Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F0FD0A753711F092B8E0D9DAE4EC9C.roa
File: A9F0FD0A753711F092B8E0D9DAE4EC9C.roa (raw, json)
Hash identifier: deleVgItZB/gSx/BOYdDtsnSltoNokhVXIKRCSPnZSw=
Subject key identifier: F5:17:D3:E8:3F:36:5B:2C:85:A0:9E:29:96:64:3C:4E:3D:00:84:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F0FD0A753711F092B8E0D9DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 15:43:59 +0000
ROA not before: Sat 09 Aug 2025 15:43:53 +0000
ROA not after: Mon 22 Sep 2025 15:43:53 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92662 (0x169f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 15:43:53 2025 GMT
Not After : Sep 22 15:43:53 2025 GMT
Subject: CN=68976cbf-9dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:91:58:28:12:1d:72:72:f7:06:25:f0:6a:
01:33:31:68:79:d0:e6:02:01:20:ab:88:67:87:78:
06:75:73:63:ed:c8:6a:a5:45:b7:fb:9e:73:85:69:
d4:1f:f1:36:a7:b8:94:19:53:79:5a:e5:3e:13:41:
25:21:3e:79:f9:12:99:74:a3:b8:83:8a:57:cc:1b:
66:93:9c:f1:ed:b4:78:c8:76:e3:f6:48:cc:3c:f8:
ce:a7:41:2e:07:d1:2a:c9:9a:10:6c:ef:5b:1f:8e:
85:ee:91:b2:55:60:0f:92:46:f4:5e:21:93:97:06:
db:dc:85:71:51:d2:7a:66:c2:a0:7a:f3:65:8a:df:
c6:df:db:62:d4:14:fb:94:d4:85:95:e8:f5:40:d5:
41:0f:6c:a9:3d:47:71:61:3f:ee:b3:63:ac:d5:fd:
17:51:f2:60:42:b2:0c:e3:a2:f2:83:39:0b:68:e6:
06:8d:4c:b6:59:04:6e:f1:92:8d:4b:5a:48:c6:0b:
18:0b:8b:b7:a0:c4:2e:eb:86:75:97:48:f5:4b:19:
78:9f:b2:b0:ff:9b:81:ce:26:1b:90:13:d8:0a:8a:
f5:95:5e:a5:c6:77:aa:a2:f6:74:e0:38:50:0e:74:
74:e4:00:67:2f:a2:72:06:ac:de:e2:cc:37:b3:75:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:17:D3:E8:3F:36:5B:2C:85:A0:9E:29:96:64:3C:4E:3D:00:84:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F0FD0A753711F092B8E0D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
53:b5:d9:31:92:2f:ed:37:64:a7:4e:64:c8:a8:90:dd:a4:69:
9b:93:7e:9f:cb:ae:f5:35:fb:22:9d:2d:67:8c:96:85:30:cd:
1b:07:65:aa:08:27:76:d9:25:96:a2:73:41:34:e9:5e:9d:7a:
bb:b6:a0:dd:8e:b1:4a:9f:5c:5e:62:28:2f:c1:1d:7e:2d:18:
f4:1e:fa:62:db:91:ad:9f:5c:39:87:34:44:9b:c0:5e:8f:e0:
f4:08:4e:d0:59:68:08:e0:19:6d:d8:17:78:e3:fd:38:c4:f3:
9d:a9:3e:48:94:29:9e:e6:a9:30:ca:e9:51:31:15:15:78:48:
4d:2e:9b:69:79:33:76:ca:8a:9e:fd:69:64:f1:f4:5f:dc:5f:
03:38:6d:00:65:ad:93:ac:43:66:00:a2:34:1f:4e:e3:42:e0:
3e:ed:55:79:1a:15:92:1d:1a:4a:51:9d:8b:9b:c2:e9:b6:58:
59:4e:7a:c2:c6:62:c3:98:e7:4e:45:8b:13:7f:fa:78:c1:c4:
4d:a3:f1:04:1c:df:46:33:8a:f8:d2:84:c9:52:a2:82:a1:f2:
70:95:be:37:7e:e6:35:8a:37:d2:f2:02:9b:d2:fc:3c:e0:5f:
b2:9a:32:f2:0f:9d:fd:b3:d1:35:34:93:85:89:6f:81:1b:eb:
e2:1f:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:23 2025 by rpki-client