Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C64C767E8611F0B1F545A2DAE4EC9C.roa
File: A7C64C767E8611F0B1F545A2DAE4EC9C.roa (raw, json)
Hash identifier: 1PzdtaC3SAVQOv7GRDWwh5S7ZUqIzSNhyNPoWAOmTTg=
Subject key identifier: 5F:3D:B7:BD:26:F5:F0:94:73:3E:5D:CE:E6:87:71:83:B5:C2:B9:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C64C767E8611F0B1F545A2DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 12:02:06 +0000
ROA not before: Thu 21 Aug 2025 12:02:01 +0000
ROA not after: Thu 28 Aug 2025 12:02:01 +0000
asID: 23764
IP address blocks: 45.196.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93739 (0x16e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 12:02:01 2025 GMT
Not After : Aug 28 12:02:01 2025 GMT
Subject: CN=68a70abe-898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:a8:24:ca:31:ce:9c:9f:35:12:8c:96:68:
22:f0:6b:dd:36:34:2e:ac:40:8f:12:22:62:30:f5:
f9:c0:19:2d:66:88:2a:6b:d5:15:72:4b:17:c5:2e:
ee:6f:12:b9:b6:32:98:f5:72:cb:87:4f:8d:8f:fc:
01:aa:8c:de:23:d6:95:f0:c9:07:78:61:80:19:98:
f6:21:23:bc:8e:d4:a2:17:91:dd:04:f4:b2:4f:f4:
9d:a8:7a:16:da:0a:1d:6f:d4:42:95:73:75:49:97:
c3:a6:01:46:9f:cc:bc:33:2d:49:e5:54:e0:7c:7b:
0c:c6:1a:1b:13:0b:90:df:12:ea:91:67:fd:83:0b:
33:5e:c3:66:44:ba:84:41:c4:6b:51:25:25:24:31:
8d:50:1f:36:e2:36:70:9a:46:ab:98:39:2c:c6:c6:
d7:bd:7d:3b:b3:77:c1:cb:83:bd:a7:7e:33:0a:b6:
31:37:87:92:7c:57:1d:a7:bc:1d:e9:39:07:bc:3b:
07:4f:28:3a:ac:23:79:df:4d:e9:97:d6:a6:42:15:
96:eb:93:2a:3e:59:60:69:6f:2f:40:bf:e5:75:4e:
36:32:ff:d2:eb:6f:94:f5:c2:a5:2c:ec:63:2e:e9:
3c:d3:8a:1a:52:28:e2:da:98:2f:a7:e5:16:c4:86:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:B7:BD:26:F5:F0:94:73:3E:5D:CE:E6:87:71:83:B5:C2:B9:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C64C767E8611F0B1F545A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.25.0/24
Signature Algorithm: sha256WithRSAEncryption
28:15:c4:16:21:d1:50:7e:60:d7:cb:d5:06:21:03:3f:a3:07:
05:86:d2:e8:5e:12:aa:80:b1:b8:8d:11:e1:45:e8:31:a0:40:
eb:c8:cc:bc:67:39:8a:21:6c:08:b1:1c:28:04:85:18:e3:c8:
46:a2:0c:67:3d:93:10:92:5b:0d:80:07:47:61:f0:4c:0d:41:
09:5b:78:05:96:5a:f6:e3:63:13:83:eb:a8:6e:49:89:f7:c7:
ba:07:31:5b:12:7a:e4:3a:c0:be:b2:54:86:45:92:45:e0:77:
30:c5:9c:7a:f9:25:4c:86:dd:94:c6:c2:87:81:a6:b4:0e:fa:
bb:a1:7b:4c:90:b5:fa:87:cf:5d:d5:b7:55:4e:cf:12:4f:e7:
5f:19:72:48:a8:da:27:33:2e:8b:b8:90:a4:52:72:5e:24:ce:
71:78:25:44:f9:93:f5:2c:d2:70:b7:61:17:f5:bd:3e:1b:ee:
e4:48:36:27:43:7d:57:32:24:b5:b9:5d:a3:c5:8c:83:2b:cb:
6b:b7:68:04:ec:e8:20:85:bb:b2:1d:d2:4a:df:b7:63:41:54:
1d:50:d9:fd:a2:f9:82:74:14:69:73:3a:40:23:74:4a:58:0a:
b6:6c:2f:cb:87:3a:a1:08:e9:d0:41:34:13:97:8d:54:b1:a8:
b7:8e:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:14:17 2025 by rpki-client