Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3313AA6729D11F092076DECDAE4EC9C.roa
File: C3313AA6729D11F092076DECDAE4EC9C.roa (raw, json)
Hash identifier: Z9H+pBW0DKTI/3cOZOMZ6mWJihIolVWKEwId7k4gyNs=
Subject key identifier: 27:22:7D:26:D7:62:13:69:19:C7:F6:2E:20:89:C2:5B:F2:6A:7A:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01693E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3313AA6729D11F092076DECDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 08:17:16 +0000
ROA not before: Wed 06 Aug 2025 08:17:10 +0000
ROA not after: Fri 12 Sep 2025 08:17:10 +0000
asID: 8796
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92478 (0x1693e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 6 08:17:10 2025 GMT
Not After : Sep 12 08:17:10 2025 GMT
Subject: CN=68930f8c-ef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:34:76:c9:85:51:c2:10:9e:29:a0:52:ba:
eb:4c:83:b9:07:1d:c8:9a:72:f7:fe:cb:4e:3c:ea:
9d:0e:a3:d8:1b:62:2c:12:fb:dd:9f:f4:0c:46:97:
94:54:b3:f9:e3:0b:d3:cc:2d:33:40:7e:dd:62:a7:
53:ff:22:74:da:89:5c:c9:4e:91:5d:c1:cc:4b:77:
c2:82:17:a4:03:c5:82:c7:16:cf:f1:c1:6e:27:ad:
e1:44:77:f3:2c:48:b7:09:1e:8e:b4:df:52:46:e7:
4a:45:9f:cc:5f:d2:15:ca:74:f4:2c:90:31:ae:0d:
33:f9:82:52:df:d8:5a:63:ee:e2:9a:2c:f0:0c:a6:
1d:f8:ae:0d:d0:e7:72:3a:1c:fd:6e:1b:a6:43:2b:
9e:bb:7f:86:8f:8a:7b:5f:93:cc:1b:19:dc:e8:f9:
08:00:3b:41:b9:27:ae:44:1c:90:92:34:38:e2:2f:
b5:fb:f0:91:cc:a9:91:03:bb:26:30:07:e1:e2:de:
00:c4:eb:3b:43:ce:48:66:6d:29:74:e2:85:13:6d:
d9:43:67:f2:68:a9:4e:7f:47:6f:5d:79:a4:e8:7a:
1b:d0:5a:be:1e:80:0d:5d:f8:4f:a2:21:8e:0f:6b:
cb:4a:d5:f9:23:16:9c:08:0c:c3:4f:a9:94:22:a2:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:22:7D:26:D7:62:13:69:19:C7:F6:2E:20:89:C2:5B:F2:6A:7A:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3313AA6729D11F092076DECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
54:40:13:63:5d:b3:9e:a8:ee:3e:aa:6f:80:25:0c:2f:6a:b9:
31:e1:0d:35:5b:fc:d1:dc:61:d8:f0:1e:ec:9f:e2:3c:5b:d6:
71:98:f7:9f:67:5b:f6:7f:37:5d:08:fe:dd:52:97:54:02:16:
77:6e:d1:91:8c:40:6b:d8:80:5d:1e:54:fa:a5:b8:49:3a:7e:
b4:13:6c:b8:18:57:ac:1c:0b:f5:e8:e5:d3:05:03:a4:9b:cb:
ed:7f:f5:22:70:d1:7e:44:6c:7e:07:9a:9e:57:d4:1a:84:04:
56:f6:0d:05:c8:70:3d:e3:72:81:17:c2:09:b8:d5:00:21:80:
90:d2:95:d5:ec:08:b0:2a:8a:7b:9c:90:35:67:e9:f9:b6:65:
83:af:8b:57:1b:ee:89:86:df:8a:32:17:a5:29:41:41:35:ca:
7b:b5:45:86:6f:da:9a:c5:dd:3e:2e:ab:da:fb:24:8f:5a:a6:
f1:da:42:bd:3a:a3:30:90:1f:ef:c8:c5:33:b4:05:3b:2f:45:
ab:03:c2:99:d8:27:da:09:05:ea:e9:d5:b1:46:da:f3:90:38:
69:64:d3:7c:37:cc:64:8d:20:49:3b:10:a3:de:9d:82:ca:fe:
81:d8:b3:65:fb:53:3a:d1:4f:e1:0e:d5:c2:23:b8:83:3b:9c:
8d:60:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:08 2025 by rpki-client