Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5435474072AD11F09FF626D3DAE4EC9C.roa
File: 5435474072AD11F09FF626D3DAE4EC9C.roa (raw, json)
Hash identifier: CjutwLaaOSWke85mR60v93cW2AwvGE2yDYU42N41qjo=
Subject key identifier: 24:35:DE:0C:46:4D:77:81:09:FA:2D:6B:AC:2A:B3:AA:11:37:6B:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016950
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5435474072AD11F09FF626D3DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 10:08:42 +0000
ROA not before: Wed 06 Aug 2025 10:08:36 +0000
ROA not after: Fri 12 Sep 2025 10:08:36 +0000
asID: 142032
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92496 (0x16950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 10:08:36 2025 GMT
Not After : Sep 12 10:08:36 2025 GMT
Subject: CN=689329aa-b5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:63:3c:93:ad:59:ce:97:89:0d:b0:39:36:
b1:a9:85:37:04:ee:f8:91:f6:6b:2a:dd:a3:cd:68:
9d:da:62:3c:25:d4:f4:55:ec:e6:22:08:cc:b8:1b:
28:6d:36:fb:45:23:17:b1:e6:cf:53:c8:5a:79:67:
b5:f0:fa:0e:b0:f7:f0:34:75:c5:bb:d4:f8:f0:3e:
ee:11:bb:73:60:87:54:7b:63:42:64:53:46:c4:23:
ea:ea:b8:77:93:14:39:cb:8e:40:9c:2f:6f:cf:4a:
90:52:50:ea:52:13:dd:02:9e:ac:86:15:9f:a4:ad:
55:d9:6d:81:c7:85:0d:81:78:3e:47:9a:3a:f8:42:
96:2c:90:2c:b9:50:48:bc:44:ce:86:c6:9f:1e:79:
03:dd:7a:6b:aa:b5:d4:07:96:ec:6d:93:6a:c7:1f:
13:5d:b6:75:d1:66:38:fa:00:25:4d:a8:dd:b0:7c:
19:7b:fe:2a:6b:63:e1:38:4c:45:03:25:f1:44:bd:
99:72:7d:60:b5:a2:f8:72:53:9f:e1:8a:12:ee:31:
c3:ee:4f:a3:04:a3:cd:2d:df:1d:03:96:76:c1:c0:
4e:aa:6e:dd:cb:85:81:76:29:4e:2b:c6:f9:e4:fa:
2a:50:fe:08:5b:af:83:d0:19:33:18:80:73:61:e4:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:DE:0C:46:4D:77:81:09:FA:2D:6B:AC:2A:B3:AA:11:37:6B:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5435474072AD11F09FF626D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
73:f0:5f:10:99:5b:d7:8d:03:d5:e2:bb:ad:f5:50:1e:ca:e6:
0d:c8:7d:db:d1:c5:d1:81:dc:b5:7d:0d:40:7a:76:11:22:6b:
a4:55:78:68:71:a0:41:08:11:59:ec:40:ce:2d:4a:ab:9e:fd:
4d:80:50:d9:f3:70:2c:80:cc:f3:12:3b:65:99:31:2e:89:3b:
50:26:c2:8d:a6:dc:35:38:a5:68:b0:8b:f7:be:df:0d:e3:9c:
e1:2b:e6:13:9f:e7:5d:c5:70:33:0c:60:fe:8f:1d:ba:b2:96:
0a:c0:8e:c1:8d:ff:56:f2:f2:f0:17:09:4e:0b:6a:4f:21:64:
e5:11:0a:47:99:39:55:6c:4d:82:7e:7e:b6:5d:e2:77:48:d9:
3f:bc:43:85:cf:83:e3:7b:eb:9c:a8:4b:27:76:2a:85:48:3e:
a9:91:5e:70:6c:14:58:7c:19:73:24:9e:b3:a2:fa:25:ac:f9:
99:c7:e4:31:5e:ad:7c:99:0d:51:b4:55:bc:9a:21:0d:65:78:
40:69:8c:9c:86:6a:9b:bc:89:b6:63:12:6c:56:4b:10:d7:0e:
c5:37:6e:fb:39:d3:16:31:67:3f:a4:4d:75:61:13:05:c3:0e:
4c:a1:ae:f5:a7:5d:24:45:75:68:be:9c:ec:b6:44:f3:70:60:
08:96:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:06:07 2025 by rpki-client