Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54F52E847CDF11F0962BDDCADAE4EC9C.roa
File: 54F52E847CDF11F0962BDDCADAE4EC9C.roa (raw, json)
Hash identifier: Iw/1MtBjXzW3vrmZPg5QiCqcI90ViUcyZFciTWh/nbY=
Subject key identifier: F5:53:5D:F3:32:92:A0:13:87:73:1D:13:06:CE:1C:28:39:DB:16:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016C10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54F52E847CDF11F0962BDDCADAE4EC9C.roa
Signing time: Tue 19 Aug 2025 09:31:50 +0000
ROA not before: Tue 19 Aug 2025 09:31:45 +0000
ROA not after: Sat 20 Sep 2025 09:31:45 +0000
asID: 401783
IP address blocks: 45.198.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93200 (0x16c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 09:31:45 2025 GMT
Not After : Sep 20 09:31:45 2025 GMT
Subject: CN=68a44486-f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:ee:4c:d3:9f:6f:24:53:7c:dd:52:a1:f5:
6b:6c:2c:32:b2:68:33:1c:fc:7d:25:99:07:e3:96:
3a:71:7c:9b:ec:3f:01:b2:2b:91:7d:9c:63:36:e5:
5c:1d:c2:a9:3f:81:cb:26:ac:4c:0f:e8:77:1c:65:
c6:b9:42:d7:b1:14:25:06:f5:29:05:d5:b2:3c:3f:
c4:c4:cc:32:49:65:3a:13:ee:ee:f2:75:42:dc:6c:
73:99:8f:a1:43:d7:77:92:b2:1e:a0:e7:31:03:df:
08:2b:33:40:ad:ce:da:7c:02:66:2a:81:3d:f5:41:
c8:14:e7:3d:86:3b:2d:f1:75:46:7b:20:e4:0a:8a:
e5:50:1e:8f:48:12:ac:c3:9e:30:23:81:21:32:1c:
1b:64:01:a9:86:a2:50:34:93:52:fe:61:48:c9:71:
60:7c:ff:16:aa:5c:9b:f9:db:f6:c7:17:f6:59:36:
38:1f:f7:cb:56:5f:b8:30:e4:33:94:2a:be:c3:9d:
67:1c:da:7c:e7:de:f1:d7:4b:f3:71:5a:aa:f2:ac:
29:02:44:d3:18:ec:68:8d:f2:51:f0:e5:32:19:5a:
e2:cf:bb:bf:23:76:a6:6d:8e:48:e2:c9:02:e0:e7:
6f:42:53:05:6c:e3:75:d8:c5:6b:84:3b:30:dc:57:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:5D:F3:32:92:A0:13:87:73:1D:13:06:CE:1C:28:39:DB:16:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54F52E847CDF11F0962BDDCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:51:5f:31:60:7d:5c:6a:c2:d5:ce:e0:7e:1a:fc:b3:b3:db:
4a:bb:b0:f1:80:dc:43:0f:27:f9:d8:2a:ea:36:a7:10:4c:2f:
71:25:87:e2:3b:d3:68:a7:4c:e0:ad:76:70:86:8f:29:f1:b7:
ee:5f:0c:1d:b9:aa:43:15:09:70:d7:08:f2:4c:43:b0:b6:fd:
77:76:73:76:8a:74:c5:22:c1:fc:15:3f:54:65:3f:02:b0:50:
3f:87:c7:f6:16:9b:d5:87:ec:f9:eb:ab:e4:f9:0a:ed:24:31:
45:60:66:ef:e9:48:4f:aa:0b:16:e8:84:6f:77:f1:ab:c5:1a:
c2:d1:c1:c5:5c:47:ab:0f:0f:91:5b:41:f0:8b:79:d4:7e:e6:
d3:64:72:c8:c6:de:a7:5f:8f:d3:86:03:79:f9:ea:e2:16:82:
39:73:0e:b3:41:16:65:55:19:90:69:a4:3a:0b:c4:3c:02:89:
ba:a6:f6:8e:78:1a:60:c9:2d:41:8c:16:ac:4c:54:cf:a9:f1:
21:1f:ad:b3:e9:ef:c1:26:1c:fa:6c:ca:38:0a:a8:7b:cb:eb:
eb:d4:f4:71:33:b4:34:a3:a5:80:0e:9b:a1:af:3e:36:ff:4a:
c0:d7:0e:57:67:18:5b:01:36:74:26:49:07:28:ff:88:95:9d:
1a:60:db:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:04:56 2025 by rpki-client