Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/653B7D18752B11F0A1369F8BDAE4EC9C.roa
File: 653B7D18752B11F0A1369F8BDAE4EC9C.roa (raw, json)
Hash identifier: VKCA5bBGFFa/3ao718FClFRGLJU4y/vXejM7kmVpclQ=
Subject key identifier: A9:FE:16:00:CC:37:FD:9C:1E:84:10:03:3C:02:10:F0:A7:22:2F:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/653B7D18752B11F0A1369F8BDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 14:16:10 +0000
ROA not before: Sat 09 Aug 2025 14:16:05 +0000
ROA not after: Mon 22 Sep 2025 14:16:05 +0000
asID: 137899
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92644 (0x169e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 14:16:05 2025 GMT
Not After : Sep 22 14:16:05 2025 GMT
Subject: CN=68975829-fc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:91:e1:b0:9d:4f:a3:0b:e8:39:ff:d3:b6:
78:e7:49:b0:92:a2:77:a4:eb:2e:89:1d:3c:56:ee:
02:81:77:2a:27:a4:8d:5c:11:63:a4:80:80:59:af:
00:86:f1:1c:4e:30:f9:23:fa:97:56:82:f4:38:e3:
4d:f0:a4:df:36:7c:00:b0:66:bc:15:5c:a6:24:6f:
1b:e6:1b:d6:2f:3b:68:5a:8a:49:3d:fe:9f:01:84:
a1:48:17:e9:85:cc:05:7e:ff:d2:c2:26:b1:27:e9:
d7:9f:52:89:0c:c2:9a:f9:f1:ea:87:fc:b9:03:68:
ce:cf:89:3a:4c:bd:25:c0:72:d6:00:0d:28:0e:d1:
9d:58:a9:08:65:10:85:5d:eb:95:74:46:88:2f:b9:
df:c6:65:b6:ee:9a:fe:45:21:c1:e8:47:9e:6e:ab:
48:4c:c7:b1:11:82:b6:ad:1c:23:7a:37:9a:4e:64:
8d:bd:36:b0:bd:f0:4b:52:cd:01:bb:1f:5b:1c:fb:
f0:9b:7f:72:bd:5d:72:ea:7d:5c:d4:75:a2:7f:ea:
23:b3:f5:65:cb:7f:c6:fd:fc:8c:91:6b:ad:2a:8e:
7c:dc:ae:8b:bf:d9:49:69:b2:12:ce:5f:05:e3:fe:
1d:9d:50:52:1c:00:ad:e0:04:b0:a7:c9:58:c2:ae:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:16:00:CC:37:FD:9C:1E:84:10:03:3C:02:10:F0:A7:22:2F:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/653B7D18752B11F0A1369F8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
53:54:23:6b:ae:16:64:2a:4f:92:f9:89:0e:b3:9b:54:ef:a3:
bb:c5:53:ea:72:4a:bf:f2:9c:16:ca:a2:a2:48:87:b8:af:4d:
79:c1:fb:d1:d8:9b:bd:69:3b:bd:e9:cc:47:3e:d6:36:d7:4b:
7a:44:40:a1:a6:48:2c:35:76:6a:a9:2f:f2:a3:67:83:5d:ab:
9f:8d:e9:d4:5e:4f:f4:b1:1d:40:3e:38:f2:d9:7d:82:ae:29:
6d:2c:8a:2b:76:3c:5e:0e:53:42:7e:4d:6a:b1:ed:6d:0b:47:
b0:7c:33:f1:8f:1c:9e:44:22:f5:5f:a6:76:7d:30:c0:43:f2:
c4:bd:37:5d:64:2b:0a:81:43:2e:87:90:d3:66:c4:91:77:01:
e5:54:8c:a1:9e:65:f7:32:91:96:cb:ae:54:90:9d:54:a5:b2:
ce:97:96:7c:3a:b5:a2:b6:d5:eb:02:f2:e7:73:85:b3:b7:e2:
fa:34:76:6c:57:85:b9:fd:e1:18:18:db:a0:f7:09:52:30:ec:
55:81:a3:ca:63:8b:fb:96:32:2b:41:32:d3:88:14:8b:7d:51:
d1:88:eb:89:32:de:61:d5:bb:58:a0:1c:7c:7c:ab:3e:68:4d:
4d:9b:6f:2b:d1:11:ab:08:68:79:21:ac:74:0b:b8:4c:ea:91:
48:dc:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:12:53 2025 by rpki-client