Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CD5C8AC782411F0B3C8F3F3DAE4EC9C.roa
File: 6CD5C8AC782411F0B3C8F3F3DAE4EC9C.roa (raw, json)
Hash identifier: cJcId3ddKiuVU6bxCUAaK+mrpsYevelNXxZFe5E3ZPU=
Subject key identifier: 66:6E:3C:9F:ED:ED:7E:11:AB:BC:AA:88:A2:E7:48:04:45:D1:FA:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CD5C8AC782411F0B3C8F3F3DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 09:03:49 +0000
ROA not before: Wed 13 Aug 2025 09:03:44 +0000
ROA not after: Wed 17 Sep 2025 09:03:44 +0000
asID: 9304
IP address blocks: 45.196.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92837 (0x16aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 09:03:44 2025 GMT
Not After : Sep 17 09:03:44 2025 GMT
Subject: CN=689c54f5-f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f8:73:e8:99:24:f4:9b:be:18:86:90:72:7f:
6d:0e:53:76:b6:88:ab:bc:58:af:8a:dc:63:68:ba:
ce:5f:e5:0d:76:21:de:03:97:82:02:96:7c:0e:d1:
1b:13:7a:84:93:3b:72:3e:06:7c:33:dd:15:db:b9:
31:5c:ff:cc:61:70:3f:03:fc:6a:78:c2:34:1a:ab:
b3:f2:19:1a:ed:6a:87:d4:d9:5c:bc:48:25:b9:ff:
79:08:26:46:90:8e:0d:30:3d:d1:5b:2a:ca:b9:f3:
07:70:e9:94:b2:40:c4:5a:a6:0e:dd:fc:f3:9a:39:
da:b4:66:96:cd:65:dc:1d:82:61:45:c1:2d:42:68:
88:1e:12:e7:d1:fe:7e:7a:1e:45:a6:20:04:48:08:
77:64:49:54:65:3d:30:32:66:3d:af:fb:ca:f7:bb:
65:24:8f:64:cc:98:1e:86:57:63:d9:f5:db:ec:f9:
f3:0f:a3:21:81:ac:ea:d3:3c:48:51:50:db:dd:bb:
cb:0a:3b:1c:1f:aa:56:c4:e0:86:41:ea:4c:5e:29:
ae:26:1f:04:6a:ed:0d:06:c7:eb:1c:fe:ff:5d:3d:
75:87:4d:bc:79:e5:db:91:06:23:10:b0:4f:34:ce:
91:f5:ca:3c:97:4f:3d:d4:94:a4:a9:30:a6:d2:37:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6E:3C:9F:ED:ED:7E:11:AB:BC:AA:88:A2:E7:48:04:45:D1:FA:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CD5C8AC782411F0B3C8F3F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.228.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f0:28:c8:c4:26:3d:7f:5d:d8:6a:16:f1:2f:71:c7:f7:cc:
76:fd:d6:73:21:35:03:9e:23:6c:c5:40:d5:f9:32:06:5f:91:
b8:a0:61:08:97:25:0d:f1:e5:a2:ad:ef:8e:26:05:cc:9d:c5:
81:a9:f6:e7:2f:24:20:6f:e2:f3:17:db:72:be:b0:6b:89:5c:
a0:d9:4a:00:6b:42:da:63:4b:34:95:31:96:72:a1:88:e0:48:
a9:d5:3c:a0:d9:de:66:f6:50:df:ae:4c:23:48:9d:b1:c1:f9:
c4:ea:59:04:8e:f8:23:85:cf:bb:63:f2:b0:33:67:6f:c4:c8:
b0:b0:65:24:ab:e5:ba:74:2c:77:2d:d1:d8:a3:d4:03:a5:61:
84:61:ff:a4:88:3d:4c:98:a1:34:ad:16:de:db:b8:49:b5:78:
36:02:42:82:30:f0:cb:f3:12:f3:04:90:a8:10:08:45:25:1a:
d5:27:33:45:19:ac:f3:2f:91:4b:8c:b3:f4:90:58:ec:36:70:
0c:aa:0f:b7:19:5b:6b:e0:92:93:2b:ab:d9:89:c7:1e:9b:d4:
6c:e3:85:07:3e:cd:d2:62:58:cc:7b:39:14:73:cd:07:b4:51:
c3:0c:11:64:7b:b4:ba:c8:67:5f:1f:5d:59:7b:0e:16:be:d1:
eb:6f:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:07:34 2025 by rpki-client