Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DE8E0A7F4011F0BAA32DE9DAE4EC9C.roa
File: 90DE8E0A7F4011F0BAA32DE9DAE4EC9C.roa (raw, json)
Hash identifier: 8YhL/+lY5/6Or6ofeMKzfJBhc/ZZwzIROhoAbvFUjbc=
Subject key identifier: 32:75:6D:DA:54:5E:1B:BC:E4:CA:5B:FA:41:92:B0:BA:E4:18:30:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016EA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DE8E0A7F4011F0BAA32DE9DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:12:54 +0000
ROA not before: Fri 22 Aug 2025 10:12:49 +0000
ROA not after: Sun 31 Aug 2025 10:12:49 +0000
asID: 23764
IP address blocks: 45.196.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93860 (0x16ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 10:12:49 2025 GMT
Not After : Aug 31 10:12:49 2025 GMT
Subject: CN=68a842a6-ca9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:9e:e4:82:2c:08:40:86:f9:49:d8:e8:09:
60:f6:ba:86:9f:5b:65:3d:49:f5:d0:24:52:ce:89:
2c:33:60:5b:be:12:5f:b9:da:9e:66:86:27:03:af:
0a:25:a1:47:a4:83:e5:9f:62:4d:31:c2:b0:e3:08:
5d:0d:48:8a:28:17:cb:35:b5:b2:31:53:72:ac:f3:
3f:75:8d:0b:11:34:f7:eb:76:c6:5e:b8:15:b9:fb:
4c:b7:b5:65:e6:39:6d:d8:f2:5d:12:bf:c6:4c:10:
ed:fc:38:67:77:34:41:ae:78:42:8d:a6:cc:d6:90:
ab:2e:35:3c:95:0b:28:c4:bd:fe:b1:31:ac:5a:ef:
ca:56:3d:c3:9b:08:1d:46:44:f9:31:93:1e:24:e2:
c4:e4:9d:3f:11:b0:7f:20:24:53:50:ff:61:d3:ad:
d3:2b:79:d6:c8:4b:33:d4:c3:e4:f9:1a:6b:4b:7d:
b5:4e:60:40:92:5a:39:e4:f3:4d:26:ea:3e:cc:7d:
c1:b0:0e:c1:4c:87:41:67:e4:57:9c:00:91:6c:2b:
c0:e5:15:2b:c2:61:1e:44:c3:bb:19:c6:58:74:6a:
30:6d:88:08:5e:6d:a2:f6:cf:89:de:95:7e:05:b1:
1e:bb:ab:11:66:49:3c:dd:1c:8f:77:0c:40:b8:df:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:6D:DA:54:5E:1B:BC:E4:CA:5B:FA:41:92:B0:BA:E4:18:30:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DE8E0A7F4011F0BAA32DE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ad:3a:bc:47:58:f4:02:0c:52:d4:af:df:e7:f1:ae:04:6d:
88:94:26:09:c9:0a:b7:77:d7:9f:c2:35:19:d9:0a:43:9e:22:
6c:3f:61:f1:6f:cd:6e:5f:8c:bc:29:e2:08:43:d7:ad:a6:ca:
f9:95:60:73:0a:c1:e8:b6:7f:e7:f4:92:e1:a6:1a:e7:2e:34:
5d:13:21:25:5c:2d:64:dd:8c:f1:5e:12:2a:a0:8d:ef:b5:f1:
1a:43:68:63:e6:b7:b2:94:76:73:7e:a2:a7:d7:50:69:7b:3f:
49:22:a1:87:c8:11:4a:5b:e2:3c:cb:0e:44:7b:2a:d5:e0:22:
9f:a1:d7:46:f5:ed:ae:88:e0:7a:91:4c:85:f6:64:03:70:df:
88:02:69:27:76:e7:46:0e:d5:cc:f0:fd:72:ac:8a:16:18:fb:
f2:48:4b:ea:7a:95:e5:f5:2a:47:7d:5c:c2:eb:57:8c:bf:e1:
54:87:78:75:17:9e:c4:70:3a:b1:aa:8f:3c:c1:65:ae:06:fc:
ba:5d:6f:8c:b0:60:92:c7:5c:fe:ae:39:1c:26:21:d4:e8:11:
e2:d5:f2:26:7d:4d:5d:a1:ae:d1:c4:dc:9d:90:b0:93:75:d9:
b4:30:c3:08:e1:1f:2b:db:4c:79:d6:5f:54:fb:ae:09:4a:2b:
d3:9c:e6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:29:19 2025 by rpki-client