Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02E306506F9411F094CA2EA0DAE4EC9C.roa
File: 02E306506F9411F094CA2EA0DAE4EC9C.roa (raw, json)
Hash identifier: kP3HSwVg7bNgjc2aoLiRWJN440R2awYqwj3Epg6Z5ac=
Subject key identifier: 30:68:BB:DF:4A:ED:61:E0:C1:84:2A:20:E2:28:BC:75:0C:7F:C4:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016874
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02E306506F9411F094CA2EA0DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:29:55 +0000
ROA not before: Sat 02 Aug 2025 11:29:50 +0000
ROA not after: Sat 06 Sep 2025 11:29:50 +0000
asID: 141883
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92276 (0x16874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:29:50 2025 GMT
Not After : Sep 6 11:29:50 2025 GMT
Subject: CN=688df6b2-4ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:16:52:09:f9:86:1b:cd:e1:d4:9b:74:92:
51:da:6f:cf:1e:4a:ed:50:cb:01:59:a9:13:a4:97:
ad:e8:5e:bd:8c:81:51:fc:50:c4:a3:e7:02:b3:a6:
00:85:cc:89:0c:d4:e1:a1:31:cf:46:79:1b:c9:c4:
b4:6e:93:aa:66:98:58:80:92:ae:fc:d7:d3:35:df:
1c:01:ed:9c:3c:fb:42:b4:2c:fa:01:e6:a2:bc:d5:
59:21:40:e5:ed:79:56:b5:ce:f2:b1:92:32:8f:16:
96:ac:ef:a6:13:0f:aa:d6:9d:0a:a7:90:d3:66:5f:
33:2e:54:5f:69:e9:68:77:e6:f9:52:29:8e:4c:67:
c2:4f:14:af:90:f3:fe:c9:44:cb:d5:b9:07:3e:0f:
7b:60:c3:35:50:2c:9f:7f:57:6d:94:1d:25:f6:d2:
04:4e:ad:42:a3:be:74:4f:3d:f3:0e:83:a9:c6:13:
9a:bd:b4:3f:01:2b:cf:42:15:2f:e6:39:54:45:99:
d8:ea:b8:cc:75:d3:61:14:23:62:df:87:1c:8f:60:
6d:1e:bc:f6:c9:b1:99:32:f5:e0:99:64:65:ad:fd:
44:2d:06:53:25:19:c2:88:e8:f0:dc:42:d0:b1:83:
11:3c:63:e3:b5:bd:a4:84:6a:ba:43:28:2a:60:46:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:BB:DF:4A:ED:61:E0:C1:84:2A:20:E2:28:BC:75:0C:7F:C4:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02E306506F9411F094CA2EA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8c:3d:5a:db:ee:b4:80:b3:6c:49:08:c0:c1:0f:36:36:2b:
3a:05:05:8a:09:e8:30:56:f9:4a:c6:25:45:41:ee:2a:67:f2:
aa:47:b7:df:47:1e:c4:7f:31:25:10:d7:60:b0:e8:dc:92:e8:
f0:80:d8:3e:af:2a:8b:0a:30:72:db:b5:30:ec:4e:4c:bf:14:
48:33:9d:c6:da:14:06:b0:de:2b:5d:9d:41:d1:ef:20:d6:42:
3b:59:33:d4:24:fd:33:82:04:74:15:2e:1f:62:cb:0b:03:61:
7f:56:aa:a9:0e:9f:2b:40:bc:66:86:94:b3:c2:68:01:d7:c7:
9a:48:da:b7:a6:2a:2a:fc:90:cd:73:a2:e6:8c:6b:e0:fa:07:
57:7b:60:1e:aa:80:a4:84:b0:ba:4f:80:6a:d0:08:1d:34:f0:
de:e9:fe:2a:49:67:a2:f0:98:07:6b:34:8a:cf:cb:a3:f0:77:
c7:e7:c3:1c:e1:83:e4:35:03:4f:95:f6:07:92:d6:4b:84:8a:
50:86:39:38:3d:f4:ad:1b:0e:80:97:60:40:e0:fb:7d:26:c8:
2b:88:37:95:7b:b4:d5:fc:15:c1:0d:ca:32:c2:3c:0c:f8:6d:
3b:ac:29:25:f9:25:f2:31:35:21:1b:1c:c0:61:59:4a:d3:54:
b8:3c:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:27 2025 by rpki-client