Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5537D5687CDA11F09A08FCABDAE4EC9C.roa
File: 5537D5687CDA11F09A08FCABDAE4EC9C.roa (raw, json)
Hash identifier: gymOsn8JHy4L/rKy20B5mGWqJMOBietmztqqM/sdr64=
Subject key identifier: 9A:6B:FD:1D:F9:F5:AE:E4:38:3A:11:2F:C2:3E:2C:78:A3:28:A3:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016C00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5537D5687CDA11F09A08FCABDAE4EC9C.roa
Signing time: Tue 19 Aug 2025 08:56:03 +0000
ROA not before: Tue 19 Aug 2025 08:55:58 +0000
ROA not after: Sat 20 Sep 2025 08:55:58 +0000
asID: 214413
IP address blocks: 45.194.87.0/24 maxlen: 24
45.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93184 (0x16c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 08:55:58 2025 GMT
Not After : Sep 20 08:55:58 2025 GMT
Subject: CN=68a43c23-fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:0b:3c:0c:ac:4a:91:b1:44:fc:d5:71:c9:
94:aa:de:ac:a0:4b:3c:65:d6:4a:5b:c6:e3:85:c5:
a1:5d:7f:83:5c:e6:ca:34:78:a3:ea:64:2a:0a:5e:
ec:e1:5a:3f:6c:9e:17:33:4f:e4:68:6b:d6:fa:ca:
28:82:12:b4:02:89:5f:fd:29:83:fb:a7:0f:fb:43:
c0:a8:37:c4:0a:29:5b:1f:10:dc:65:97:c9:e8:e7:
b0:45:2f:fc:0c:91:ad:d6:b5:bf:64:33:a2:a4:3a:
58:e6:ce:04:a5:14:d5:55:9a:c0:2a:4f:78:24:92:
16:85:2e:67:e0:1f:86:f7:e5:04:35:6e:df:ba:1d:
02:f1:e1:e6:59:e2:ae:16:c0:61:2b:81:b7:d2:81:
76:12:eb:e4:4f:ea:97:54:cd:d2:1a:c2:f1:60:52:
41:e8:ef:b4:19:17:b5:91:4b:1e:96:cc:69:7d:80:
dc:39:32:7c:b2:1a:02:ab:ce:70:ee:07:69:dd:40:
25:f8:9f:5f:42:31:d2:3c:c7:2e:59:3d:90:e5:25:
8e:bd:cc:97:30:54:56:7e:9e:be:98:68:50:a9:79:
64:2a:01:6f:51:e4:3f:45:9e:f7:26:a3:58:e7:32:
df:82:7d:34:44:76:8d:40:67:eb:b6:53:f4:3d:0a:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:FD:1D:F9:F5:AE:E4:38:3A:11:2F:C2:3E:2C:78:A3:28:A3:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5537D5687CDA11F09A08FCABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.87.0/24
45.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f7:10:a8:8b:1f:8d:91:0b:cc:28:10:ed:d8:c8:b6:e1:5f:
67:b9:9f:38:e8:ce:ee:24:b8:f7:ef:b6:3f:5b:42:4d:62:e5:
fd:ce:0a:b3:2e:0e:b4:a1:48:78:1d:b8:58:4f:a0:d0:93:35:
ff:89:21:f7:9e:75:a3:81:11:25:74:f7:9e:e9:65:17:04:a8:
ba:dd:fc:2a:f7:e5:d3:2b:90:f4:3a:f1:3b:26:c6:f9:81:2e:
c1:b4:b3:51:f4:3c:12:67:8d:33:93:71:ff:e5:e7:f3:63:53:
dd:1e:e0:1e:5a:c3:c6:10:7b:08:4a:e4:0b:b2:6c:34:75:2f:
1e:6f:4d:26:b6:51:79:f3:45:3e:6e:d2:88:63:57:ce:e7:31:
8e:f9:43:49:9f:ae:1f:5b:07:89:68:8c:86:10:b1:1f:38:c0:
21:7e:35:f8:37:ca:e2:d0:0d:42:cf:cb:27:64:bc:4e:c0:4c:
56:81:46:f3:7e:79:93:3a:8d:cc:c4:e8:a2:0c:9a:ae:32:3a:
32:94:de:ed:e8:74:3e:42:36:2a:60:71:9c:64:24:52:22:1f:
b9:92:65:36:b7:f6:f7:64:c9:ff:40:54:12:72:75:c6:20:ab:
07:53:27:4e:6b:28:f7:90:e9:64:55:71:9b:b3:76:d4:77:20:
42:69:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:58 2025 by rpki-client