Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8897449C58B911F0B2BC24E9DAE4EC9C.roa
File: 8897449C58B911F0B2BC24E9DAE4EC9C.roa (raw, json)
Hash identifier: 5Imk0O7kHSUAEVAG7TQQl3DApIqHi1rHgJJp5cY/GZs=
Subject key identifier: 4F:57:95:22:CA:EE:3C:12:A4:98:BF:32:27:B6:28:A9:64:7D:FC:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8897449C58B911F0B2BC24E9DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 09:30:34 +0000
ROA not before: Fri 04 Jul 2025 09:30:29 +0000
ROA not after: Tue 28 Apr 2026 09:30:29 +0000
asID: 262167
IP address blocks: 45.199.158.0/24 maxlen: 24
45.199.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90299 (0x160bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 09:30:29 2025 GMT
Not After : Apr 28 09:30:29 2026 GMT
Subject: CN=68679f39-f9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:a9:3d:3a:83:20:fc:6c:c4:29:c8:a3:d6:
8c:5a:f3:82:6b:da:a4:37:95:03:24:1f:f0:cd:af:
51:74:1d:eb:fb:14:8c:71:7c:3d:de:e8:15:92:41:
55:a0:bc:a7:a4:58:c7:b6:89:fa:4a:c8:e1:cc:88:
88:d0:e0:f5:b1:80:f7:50:cf:e6:a0:8f:3a:53:5b:
a4:37:9f:59:10:ab:4f:93:f1:c8:c9:ca:c5:d6:58:
05:ba:b3:a8:b5:5c:11:ca:96:7d:fc:5b:bc:66:a8:
56:7d:52:cf:b1:08:5e:06:65:20:b9:a6:92:75:84:
e9:90:9e:56:57:75:cb:ef:38:21:e1:5e:17:d7:cd:
eb:a1:25:b8:e3:74:f4:91:d9:61:11:b8:0b:92:f2:
29:d5:b2:e7:cf:5a:5a:2c:ad:2c:12:ee:84:cb:8f:
f6:d4:15:c5:cf:7c:b0:41:ff:5f:5b:48:7d:6d:37:
6f:bc:94:c1:a6:e4:9a:01:78:f0:da:1d:2d:08:ac:
eb:62:40:7d:2e:5b:50:6a:cd:97:bd:16:48:3c:b1:
68:98:00:1b:63:6f:37:d1:17:5b:35:70:0d:39:72:
25:dc:f3:58:d3:22:3e:3f:7b:fa:07:f6:b4:88:2d:
8e:f2:66:c0:6a:45:4d:17:67:38:01:22:38:35:dc:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:95:22:CA:EE:3C:12:A4:98:BF:32:27:B6:28:A9:64:7D:FC:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8897449C58B911F0B2BC24E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:99:f4:26:13:60:49:91:0a:83:1c:3b:2f:08:2a:1d:62:4b:
25:ff:b5:ef:ba:01:0d:be:d7:4d:c8:7a:db:8f:0a:5e:34:09:
ba:02:36:8b:29:7b:62:ff:ea:b6:02:aa:80:99:a6:2d:16:3c:
e2:53:33:96:a2:d4:4e:62:34:cc:09:25:90:1f:6a:e6:8d:9e:
6d:6a:fb:96:9c:b0:aa:4c:6b:6d:94:8e:f6:b9:fc:8b:77:11:
5b:f8:ac:db:e6:ce:b2:af:05:be:11:e3:d4:ec:99:21:51:79:
2b:52:c5:77:30:19:8d:80:3d:21:73:a2:ee:cd:c4:7b:9c:79:
07:c3:12:ed:a1:6b:10:b3:73:9f:94:d0:0b:45:1f:44:c3:8a:
c6:a9:cc:96:ba:93:78:72:28:14:7d:44:dc:b5:78:c6:87:9d:
ca:31:71:8d:c9:aa:11:4c:b3:e0:c8:54:60:1a:8d:f7:bb:9f:
4f:37:21:22:f3:26:7b:df:00:bd:82:97:24:6f:86:24:2f:b2:
c9:0d:d3:66:18:a0:b9:4b:40:50:94:86:be:4a:f7:21:f0:f4:
08:fa:d4:30:da:40:0b:88:9b:28:3f:ac:77:ae:92:7c:3e:38:
b9:c9:06:b8:f1:a2:ca:eb:17:34:15:62:95:9d:66:23:50:85:
5a:38:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 06:06:21 2025 by rpki-client