Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2887B5F871DE11F086DF428EDAE4EC9C.roa
File: 2887B5F871DE11F086DF428EDAE4EC9C.roa (raw, json)
Hash identifier: SQxVVOzXe3hEoCd7HYL99EinUsrxKT/+OGyblRLcX74=
Subject key identifier: 7E:7A:FC:9F:9F:27:26:79:4F:55:01:E7:D8:6A:E6:49:41:D6:07:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01692F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2887B5F871DE11F086DF428EDAE4EC9C.roa
Signing time: Tue 05 Aug 2025 09:25:43 +0000
ROA not before: Tue 05 Aug 2025 09:25:38 +0000
ROA not after: Sun 31 Aug 2025 09:25:38 +0000
asID: 56286
IP address blocks: 45.197.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92463 (0x1692f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 5 09:25:38 2025 GMT
Not After : Aug 31 09:25:38 2025 GMT
Subject: CN=6891ce17-6b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:d8:8c:77:22:85:55:e8:65:1f:37:83:ec:
12:55:2a:81:5b:3f:6d:b2:1b:31:9b:4f:fd:41:cd:
af:b8:a0:25:7c:41:2c:b8:d6:bf:7f:4b:e1:83:2d:
38:f1:53:99:5f:88:ef:a3:83:1d:fe:90:a7:99:20:
50:4a:a6:5c:c8:d4:ef:8b:d9:3f:56:00:bc:53:60:
8d:6d:80:4b:1c:d7:1f:e9:6b:14:99:33:71:40:a6:
d5:16:b0:68:0f:dd:b2:05:0c:38:a7:85:d3:f9:31:
82:86:28:67:d8:f8:15:46:4c:d0:72:84:b5:e4:85:
54:e8:9a:a7:e4:f1:06:9b:d3:69:86:34:de:30:5f:
de:ca:03:52:c4:03:c2:41:5f:78:2d:d6:76:56:7e:
bd:06:ec:64:52:b2:2f:18:ce:30:c3:57:2b:cf:bc:
39:e3:7d:28:9a:e2:bc:f3:0a:9f:42:fa:34:45:64:
10:94:9b:04:7d:0b:08:fe:ce:19:b4:fc:0a:8c:07:
cc:88:89:9d:2e:3f:96:94:f7:c1:15:db:7d:76:34:
0d:86:10:49:37:97:44:c2:3c:3d:a0:92:e1:77:93:
a0:55:2e:82:18:71:1f:ba:ff:12:c9:b1:e8:8b:72:
83:ef:cd:2c:a9:88:f7:15:a8:aa:d9:91:0c:32:5b:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:FC:9F:9F:27:26:79:4F:55:01:E7:D8:6A:E6:49:41:D6:07:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2887B5F871DE11F086DF428EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.0.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b1:87:e9:b8:11:de:da:d9:61:ca:41:2e:d9:4b:98:e2:6c:
ad:34:44:dd:47:e1:42:01:3b:8d:e1:73:ff:3b:82:66:45:d5:
8b:94:1f:84:94:38:7f:a2:40:0e:78:24:93:de:ba:5e:c2:63:
12:47:1f:88:0c:90:0f:60:5f:5e:73:ab:e2:29:91:17:74:5f:
28:d7:17:96:4a:e8:e1:8d:f6:2d:1c:e6:f9:19:ee:08:d3:da:
3b:cb:41:16:bd:c9:cf:ed:4d:02:89:89:6e:c9:c9:b8:a2:c7:
52:8b:c6:b9:06:18:72:64:17:b0:6b:60:f0:71:f7:d0:cf:8c:
b4:fc:11:86:b4:9d:17:98:0b:21:b3:35:2e:df:e8:66:9b:20:
b1:3c:1a:ab:bc:4a:e4:3f:64:23:fd:0f:7c:5c:e1:a7:16:46:
c3:66:de:c3:8f:24:5c:e3:44:fb:ba:2b:da:5e:65:1e:59:c0:
5a:0c:de:fd:e3:bb:f7:c7:bc:18:15:d6:6e:cb:9c:ff:b1:71:
ce:9e:8e:10:77:86:59:98:9f:50:11:71:13:df:f5:a3:a6:6d:
1f:76:4c:28:7b:68:32:b2:3d:5d:a8:ce:56:8d:d5:97:8c:82:
f5:1e:3e:a2:7f:5b:c4:fe:59:f2:2f:16:34:8e:9c:f2:7a:6e:
c0:a7:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:12 2025 by rpki-client