Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F471AE9C7E8D11F0A39905D4DAE4EC9C.roa
File: F471AE9C7E8D11F0A39905D4DAE4EC9C.roa (raw, json)
Hash identifier: S55wMO8eNhapclekUAoKqJYKmJ0uhLR2wP03jJJowoU=
Subject key identifier: D7:FA:AB:6C:B6:38:6E:C3:16:DA:77:71:18:1F:B3:85:E4:CE:6B:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F471AE9C7E8D11F0A39905D4DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 12:54:21 +0000
ROA not before: Thu 21 Aug 2025 12:54:14 +0000
ROA not after: Sat 27 Sep 2025 12:54:14 +0000
asID: 6079
IP address blocks: 45.197.240.0/20 maxlen: 24
45.198.185.0/24 maxlen: 24
45.198.186.0/23 maxlen: 24
45.198.188.0/22 maxlen: 24
45.198.192.0/24 maxlen: 24
45.203.139.0/24 maxlen: 24
45.203.196.0/23 maxlen: 24
45.203.198.0/24 maxlen: 24
45.203.210.0/24 maxlen: 24
45.203.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93759 (0x16e3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 12:54:14 2025 GMT
Not After : Sep 27 12:54:14 2025 GMT
Subject: CN=68a716fd-a820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:5b:de:9b:4e:16:cb:ac:7b:fb:9c:be:aa:
70:75:ce:1c:e0:e4:5d:7d:8f:52:e1:63:ba:04:f2:
aa:80:7a:95:47:5c:f6:ad:7c:ae:71:3b:38:d8:39:
23:ae:b2:f6:c0:d7:c3:2b:5b:86:d0:b0:a5:8a:40:
da:56:b3:e9:fa:a1:bf:1f:54:52:40:92:c3:96:41:
b0:7d:92:8c:58:13:d0:e9:29:4e:8d:22:3e:f9:ea:
d4:bc:03:fe:64:c5:38:b1:7b:83:5a:42:31:33:32:
11:3f:7e:a8:18:8b:2b:ab:20:7d:fa:29:54:e8:2c:
bb:82:12:f2:1d:8b:7c:80:cb:fe:23:90:1f:7a:62:
23:95:8e:05:7a:04:3c:da:06:42:1f:d9:59:b8:a4:
cb:23:10:cd:35:81:e4:8d:b8:d5:ac:fe:74:41:12:
eb:f7:dc:02:b4:23:3f:8a:9d:cc:03:47:da:78:51:
ce:88:b1:53:02:c7:d9:11:86:04:67:26:49:c2:d5:
bf:f6:16:da:d8:7f:47:67:33:79:59:56:3d:49:a9:
47:73:cc:75:a9:49:a8:2a:7d:02:5e:be:01:29:5a:
01:24:6d:d9:a2:85:29:51:85:8b:c7:ed:04:4f:dd:
03:9f:1b:e4:5a:32:b9:78:08:35:0a:aa:d1:06:12:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:AB:6C:B6:38:6E:C3:16:DA:77:71:18:1F:B3:85:E4:CE:6B:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F471AE9C7E8D11F0A39905D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.240.0/20
45.198.185.0-45.198.192.255
45.203.139.0/24
45.203.196.0-45.203.198.255
45.203.210.0/24
45.203.221.0/24
Signature Algorithm: sha256WithRSAEncryption
06:70:57:db:07:da:ba:5a:cd:f5:c0:88:56:97:f8:0f:46:5a:
e2:7c:e2:b8:aa:5e:fc:5b:c0:65:bd:4d:9d:34:8f:cb:cf:e2:
5f:56:01:1f:da:53:4c:e1:9d:52:51:38:a0:14:c6:0b:ab:56:
d4:dd:c2:e9:f3:0a:cf:0f:1f:fc:30:c8:04:db:76:9b:ab:08:
a3:b5:58:38:15:da:ba:6f:ef:7a:91:d9:5e:88:3d:bb:54:0d:
fd:30:65:f4:3c:eb:54:7d:45:88:95:9e:14:5d:4f:c6:3a:32:
3f:a3:eb:cd:ee:85:c7:5e:6a:af:b7:b7:35:89:c7:e0:65:8e:
00:87:8d:f1:62:4c:b3:22:22:eb:47:c5:b5:e5:9f:9c:cf:6d:
0f:17:1e:da:b8:9b:f5:43:8b:55:04:d7:4a:70:92:ef:6d:b7:
bf:f7:00:ca:b7:49:05:30:98:6e:0a:e0:bd:35:df:2f:60:f4:
70:27:d2:be:f7:4b:23:87:6c:37:98:d5:38:bb:1d:a8:95:f1:
f0:02:22:ce:49:01:fb:e7:58:fe:ce:15:d9:d4:a2:f7:b5:d3:
2e:62:ec:39:08:f9:c2:bd:c2:dd:6d:bf:61:e5:1e:99:6d:4a:
69:82:15:0d:ff:5e:93:12:af:18:a0:8e:5d:dd:3a:3e:0e:de:
26:b5:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:26 2025 by rpki-client