Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51DAB627E8711F0BA2D04ABDAE4EC9C.roa
File: F51DAB627E8711F0BA2D04ABDAE4EC9C.roa (raw, json)
Hash identifier: NbEtLeUp9fiNIMZR+jwXJQuybif9lsCqbT/0jLiijp4=
Subject key identifier: A9:5B:61:80:4C:3D:41:37:30:44:AF:8F:26:E6:9B:64:19:51:18:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51DAB627E8711F0BA2D04ABDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 12:11:25 +0000
ROA not before: Thu 21 Aug 2025 12:11:20 +0000
ROA not after: Fri 26 Sep 2025 12:11:20 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93743 (0x16e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 12:11:20 2025 GMT
Not After : Sep 26 12:11:20 2025 GMT
Subject: CN=68a70ced-d5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:8d:fa:cb:db:ae:c0:0d:2f:4d:0a:fa:f9:
e8:77:e2:c8:47:22:83:aa:28:fd:2f:cc:b2:58:1c:
b9:f0:36:23:10:a0:64:9f:0d:ca:fb:63:06:d8:81:
f4:ab:c4:9c:cc:54:3f:39:6c:67:49:43:4d:92:dd:
60:f1:7c:4b:68:38:ef:44:ac:8e:4d:04:ac:77:87:
cd:2a:12:94:e5:e5:2b:69:71:7b:00:91:ba:fe:30:
4b:f0:73:20:2f:ea:9d:24:ce:d4:c4:58:10:89:5b:
50:e0:ba:f3:35:84:46:ec:99:b8:5c:7a:48:d2:8c:
36:00:68:21:6c:26:18:6e:d9:da:7b:a1:77:8e:fa:
59:88:e8:37:f6:b6:b8:8e:9f:8e:15:21:84:91:a4:
fc:27:63:b9:82:3c:4f:b5:b0:75:d6:11:5d:0b:cc:
7f:65:9e:a6:bb:49:e5:d0:da:02:3b:8f:bb:a7:e4:
b1:8f:17:6a:ef:16:0c:98:62:8a:de:e6:16:25:c9:
c2:ab:f3:c7:ae:69:1c:c3:50:47:54:c7:01:83:18:
b0:38:9c:14:ee:5a:e2:04:5e:4a:52:eb:00:d3:78:
35:6c:93:bb:0e:7f:9c:3e:f7:e0:fa:6d:d7:98:40:
be:d0:b7:c0:75:9b:4e:e1:49:07:ce:ae:39:f9:3f:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:61:80:4C:3D:41:37:30:44:AF:8F:26:E6:9B:64:19:51:18:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51DAB627E8711F0BA2D04ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2c:0a:16:ec:7a:16:f2:8d:e4:61:a3:51:c0:c1:31:82:e6:
be:00:10:7a:fb:24:82:c3:bb:b4:9c:0d:44:0b:11:82:d7:03:
e5:25:0d:4c:ae:9b:29:1d:8a:6a:68:46:11:6c:25:cc:fe:76:
f0:31:7a:ec:93:0d:12:e3:d5:d7:e9:2e:c1:97:5d:0a:06:79:
ee:3c:9d:dd:f4:b2:e0:8f:e0:b8:93:39:20:49:31:aa:a8:c0:
38:15:ac:ae:5d:68:3e:fe:3b:46:b1:8b:a7:f9:b0:07:0e:c1:
80:86:40:1f:a3:f3:2d:a6:cc:cb:14:7f:03:80:f3:54:29:5d:
9a:3a:e9:c5:fc:9f:d2:79:d2:50:4e:f5:9d:3f:a8:3c:dd:ce:
70:45:99:99:71:66:b3:60:62:01:31:c8:d9:ec:67:88:ba:58:
4b:58:58:44:1a:bb:df:6a:9c:8d:09:05:3f:cd:da:cf:99:b2:
1c:a1:60:14:bb:ae:91:bf:fd:0b:d5:7e:e0:ea:50:ca:2c:c9:
9b:0e:9e:b0:47:ed:d1:89:28:93:92:8b:8a:8e:82:8f:7d:d0:
3f:a8:d5:fe:98:df:26:ad:7c:44:0e:79:d0:2c:ee:a6:36:4a:
57:ce:f5:40:37:29:51:3d:84:19:0f:3f:6f:6d:aa:27:85:9b:
c0:cd:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:58:42 2025 by rpki-client