:b1:96:d7:
fc:3e:ed:49:11:d4:f5:03:3c:17:f6:76:0c:eb:6a:
3e:bc:f9:e5:a5:58:47:ac:40:0b:29:51:0e:42:23:
70:87:02:ba:ed:0e:b9:36:fa:dc:78:52:b7:ed:10:
b8:b3:d7:af:90:ae:1e:69:05:42:93:15:7e:86:29:
78:41:92:3f:df:bc:10:aa:95:b3:86:4b:f1:9f:44:
69:fd:92:76:92:4a:bd:32:dc:3c:1f:4e:78:de:a0:
eb:1f:28:7e:d5:a7:f9:a9:eb:24:2a:b5:8a:7d:cf:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:05:62:D5:58:20:AB:22:1E:31:D4:A5:58:E8:C7:39:53:A2:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/259BD33679D311F09D9AB1E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:c8:f3:28:57:cb:89:7b:0b:4b:91:a4:52:1b:be:05:25:f1:
b6:03:c7:44:12:ec:e5:a4:25:38:04:ec:fa:34:7a:b1:7d:f1:
e7:19:02:5d:17:3b:51:b3:56:da:78:0a:83:28:91:5e:e7:41:
58:1d:9c:d5:8d:75:6e:72:34:39:bd:15:2f:62:45:4f:c8:eb:
e8:0e:0a:80:a2:c6:58:81:02:0c:f0:fb:9a:f9:7b:55:74:09:
60:74:46:78:db:ba:63:80:31:aa:e0:6f:31:9d:a5:85:4f:78:
fc:b6:d3:39:c2:c1:98:ed:c4:8d:22:ab:43:b6:22:64:0f:e1:
13:95:f6:e4:3d:7f:7f:9f:73:22:71:a3:73:9b:e7:2f:5b:1c:
4e:ac:4e:69:4f:77:25:99:0e:8b:bd:6c:3f:82:d4:7d:5e:25:
33:7d:54:1d:f0:b0:47:f8:ed:e6:14:bb:c4:e8:59:58:4d:53:
43:bd:af:c8:d6:f7:2d:2b:df:cd:ac:72:70:92:c0:0b:fa:ae:
d7:61:db:96:cd:fa:75:08:9c:f9:b5:7c:07:2e:15:29:a9:43:
f0:fa:08:78:db:46:14:2a:b1:28:4f:96:77:d2:a9:7a:2a:5a:
71:6c:47:f8:a0:33:9b:a4:73:e2:8b:f7:68:61:a8:4f:7d:c5:
ae:03:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:24:43 2025 by rpki-client