Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029C587C41EF11F0B9105691DAE4EC9C.roa
File: 029C587C41EF11F0B9105691DAE4EC9C.roa (raw, json)
Hash identifier: 5KL888Xhu6ECAPe5VgX5+uw0HzxFA9mhctErtKwyb6c=
Subject key identifier: 4E:BC:78:D3:E2:B3:66:7B:58:87:39:7F:28:FE:29:76:E5:22:16:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029C587C41EF11F0B9105691DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:25:25 +0000
ROA not before: Thu 05 Jun 2025 09:25:20 +0000
ROA not after: Fri 11 Jul 2025 09:25:20 +0000
asID: 203020
IP address blocks: 45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 08:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88548 (0x159e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 09:25:20 2025 GMT
Not After : Jul 11 09:25:20 2025 GMT
Subject: CN=68416285-c799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:2b:a1:d4:53:41:83:c4:98:e8:05:12:6f:
8f:fe:3e:ff:e7:d9:4f:2f:cf:88:b4:8f:56:c3:f2:
66:b2:9d:c2:5a:75:ed:d8:b5:fc:d8:f6:10:60:b0:
38:2d:94:59:6f:d7:44:ba:1c:20:eb:48:61:c7:02:
8d:0c:5a:b9:d6:e0:08:c6:86:f4:3c:d3:e0:5b:31:
bf:b0:f2:3a:c2:a9:18:f1:21:f1:bb:97:f6:02:fe:
f2:1b:e1:75:22:1f:32:ca:ee:04:47:6b:d3:d7:3b:
a1:71:60:c3:be:9a:e4:50:b1:90:66:f7:e5:5f:9e:
96:f4:2d:cd:55:33:83:5c:16:ba:cb:c6:b3:44:05:
50:91:b8:49:c7:c8:72:92:e2:2e:8a:70:33:a9:75:
f6:06:3e:64:2a:4c:3c:be:95:42:86:f0:76:df:92:
eb:e1:e6:cb:d5:a6:76:e4:d1:c9:c6:9d:3d:4e:cd:
dd:95:ae:a3:eb:18:e2:a4:85:67:e3:4c:c3:5e:f6:
40:9f:11:4b:ff:b4:60:89:d4:22:3a:59:8c:b4:c9:
16:25:cd:01:f6:82:39:e0:99:ec:45:dc:c8:f9:c7:
ad:0c:d7:c7:5c:62:6b:27:26:a9:82:a3:57:e7:ea:
f4:4e:4e:f4:f2:17:c8:e6:1b:3f:f5:46:13:a7:8c:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:78:D3:E2:B3:66:7B:58:87:39:7F:28:FE:29:76:E5:22:16:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029C587C41EF11F0B9105691DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3d:8a:99:e5:26:c1:70:6b:e1:03:e6:69:2d:8d:66:1c:9e:
a7:d1:ef:22:22:c9:09:b8:d5:32:2d:4a:4c:52:95:19:97:ff:
de:c3:72:0a:57:02:ef:f8:b4:51:07:ae:74:11:e6:5c:04:bf:
1c:15:ba:26:86:76:3e:24:bf:d6:94:e4:08:cc:00:0c:55:cb:
91:00:b7:ce:db:97:49:ff:ed:b4:59:28:83:2e:74:ec:39:ef:
66:c7:c2:b8:21:23:28:5e:85:dc:c7:67:38:f6:6c:c6:bc:d1:
24:04:25:e8:8c:73:5d:92:6c:0c:9b:d4:4b:9f:7c:81:66:15:
95:52:71:ad:bf:b8:00:f9:b3:d1:91:42:2b:9e:81:d3:86:03:
52:91:fd:6e:fa:7b:21:0d:c6:65:f3:86:b4:e9:24:53:aa:39:
ca:a9:97:18:7e:95:84:ce:a1:9c:ff:14:53:86:3f:e1:34:44:
59:b3:61:6b:41:58:ba:97:d0:ae:af:71:81:37:03:be:d2:f4:
ab:0a:0d:cb:92:63:a1:1d:e3:05:02:d4:1d:64:73:be:09:6d:
fe:43:4f:02:ba:8d:93:0f:d2:c6:dd:f0:47:8f:5d:7d:a8:8f:
1b:3c:72:f5:b5:e7:fc:62:1a:73:d3:a6:ea:35:d0:e6:65:96:
15:55:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:33:18 2025 by rpki-client