Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F011C18076D011F08A071DC3DAE4EC9C.roa
File: F011C18076D011F08A071DC3DAE4EC9C.roa (raw, json)
Hash identifier: 0sBxWFk0UfXlfT301w9yS4Nw7cjGjH4i4BRNBMj72r0=
Subject key identifier: E1:FB:C1:C2:C1:64:66:DD:E0:B1:D9:69:9E:96:88:A0:4D:53:B9:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F011C18076D011F08A071DC3DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 16:33:41 +0000
ROA not before: Mon 11 Aug 2025 16:33:36 +0000
ROA not after: Tue 11 Aug 2026 16:33:36 +0000
asID: 138415
IP address blocks: 45.204.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92744 (0x16a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 16:33:36 2025 GMT
Not After : Aug 11 16:33:36 2026 GMT
Subject: CN=689a1b64-7a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:6f:f3:25:50:2f:70:68:9f:f0:07:36:9d:
5f:d7:dc:41:25:92:5a:25:4d:8d:e1:0d:d8:65:cb:
42:e2:0f:38:b6:84:27:ac:de:95:b0:f7:25:85:87:
fc:d4:ad:d9:94:cf:6c:a6:ad:5a:35:3e:0a:6e:ca:
0d:44:02:ea:bf:dd:85:f0:ee:05:5e:6f:f6:fb:34:
68:d9:d0:78:48:36:93:bc:34:e6:c3:b9:2a:71:9a:
5a:d1:3f:23:a1:64:ee:bc:ae:09:74:1b:9b:dc:f9:
c9:f1:51:18:17:b4:7e:57:dc:e1:b0:39:df:2d:f4:
0f:03:20:ba:8f:ed:b0:0b:7e:9b:f0:81:ce:11:11:
f2:29:14:c7:ac:dd:81:8d:b2:7f:bb:a3:25:b1:3a:
7c:41:ab:d2:c6:8c:d3:c2:7e:be:9b:c8:11:c7:00:
bb:36:4b:78:8d:95:6e:70:4b:9b:6c:7d:9f:e7:97:
65:b1:1e:ca:b7:b9:03:e8:91:d2:ac:53:ac:93:d1:
dd:e6:11:c9:c7:52:84:30:f1:1d:04:af:6b:5f:50:
22:fe:e2:9c:ba:a3:d7:88:2b:c6:40:e9:96:03:5f:
45:3b:d1:ba:98:81:f4:75:0c:e0:70:eb:62:13:b8:
db:64:2a:fd:6e:df:53:83:12:2b:d6:4e:a8:51:de:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:C1:C2:C1:64:66:DD:E0:B1:D9:69:9E:96:88:A0:4D:53:B9:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F011C18076D011F08A071DC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.60.0/22
Signature Algorithm: sha256WithRSAEncryption
91:c3:a0:88:6f:54:2b:78:c5:62:bb:c9:4d:fb:32:c9:7a:2d:
3f:51:b1:17:cf:9b:30:37:93:14:47:24:f7:6e:b1:b5:3d:64:
cb:5d:53:6c:60:43:79:3c:e5:75:74:c0:e3:5c:96:cd:e9:54:
43:98:4c:bc:4d:1a:c4:af:05:aa:68:db:de:a4:fb:c6:84:d0:
b2:3f:b0:c5:c8:b8:e4:fd:9d:a4:45:9d:a5:2a:ed:8f:78:25:
84:3c:1a:2b:2c:c6:9c:cc:d7:27:fc:2b:93:0f:27:a7:da:55:
32:23:0d:b1:d3:f0:2e:bf:f7:f9:3b:86:f0:61:32:c2:f4:0b:
27:65:b0:65:b8:86:f3:51:f5:30:02:4c:9a:d9:73:4d:4e:83:
09:83:fd:d7:96:db:8a:d5:a7:87:9c:7c:e8:95:0f:e3:38:3a:
a5:92:de:89:43:c2:86:23:19:06:cd:b0:b0:14:f3:f6:43:3d:
4e:7b:15:80:ed:76:89:8c:e8:b3:b3:8b:54:5c:b0:25:90:41:
c6:51:22:aa:5d:f5:18:3d:04:fa:41:f6:b6:82:79:ca:b6:e5:
2c:bf:18:6b:07:a8:fd:37:fa:4a:0a:1c:6a:81:26:3c:cc:19:
e2:36:43:5d:7b:20:8e:3d:37:cd:19:8b:19:2c:39:45:2c:fb:
82:ab:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:15 2025 by rpki-client