Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93931046511C11F0BA242BDEDAE4EC9C.roa
File: 93931046511C11F0BA242BDEDAE4EC9C.roa (raw, json)
Hash identifier: H6ZDaXrScmQ8e6e8DSt8KnnoVNqaV+LGKL/s1SjOfAs=
Subject key identifier: F7:E7:16:65:7E:D2:2B:12:68:55:5C:35:31:89:82:86:7F:69:38:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93931046511C11F0BA242BDEDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 16:59:23 +0000
ROA not before: Tue 24 Jun 2025 16:59:18 +0000
ROA not after: Sat 09 Aug 2025 16:59:18 +0000
asID: 63139
IP address blocks: 45.197.108.0/24 maxlen: 24
45.197.109.0/24 maxlen: 24
45.197.110.0/24 maxlen: 24
45.197.111.0/24 maxlen: 24
45.197.112.0/24 maxlen: 24
45.197.113.0/24 maxlen: 24
45.197.114.0/24 maxlen: 24
45.197.115.0/24 maxlen: 24
45.197.116.0/24 maxlen: 24
45.197.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89744 (0x15e90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 16:59:18 2025 GMT
Not After : Aug 9 16:59:18 2025 GMT
Subject: CN=685ad96b-bf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:02:50:74:9e:d4:ba:c2:1a:62:5e:eb:a3:
3c:e7:71:a4:81:de:bd:98:c3:56:5b:92:96:a3:95:
46:0b:98:d9:ea:74:c5:ac:84:4a:2a:69:79:ad:a1:
d4:74:a1:b9:38:67:c6:e7:2a:53:91:dc:d0:14:c2:
d0:6c:26:12:3d:ba:bf:43:9f:08:8e:aa:08:4e:a3:
94:40:4d:d2:02:3e:dc:76:75:30:c7:4e:94:e4:38:
ea:e7:bb:71:19:3e:c8:54:73:49:fb:9a:07:79:a8:
40:c9:c5:74:17:ad:a7:77:8c:cf:de:fe:f9:ac:67:
50:de:b9:5b:5e:34:12:9e:52:5c:d8:40:6f:ea:b0:
bb:9d:fa:8e:4a:ac:92:27:89:2b:8b:43:4f:43:6c:
59:62:f7:0d:86:8a:3e:dc:06:97:1a:8a:c6:74:98:
d1:3a:36:99:b4:49:57:6b:cb:6f:d5:7d:38:05:aa:
5e:6d:9b:42:2c:68:ce:78:28:fe:32:be:72:6e:2c:
56:05:43:79:f5:63:0c:c7:d1:8a:f2:37:af:6d:0c:
09:72:f7:ec:48:f3:57:8f:63:22:c8:fa:80:e7:0b:
29:fb:37:db:32:23:3d:3d:cd:2a:74:3b:84:29:ab:
85:35:4c:be:d5:8b:5e:36:a5:7c:df:d5:51:fd:7b:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:16:65:7E:D2:2B:12:68:55:5C:35:31:89:82:86:7F:69:38:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93931046511C11F0BA242BDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.108.0-45.197.117.255
Signature Algorithm: sha256WithRSAEncryption
b2:c9:5a:83:3d:ad:f9:89:a6:e7:19:dc:2b:4d:dc:0c:ea:9d:
e2:41:c2:b2:11:95:dc:1e:9e:4b:81:95:95:1b:48:33:49:72:
b7:53:e8:95:35:8d:86:16:e9:a9:85:d0:74:5a:87:fc:a8:bb:
c6:90:36:5f:07:e9:a9:ea:10:ab:37:1b:e8:64:ce:0f:fc:a8:
33:d9:cb:78:1b:6c:68:7d:6c:73:3a:c7:bd:89:6a:93:55:38:
4b:43:f8:1e:19:58:af:d3:00:26:49:7d:42:85:97:b4:5f:31:
d0:a8:e7:27:b8:cb:92:df:48:74:38:aa:89:af:32:7d:39:66:
88:65:3f:28:a2:ed:8b:d6:43:18:4a:9d:8d:64:6c:eb:3e:bc:
93:1c:09:91:29:ee:3a:82:00:b9:8a:03:b1:2d:18:dc:a9:5c:
6a:6c:1d:f9:b4:4c:db:ff:fc:0b:fd:6a:40:b8:19:a2:cb:d1:
c0:01:c2:a2:09:0f:d4:a7:53:99:57:ce:f9:e3:11:ca:0d:4a:
4d:b1:38:31:ac:8e:5f:8f:7c:f5:e3:b6:cc:95:8f:1d:a4:2c:
7d:8d:46:da:c2:87:9e:da:db:42:d9:4b:d2:57:2c:9a:23:0e:
5b:12:d4:bb:8a:1d:d3:d4:0d:0f:39:48:f7:b1:38:a8:e7:da:
d6:b2:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:34:29 2025 by rpki-client