Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735CEC30782B11F097A556A1DAE4EC9C.roa
File: 735CEC30782B11F097A556A1DAE4EC9C.roa (raw, json)
Hash identifier: dLnWw13Bm2leh5FNB7bIOe/PbZcVKM8SBlMWzxcsHZg=
Subject key identifier: C8:21:AD:90:06:B6:D3:2A:D1:41:76:7D:D5:DF:1B:16:BB:7C:30:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735CEC30782B11F097A556A1DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 09:54:07 +0000
ROA not before: Wed 13 Aug 2025 09:54:01 +0000
ROA not after: Fri 19 Sep 2025 09:54:01 +0000
asID: 6079
IP address blocks: 45.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92851 (0x16ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 09:54:01 2025 GMT
Not After : Sep 19 09:54:01 2025 GMT
Subject: CN=689c60bf-4cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:ab:e1:96:80:ce:c7:d8:48:73:21:8d:4d:
64:ea:b1:73:10:33:a4:23:c7:69:06:42:bb:6f:bb:
ba:12:6b:70:2d:44:06:6a:df:a8:06:31:25:34:70:
60:7c:c8:c6:77:a1:71:a1:71:73:4b:e9:b8:4f:14:
22:5e:53:d8:18:66:bd:e3:b4:8c:3c:cb:f5:83:ab:
31:63:18:bb:46:a0:9b:dc:11:ca:a8:65:7c:d8:0d:
a8:0e:c1:5f:05:96:c7:da:14:81:be:5e:7a:2c:fb:
76:53:65:76:35:89:24:1f:e1:3b:98:3b:60:78:3a:
10:87:f8:e5:fe:8a:8f:8f:2d:93:42:dc:c6:b0:6f:
21:de:c2:91:4f:2f:ea:b9:39:9e:36:d6:e3:29:22:
62:54:36:86:1a:3a:3d:64:21:ae:0b:0c:60:4d:b8:
4a:f7:95:cf:55:a2:a8:a3:c4:e0:df:76:b2:f1:02:
c5:a4:50:85:62:f6:2b:ce:2c:f8:44:85:6b:ab:11:
8f:1f:d9:b6:75:85:3f:e8:8e:55:cb:a2:f4:fd:76:
19:4f:79:1c:89:64:00:76:d4:f7:82:f9:75:1f:e4:
c2:77:3b:33:f2:7d:07:7a:0a:6c:31:70:da:52:0b:
9d:3a:46:1d:b1:97:dd:3c:63:44:05:13:d9:48:fa:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:21:AD:90:06:B6:D3:2A:D1:41:76:7D:D5:DF:1B:16:BB:7C:30:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735CEC30782B11F097A556A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ca:e4:20:ca:3a:30:f4:6e:cc:29:df:0b:06:b6:7c:b6:e5:
5b:71:f2:86:a4:44:3e:d7:32:33:1f:b6:bc:03:ad:1c:fe:a5:
4d:56:6a:39:68:dc:e9:29:86:c3:59:c1:ba:38:2b:4c:bc:7e:
4f:ad:19:e2:bc:cf:90:bb:cc:fb:1b:9e:f5:d1:a0:10:94:51:
ff:09:ba:72:94:1e:8c:81:76:ac:d3:1f:81:9a:12:95:08:84:
4c:84:a9:2e:a4:57:18:72:77:4d:6d:c4:45:20:e0:8b:e0:b0:
2c:ff:54:88:63:d4:5c:44:4d:f4:71:c8:26:e7:7f:56:1d:44:
2c:c3:e4:09:8b:66:78:20:c6:19:91:62:5f:a8:72:71:d4:91:
2a:e3:01:54:cd:2a:25:6b:cc:7e:f9:64:aa:c5:0a:86:49:bf:
42:0f:c0:38:bb:17:6b:b2:b0:cc:db:68:cb:8c:c6:32:5a:4f:
e8:09:9b:4a:81:73:8d:5a:7f:d0:b2:c8:35:ef:65:8f:f3:28:
cd:3a:d3:7b:95:40:aa:aa:76:23:38:17:fb:f9:e3:1a:ab:81:
b9:9a:74:fc:e3:8e:29:95:32:d9:19:8a:b6:e9:18:9c:c0:d6:
ea:c6:67:1f:95:d6:b6:d3:7e:a1:68:2e:d3:de:5a:0b:1c:b4:
79:86:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:04 2025 by rpki-client