Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944A03827E9911F0A914C59DDAE4EC9C.roa
File: 944A03827E9911F0A914C59DDAE4EC9C.roa (raw, json)
Hash identifier: gnjJNmjvagxbxRHeje01KWNEwLtiKqREeQH7UKEqE+s=
Subject key identifier: 50:C0:6B:34:99:13:2D:B5:E1:B2:6A:43:14:73:D2:7B:8E:49:12:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944A03827E9911F0A914C59DDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:17:33 +0000
ROA not before: Thu 21 Aug 2025 14:17:28 +0000
ROA not after: Wed 21 Aug 2030 14:17:28 +0000
asID: 17561
IP address blocks: 45.201.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93767 (0x16e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 14:17:28 2025 GMT
Not After : Aug 21 14:17:28 2030 GMT
Subject: CN=68a72a7d-bd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:b6:c0:66:b1:06:de:9c:48:4d:35:66:01:
87:bd:6c:85:c2:8e:7a:fb:cd:3d:93:ec:59:9c:71:
4e:82:56:65:04:67:06:cc:58:b2:4f:4b:53:14:bc:
7d:43:c8:84:3c:95:49:8b:26:01:cd:4b:34:18:9c:
7d:65:68:70:6e:db:c8:17:dd:aa:7d:71:0a:06:c2:
dd:3e:d3:82:d6:ec:9c:c2:48:66:2f:f0:2a:66:c8:
8b:80:30:ca:ca:c1:66:4e:1a:b0:70:8c:5b:06:ba:
0e:ef:3b:90:97:81:22:28:b0:9e:23:72:92:86:86:
bc:36:24:6c:d2:55:4c:9d:ba:5f:e3:6a:1b:c8:1a:
f2:78:f0:5a:3c:6c:b8:d4:90:95:86:cc:65:2b:18:
eb:4d:7f:2c:06:29:4a:3f:18:40:ee:fa:f5:08:e2:
dc:aa:6d:f6:0b:d6:b9:0d:81:e5:05:b9:56:60:08:
04:b3:95:bb:91:aa:29:f8:18:4c:e6:ed:33:bd:d6:
1d:86:b5:00:83:b5:dc:cc:0c:4f:d8:cb:28:18:5e:
3d:79:b3:59:70:19:aa:d6:79:c2:c7:74:3d:d1:a5:
6b:d4:a5:92:80:62:09:fa:23:f6:91:02:af:b3:8f:
b5:f6:1e:10:f2:f5:e5:72:02:fd:b7:83:8d:76:9a:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C0:6B:34:99:13:2D:B5:E1:B2:6A:43:14:73:D2:7B:8E:49:12:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/944A03827E9911F0A914C59DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/17
Signature Algorithm: sha256WithRSAEncryption
68:a2:84:98:a2:27:fe:31:44:b8:32:a7:be:d2:14:f5:6e:d5:
e4:19:12:33:99:62:52:0a:56:d1:80:f8:6a:c5:6b:2e:1a:0f:
e9:10:67:b4:3a:5d:27:82:a3:12:77:ea:71:57:63:60:19:3d:
0c:19:7e:38:12:1c:64:01:93:b6:7a:4a:4a:79:3c:78:19:be:
5d:c1:56:2d:4e:98:d8:1f:05:7f:7d:eb:2e:92:dd:03:c9:b1:
dc:59:8e:e2:64:e5:c2:88:99:56:32:11:42:f9:21:cd:69:8a:
c9:46:ac:96:9f:ab:99:b1:d3:fa:f9:05:22:83:7e:61:8c:1f:
10:d3:2b:ea:08:fd:e7:58:62:36:c4:36:11:77:92:b6:c7:53:
b8:f5:45:d2:e9:e3:72:db:8d:d4:a0:53:5b:13:34:9d:37:e2:
27:1f:be:6c:1f:99:13:30:e7:54:84:78:cf:b7:fd:ee:0f:6f:
48:6e:54:16:a8:a0:b4:69:f7:6f:f6:47:78:fa:f9:fe:27:9a:
05:d7:4a:34:04:b2:c3:4b:f1:70:2e:de:04:74:1f:b8:fd:8f:
2a:e9:67:08:26:02:72:4a:5a:43:56:9a:32:f7:21:ae:a9:8a:
75:86:92:50:f5:70:30:54:bc:8a:dd:eb:c5:d2:3c:e4:e5:9a:
e9:29:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:12:12 2025 by rpki-client