Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06ED0D8A573F11F0A2B467C6DAE4EC9C.roa
File: 06ED0D8A573F11F0A2B467C6DAE4EC9C.roa (raw, json)
Hash identifier: oH8jUv6myjg6tDHuaI7eoD0e3RuqN1WMXRFAreFINlM=
Subject key identifier: 2B:1F:50:DA:70:EB:6A:1F:9D:89:13:54:9D:6D:75:AD:74:C4:02:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016014
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06ED0D8A573F11F0A2B467C6DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 12:21:06 +0000
ROA not before: Wed 02 Jul 2025 12:21:00 +0000
ROA not after: Thu 23 Jul 2026 12:21:00 +0000
asID: 136744
IP address blocks: 45.206.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90132 (0x16014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 12:21:00 2025 GMT
Not After : Jul 23 12:21:00 2026 GMT
Subject: CN=68652432-8b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:4c:c4:ef:b1:ac:d9:f9:79:0f:15:4e:34:
ac:fa:b9:c8:00:42:57:46:f3:4d:17:3e:41:77:b9:
bd:7b:fb:c4:cf:c0:38:53:31:02:0d:a5:5b:3d:ed:
df:ff:8e:ad:81:6d:89:91:fb:ae:8a:73:4b:60:be:
27:82:ed:f4:29:cb:50:ca:d0:ec:cd:40:f3:06:31:
5d:90:1e:42:5b:f1:83:57:3c:e2:db:16:eb:94:bd:
c1:68:1d:67:b7:d0:c9:75:a3:0b:a7:98:c0:c5:48:
20:a1:26:6b:0d:2d:e0:70:84:2e:18:1f:d7:33:09:
34:6b:1b:d8:be:1b:11:9e:ee:19:86:99:4c:48:ba:
61:35:df:b0:b6:e1:e8:00:3e:7e:ac:66:2a:24:08:
f3:6d:7a:e2:69:38:97:3d:1d:98:4d:c3:5c:33:e2:
02:44:39:b4:58:35:63:50:02:7c:3d:50:38:34:5d:
03:05:f6:1f:7e:e5:a1:fa:6b:2a:e2:35:29:24:0d:
8b:55:14:33:f1:22:d6:5c:93:33:18:47:f1:9e:ab:
31:75:1f:8f:a3:1b:67:c1:39:81:72:05:d4:87:f9:
e7:01:81:8a:93:9c:2d:ae:13:17:17:98:b7:a6:96:
33:d1:d7:4d:81:98:9f:9e:95:87:f1:f5:52:44:af:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1F:50:DA:70:EB:6A:1F:9D:89:13:54:9D:6D:75:AD:74:C4:02:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06ED0D8A573F11F0A2B467C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:44:9b:f5:55:1e:83:3b:e9:a6:ba:27:90:3f:12:73:63:5a:
a3:6b:a0:b7:fe:90:66:7f:ea:89:8a:89:ef:9a:ff:c3:e7:44:
76:cb:b8:f2:be:48:8d:b8:b8:86:bd:f1:9f:3d:a6:64:86:71:
d4:ab:60:d6:51:9c:94:24:b5:68:7f:ca:98:71:a6:9e:d5:5a:
eb:4c:94:66:e9:65:5a:e3:6f:8b:c5:c0:69:5e:de:40:cf:5a:
cf:4c:28:d2:4f:07:11:5e:ae:1d:6f:69:c0:52:fd:99:96:3c:
15:20:71:4c:85:8b:39:cc:fa:6c:a3:03:3d:4b:78:c5:99:d1:
1b:be:b8:9d:e4:a9:46:11:d5:78:2d:c0:0c:9b:21:a6:82:46:
13:ee:5d:df:3c:86:ea:58:00:a8:2f:cd:99:f6:11:da:d3:ad:
03:8f:58:f8:2a:ec:04:2b:bb:d0:9b:a6:93:c7:68:90:7f:61:
55:db:46:78:3d:5f:f5:68:c7:10:53:71:60:6d:6d:4a:e6:42:
59:09:9e:b5:7f:ae:1a:e0:eb:cc:ec:cb:29:ab:fa:cf:6e:81:
f9:92:85:82:55:f0:d9:20:f2:26:84:a4:f0:35:5e:81:b1:db:
78:10:be:d5:3e:39:d6:1b:fd:3a:be:c7:c9:a4:d2:82:c5:c5:
18:8a:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:29 2025 by rpki-client