Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89CB0167C1711F09E8C98B2DAE4EC9C.roa
File: A89CB0167C1711F09E8C98B2DAE4EC9C.roa (raw, json)
Hash identifier: sYL5Oc4FrFoa+RyiRmkrqe+wHUO6eC61i2gCCkFe1bU=
Subject key identifier: 0D:3A:E0:66:56:21:1E:9C:DD:F4:B8:24:C4:6C:30:1E:6C:1C:82:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89CB0167C1711F09E8C98B2DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:42:31 +0000
ROA not before: Mon 18 Aug 2025 09:42:26 +0000
ROA not after: Thu 25 Sep 2025 09:42:26 +0000
asID: 395793
IP address blocks: 45.192.115.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.201.16.0/21 maxlen: 24
45.201.24.0/23 maxlen: 24
45.201.26.0/24 maxlen: 24
45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
45.207.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93112 (0x16bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 09:42:26 2025 GMT
Not After : Sep 25 09:42:26 2025 GMT
Subject: CN=68a2f587-2d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:45:19:e9:04:3c:34:7e:d0:9b:21:8d:ec:
13:09:f4:09:49:5a:84:e5:73:b4:10:ad:9c:4c:a2:
f0:e3:cb:60:be:7e:64:6f:0b:c3:b4:88:f8:65:8d:
96:54:1b:38:21:8f:b4:8b:c1:33:3d:ef:6a:d3:32:
76:ec:0e:ce:ca:1a:b4:8b:d2:47:8b:22:6e:52:a9:
e2:35:ae:c5:e6:d5:c0:6b:b2:e8:25:3b:65:fe:4e:
0c:e7:50:97:8c:27:42:b2:c1:ae:d4:68:e6:d5:ab:
ae:62:c6:7c:26:44:da:e7:6d:13:36:f5:7b:55:bf:
d5:f4:77:ca:dd:3f:40:19:97:3b:5c:d2:53:45:0d:
cc:29:cf:a4:44:d2:18:38:f8:82:a0:82:ca:bd:f2:
5b:a7:03:41:fd:ab:3a:77:37:71:0b:85:01:4d:60:
6d:29:cd:ca:4b:fd:2b:9e:1a:05:9c:d9:28:dd:2c:
c3:60:47:79:e6:cc:04:eb:c4:8a:e4:45:e2:a4:41:
98:36:81:7e:03:75:6a:63:cb:83:1a:07:49:73:80:
c0:fa:fc:2e:73:36:f4:d9:52:43:21:84:ad:0a:b5:
de:76:64:ce:85:c4:4f:07:7e:61:bb:5b:49:34:7c:
17:e2:d4:68:47:77:00:8a:06:8c:f5:f8:18:09:5c:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:E0:66:56:21:1E:9C:DD:F4:B8:24:C4:6C:30:1E:6C:1C:82:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89CB0167C1711F09E8C98B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.115.0/24
45.194.0.0/24
45.195.255.0/24
45.201.16.0-45.201.26.255
45.207.138.0-45.207.147.255
Signature Algorithm: sha256WithRSAEncryption
28:d5:5f:84:bb:21:10:5b:27:02:3f:ae:28:25:05:fd:74:b3:
d8:eb:8c:e9:ef:bd:0b:2d:43:0a:ca:c6:de:14:c3:1b:82:63:
f4:9d:14:7a:87:b2:79:2e:76:7f:d0:77:9e:c8:03:8f:9e:5a:
a5:7f:8e:24:05:2b:c2:53:03:94:c1:51:6a:4b:3c:13:af:e3:
c6:81:51:94:b9:bf:20:c1:ca:90:45:2b:82:e1:25:a2:7f:e2:
b2:6b:79:68:eb:d9:33:34:56:f8:ef:11:fd:c5:57:32:ea:7b:
53:9a:d3:8c:fd:67:ad:66:fb:44:b5:03:c6:f5:a9:69:73:61:
67:f4:07:fb:15:b2:e9:de:47:b0:aa:2e:9d:71:ab:c3:ac:d5:
97:d7:36:b6:f7:b1:08:09:2f:f1:bd:18:8f:10:59:7f:5c:cb:
44:91:94:1d:9b:3d:7d:24:71:99:c6:48:ba:0e:1d:9e:9c:06:
d7:4b:8a:d4:61:3a:e8:9b:db:b6:08:f9:5d:1c:ce:2f:d4:5a:
87:99:a1:67:e3:15:ea:76:6c:78:96:b0:02:e5:1b:86:53:cc:
3a:95:2c:75:25:79:cd:23:04:f1:27:8c:56:99:62:dd:fd:63:
39:b7:85:32:c9:a0:ff:79:c3:07:29:44:ea:62:d1:02:8b:c0:
e7:ed:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:21:35 2025 by rpki-client