Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/752278887C1211F0BE81E592DAE4EC9C.roa
File: 752278887C1211F0BE81E592DAE4EC9C.roa (raw, json)
Hash identifier: M0qSoP5fDs7guEPAR3HIUzgtfdhKwjiG09IiqsATNP8=
Subject key identifier: A8:47:A3:E6:3A:EA:D2:C8:FE:63:21:EA:6C:C9:2B:96:23:B4:63:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/752278887C1211F0BE81E592DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:05:17 +0000
ROA not before: Mon 18 Aug 2025 09:05:12 +0000
ROA not after: Fri 19 Sep 2025 09:05:12 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93108 (0x16bb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 09:05:12 2025 GMT
Not After : Sep 19 09:05:12 2025 GMT
Subject: CN=68a2eccd-1741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:c7:2f:8a:3f:3f:a5:e8:12:62:77:d1:3f:
8f:37:c1:3e:d1:4c:a7:26:35:6b:80:00:23:82:a9:
1c:26:a6:34:25:af:54:c9:10:9b:c8:a9:9f:a5:8a:
9c:b4:89:24:51:a4:52:51:f7:0c:47:f8:fe:38:e8:
2d:fe:e6:d0:4a:c3:c2:ee:82:17:c9:64:18:6e:a1:
b9:e4:c4:1a:21:8b:ff:71:c3:13:b8:00:36:ad:61:
ee:c0:86:17:09:f3:05:54:ec:ba:d9:eb:a8:27:c9:
23:de:a1:1a:9b:32:2d:01:ea:47:76:ed:8b:ca:d2:
6b:71:fa:91:e8:f4:8b:75:fe:54:ca:ce:c4:ad:ac:
99:5a:24:fb:6f:19:62:65:0c:15:37:73:4b:75:9d:
38:91:36:98:d3:2a:c1:2a:46:4e:f4:1e:14:72:13:
01:9c:8e:65:80:82:c5:2c:43:e2:3e:50:be:af:7d:
24:0b:57:70:09:60:57:b8:f3:2f:61:2a:90:6d:02:
a3:fb:e7:1a:0c:a0:ee:25:66:68:da:18:ce:9d:9f:
a7:7a:49:17:33:d9:1b:e4:86:32:ad:64:af:58:c2:
1e:3f:3c:53:64:bd:af:86:d1:21:c0:db:36:2c:ab:
db:d9:6c:cc:17:e8:11:15:d5:88:4f:d3:48:a3:8d:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:A3:E6:3A:EA:D2:C8:FE:63:21:EA:6C:C9:2B:96:23:B4:63:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/752278887C1211F0BE81E592DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
58:12:97:c9:13:05:64:74:2b:cf:79:42:d3:39:4c:cf:6d:f3:
2c:ef:5b:34:32:6a:e7:40:b7:b6:af:a5:36:c3:12:5f:2b:71:
06:7a:b3:84:38:c3:20:e6:37:88:0e:fd:ca:45:a5:d5:e8:59:
bb:9a:b5:5a:65:de:4c:67:56:cf:e2:d5:5a:0c:7a:90:9b:36:
07:9b:2a:60:ad:88:8c:e6:66:ba:d0:ed:eb:83:eb:5e:b9:be:
07:8c:25:d0:d4:07:f9:f5:5d:0d:59:c0:5b:65:e4:30:04:2b:
79:7c:5b:1b:ae:14:1c:4c:4c:d5:48:7f:99:68:c6:17:9e:86:
68:c4:f0:11:0d:82:7c:a0:a8:7e:fc:f1:34:04:b5:d7:fd:e0:
2c:41:ac:9b:8f:c7:bf:69:8e:89:4a:9e:59:9a:b6:cf:7e:49:
b5:9e:0d:88:50:21:88:64:d9:af:ba:a0:4d:e0:7b:a9:cf:03:
8d:62:04:05:b1:c5:74:a4:dd:22:7c:3f:9e:bb:b6:2b:c5:5f:
75:c8:b2:b8:08:14:e0:01:56:21:49:b3:92:45:3b:bc:b0:73:
89:9c:7e:24:ad:11:06:19:63:28:8f:75:38:0e:67:6d:fc:4c:
ab:c0:0e:2e:98:54:f6:d5:be:fe:e7:21:08:1e:90:b1:9d:21:
39:7b:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:19 2025 by rpki-client