Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56850126920F11F0BE7542EBDAE4EC9C.roa
File: 56850126920F11F0BE7542EBDAE4EC9C.roa (raw, json)
Hash identifier: iOewhUOT9Mih0Z9Y/rtt9L1h5Fvvo4fEgrLkcN6MIQM=
Subject key identifier: 6C:38:C5:D7:C3:5F:8A:60:73:7F:62:0E:C0:07:9A:22:60:62:EB:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56850126920F11F0BE7542EBDAE4EC9C.roa
Signing time: Mon 15 Sep 2025 08:38:22 +0000
ROA not before: Mon 15 Sep 2025 08:38:16 +0000
ROA not after: Wed 22 Oct 2025 08:38:16 +0000
asID: 9009
IP address blocks: 45.206.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97083 (0x17b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:38:16 2025 GMT
Not After : Oct 22 08:38:16 2025 GMT
Subject: CN=68c7d07e-62e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:83:e2:af:07:5f:f0:32:02:6e:47:ca:2c:
7b:89:eb:ad:b5:59:ed:70:5f:58:5e:9b:40:a4:3e:
18:34:9d:16:96:35:ee:84:3c:0d:a2:79:ef:c8:b9:
a2:6d:27:f5:09:16:13:b1:96:2f:ce:c5:93:00:f0:
f4:b6:fd:bb:b5:6e:f5:62:b2:3d:aa:e2:f2:5f:0b:
1f:c3:f6:4e:c0:bc:45:07:83:38:dd:63:13:73:7f:
54:16:09:d6:57:64:c1:65:de:f1:88:d0:af:a0:19:
fe:b8:87:59:54:79:96:80:01:77:ff:68:5d:49:a4:
09:c2:a7:63:43:26:04:f6:83:18:db:86:52:6a:73:
18:5d:8b:48:59:43:a3:78:23:df:83:5e:01:86:e4:
ef:ee:ff:97:34:42:83:da:66:bc:41:66:c5:7d:7d:
4d:78:2e:05:8a:ce:70:80:2d:63:59:e1:24:a2:d1:
29:59:dc:cf:f5:e3:d1:f7:31:31:0d:07:ba:d0:fc:
59:0f:6b:44:f1:0b:8d:da:e2:d4:b8:ef:c5:9d:4e:
bd:f1:ae:25:2b:0e:ad:be:db:1f:9a:b3:c4:4c:22:
02:66:40:eb:58:0a:c5:ec:33:98:2d:3a:a8:c2:82:
f6:ee:68:d5:3f:9e:ea:93:2d:fb:12:69:0f:3f:b4:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:C5:D7:C3:5F:8A:60:73:7F:62:0E:C0:07:9A:22:60:62:EB:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56850126920F11F0BE7542EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c3:66:8f:e2:12:ea:5b:af:11:ed:93:52:ef:4f:c7:76:73:
fd:33:36:64:35:d0:0a:82:7a:a1:4b:57:eb:80:6c:db:02:1e:
5a:bf:fc:cc:8d:17:cc:e3:26:b8:f8:a8:77:c9:8e:9f:81:2b:
0a:c6:3a:8f:bb:fc:2f:8b:4a:8b:d6:07:65:e3:17:80:c3:71:
c9:76:ed:ca:88:3c:c0:ad:8f:c2:d4:ea:ca:3d:6e:68:d1:af:
e2:54:d7:41:4b:1e:e3:3b:86:03:4a:8e:b7:56:0a:2e:e5:7f:
35:62:a1:bb:81:e2:12:0b:de:56:30:5e:df:46:2f:92:8c:3b:
32:04:2f:f9:51:16:46:a0:8f:c9:dc:e8:93:e1:c5:c5:e4:e8:
a5:a1:f9:51:c8:65:8d:7a:21:04:8b:f3:24:30:3d:2e:a3:5b:
44:a8:a7:7e:1d:1b:57:46:c8:f6:f8:3b:0b:0c:85:94:a1:4c:
7d:64:07:3d:44:37:76:ed:66:e4:33:c9:76:8d:85:04:71:16:
d9:08:bc:54:b0:70:1a:38:97:f4:f4:a6:e5:6b:db:52:b9:78:
c9:df:11:a0:aa:b4:87:d0:25:22:a4:e9:af:6f:8b:8a:1e:bd:
e0:70:83:db:1f:14:6c:97:7f:f1:1f:e5:b4:5c:8e:4f:c1:47:
72:8d:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:06 2025 by rpki-client