Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3EA67E0753F11F09A904A8DDAE4EC9C.roa
File: A3EA67E0753F11F09A904A8DDAE4EC9C.roa (raw, json)
Hash identifier: khsdbgul8EG6xhs/JpoGDy5Cx4KIkSo+n5v2DtzUkmU=
Subject key identifier: AE:D3:DA:3C:2A:91:05:5B:48:E7:BC:DE:8C:AE:83:ED:2C:12:75:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3EA67E0753F11F09A904A8DDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 16:41:04 +0000
ROA not before: Sat 09 Aug 2025 16:41:00 +0000
ROA not after: Mon 15 Sep 2025 16:41:00 +0000
asID: 134824
IP address blocks: 45.192.129.0/24 maxlen: 24
45.194.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92680 (0x16a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 16:41:00 2025 GMT
Not After : Sep 15 16:41:00 2025 GMT
Subject: CN=68977a20-a396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:a3:a0:bb:5c:14:a2:ee:c5:58:5e:7b:64:
14:34:9d:96:8a:03:a2:8e:00:9a:ed:f7:c5:60:e9:
a2:43:5a:98:a7:92:c5:9d:44:87:61:da:e3:db:7e:
d6:7b:7c:b8:39:33:e2:d9:53:32:12:c3:2f:63:bf:
13:5e:36:a7:aa:8f:b7:12:b8:b7:c7:35:16:20:3e:
a6:0b:f8:01:22:e1:c8:f8:eb:27:0b:57:b4:cc:c6:
69:c1:27:ea:e8:78:60:24:14:18:ea:76:a6:b4:32:
f4:b9:17:b8:19:47:f5:d7:01:08:43:0b:c6:40:24:
3f:75:0a:00:41:82:74:cf:3b:f1:1c:01:ab:33:e9:
c2:79:0f:64:e7:77:2e:c3:f9:04:55:63:cc:44:2d:
7b:e5:a5:c9:fb:ae:04:6b:58:2f:60:10:26:3a:52:
36:35:18:bf:82:6c:51:6a:07:44:7b:7c:07:12:4e:
fb:4e:29:70:28:6e:1c:65:f1:9f:01:df:93:74:1d:
4c:d4:cb:2b:26:8a:8e:e7:a7:da:4e:40:47:f7:b3:
97:a5:4b:44:af:df:e4:f7:75:2c:28:99:03:52:23:
90:92:ab:03:4b:7c:be:f0:b9:8a:48:77:79:1d:71:
fa:34:e5:85:1a:32:b4:60:7e:5d:81:4c:12:17:c4:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:DA:3C:2A:91:05:5B:48:E7:BC:DE:8C:AE:83:ED:2C:12:75:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3EA67E0753F11F09A904A8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.129.0/24
45.194.93.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c0:46:8f:3e:d2:c6:5e:55:1c:fd:d0:6c:ad:37:a4:5e:2b:
b2:4c:b1:58:b0:a1:0e:99:aa:e5:86:02:e1:65:90:e1:24:85:
4b:34:f9:a3:4b:6f:af:d9:9d:05:16:4c:cd:8c:43:b8:00:25:
79:55:c4:80:a7:36:eb:74:33:01:f1:82:24:6f:f3:60:28:c3:
41:16:47:a8:f6:e7:e0:f1:63:31:bc:7e:5e:13:ed:67:35:f7:
2e:ee:7b:ab:48:21:d0:b1:e7:e5:2f:31:37:ac:d0:79:ea:09:
9f:3c:9c:7d:d5:ab:69:08:ad:20:b9:ef:00:cb:d7:b2:4e:34:
ae:3a:bf:26:7d:20:66:99:05:b4:29:f2:8f:86:7b:f8:6b:ab:
20:10:89:26:16:1e:6d:af:92:89:ec:85:cb:6d:8e:64:6a:f0:
78:7f:7b:7f:d7:0d:c8:54:fd:72:3f:21:a7:8a:62:9a:76:f8:
c1:15:41:33:07:c1:bd:d4:55:cb:bd:f8:a6:2b:c4:da:5b:77:
4a:fc:d0:77:ef:d6:2a:e2:b1:1c:f6:cf:ff:d7:4f:63:5e:23:
dd:bd:4d:7e:7f:4a:0a:f2:01:29:18:33:0d:e7:25:48:04:b9:
54:2b:63:4f:e1:15:7d:66:ce:f2:f8:1c:66:bd:2b:92:63:ee:
aa:29:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:21 2025 by rpki-client