Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F9E0A07CE011F0837BA6D0DAE4EC9C.roa
File: 30F9E0A07CE011F0837BA6D0DAE4EC9C.roa (raw, json)
Hash identifier: cCupM0TK00dvwRriUEuM/l3j1X86B0uN3fx9+/QcUCA=
Subject key identifier: 54:1E:C6:AA:B4:CC:8E:66:F7:45:CE:E5:5C:19:A7:11:6E:3E:46:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016C12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F9E0A07CE011F0837BA6D0DAE4EC9C.roa
Signing time: Tue 19 Aug 2025 09:37:59 +0000
ROA not before: Tue 19 Aug 2025 09:37:54 +0000
ROA not after: Tue 25 Nov 2025 09:37:54 +0000
asID: 395839
IP address blocks: 45.202.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93202 (0x16c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 09:37:54 2025 GMT
Not After : Nov 25 09:37:54 2025 GMT
Subject: CN=68a445f7-2b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:90:a3:c9:27:ca:72:b7:22:06:b9:90:25:
19:fc:2a:94:2e:a5:93:7b:cf:8b:2d:f1:ec:a0:50:
31:f9:06:ca:84:3f:1a:34:64:ea:13:02:7b:d3:a8:
f8:ee:52:70:36:3e:6e:dc:d3:ca:10:6a:26:95:5b:
e9:47:0a:37:8c:0f:2d:d3:72:da:43:ee:45:85:6d:
c8:e8:8f:e0:23:2f:ee:33:fb:ec:41:ab:29:b2:39:
9a:af:aa:67:8a:fe:c6:23:7b:33:18:e8:3b:48:5c:
b5:1d:82:0b:21:c1:f1:a8:5d:e9:8f:eb:96:73:1b:
23:4a:46:30:a1:62:1c:5c:6a:e4:90:f5:dc:05:0b:
b8:ca:4a:83:cf:39:dd:6a:8f:05:57:2d:83:74:ab:
8c:48:f3:8c:d4:60:82:bd:2f:3d:59:8b:fc:4e:c6:
74:04:82:db:91:1e:88:e1:37:f1:20:c9:d6:b8:32:
25:2d:e2:91:5a:6d:e8:98:c9:01:53:8c:42:b0:05:
16:e3:41:cb:40:f0:ad:7f:98:d9:6b:c3:57:09:11:
f2:f5:c9:f1:ca:fb:c3:24:83:f7:35:b3:6c:2a:22:
67:5d:e9:e1:25:6f:b5:c9:a9:08:d9:ab:e4:14:8c:
64:49:a3:71:ee:76:f5:67:15:a4:91:e1:a1:99:f4:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:C6:AA:B4:CC:8E:66:F7:45:CE:E5:5C:19:A7:11:6E:3E:46:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F9E0A07CE011F0837BA6D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7e:3e:01:61:11:98:7a:f2:00:51:57:7d:ef:b3:e5:26:f3:
ac:4e:83:57:65:2c:a7:be:9f:ae:72:df:6c:c3:7a:e0:15:80:
20:5c:37:b3:2e:9d:70:f5:3d:cf:a7:5d:0e:ee:96:e5:9f:b6:
53:85:33:0a:dd:81:63:0f:6a:bb:da:cc:34:67:8a:a6:38:54:
95:61:d6:7a:ee:12:41:fe:0e:46:56:fc:91:2c:97:9f:d5:fa:
5e:05:21:ba:68:56:d6:cb:11:31:ad:52:ae:f1:27:f3:77:16:
71:a2:b0:d8:33:04:9b:52:e8:61:b3:b2:2e:1a:85:6a:8e:fa:
4f:e9:57:3f:73:42:3c:5e:c9:24:ed:f8:9d:50:aa:28:66:65:
82:bb:0a:f6:03:52:f4:7a:23:bd:94:fa:40:a9:07:c9:2c:b9:
5a:e6:ce:55:ab:2a:a4:79:e7:dc:e1:8e:b5:be:70:9e:4b:9a:
6b:92:9d:95:19:7c:5f:7f:33:93:0b:25:4d:64:9b:cf:a4:21:
f5:59:a5:26:66:0c:82:6f:66:b1:d7:a6:4d:f2:08:fb:4a:7d:
b5:17:78:91:58:92:25:cf:98:01:cd:2b:07:09:61:66:39:7b:
9d:45:31:25:da:b7:b1:75:36:8d:ad:ce:b2:75:50:5e:e7:15:
01:54:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:31:04 2025 by rpki-client