Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106531C46D3011F0A3A05192DAE4EC9C.roa
File: 106531C46D3011F0A3A05192DAE4EC9C.roa (raw, json)
Hash identifier: jo/t88DRDWr/TMBs6euuz8cVb2sK9tcYPDOPPim2U74=
Subject key identifier: AF:8A:EE:74:85:1C:A6:77:65:54:0D:99:F5:A3:98:7D:67:2F:E3:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016854
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106531C46D3011F0A3A05192DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 10:29:25 +0000
ROA not before: Wed 30 Jul 2025 10:29:20 +0000
ROA not after: Sun 07 Sep 2025 10:29:20 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92244 (0x16854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 10:29:20 2025 GMT
Not After : Sep 7 10:29:20 2025 GMT
Subject: CN=6889f405-ee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:71:05:80:9b:82:42:46:63:af:67:5a:31:
66:a1:73:52:72:e0:76:d6:53:22:c9:aa:68:b3:ed:
5f:d5:44:27:51:2c:99:01:b9:92:77:32:5b:3a:ea:
cc:fa:b0:4a:3f:de:46:0a:67:f9:51:57:15:e2:05:
b7:bf:a0:4f:92:aa:72:64:6e:10:09:3d:0a:1f:4e:
5e:b0:07:14:9d:ca:f6:02:ca:39:94:d5:8f:0d:2f:
a5:5c:6c:c7:b9:4f:b5:f5:aa:29:9d:c0:a0:ab:47:
c6:6f:36:40:64:28:82:ad:b0:76:44:a4:f6:fa:8d:
8c:96:46:45:17:75:66:ec:68:e3:f1:c4:0c:61:42:
95:45:f7:8f:f2:b3:81:b1:25:77:a4:eb:ea:f7:15:
3c:a8:38:d4:7e:c8:ea:df:ca:58:ca:b9:f4:47:b6:
bd:fc:56:ac:71:3f:80:fb:0c:3b:b9:9b:42:15:05:
c7:25:90:bb:8c:43:99:33:5f:a2:f2:7b:11:73:00:
b7:1d:45:3b:7c:a1:b3:21:33:7b:f3:5d:4d:a8:6b:
d1:4c:11:aa:8c:9f:01:2e:5e:4b:09:03:55:9d:2e:
8c:35:1a:ea:46:30:ad:2c:e9:9b:cc:e2:d6:21:a6:
0d:23:3c:57:70:e9:2f:8d:24:b5:7a:8f:cd:e9:59:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:EE:74:85:1C:A6:77:65:54:0D:99:F5:A3:98:7D:67:2F:E3:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106531C46D3011F0A3A05192DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:21:33:b5:48:35:b0:bd:7c:61:f1:71:60:f0:97:7f:78:70:
c5:cc:f3:58:a7:de:16:88:f1:c4:b2:c0:0e:25:49:c4:d4:e4:
11:35:3d:da:23:4e:87:c2:ee:5f:cd:a6:ba:92:d3:47:09:ff:
5a:ff:c9:ff:8e:43:78:f2:15:de:1a:60:7a:62:40:be:aa:91:
16:3e:03:02:48:1d:2a:e5:5e:11:fc:17:a7:d9:c5:ed:23:09:
96:2b:a8:a3:e2:22:95:9c:8c:5b:2f:d9:5a:e8:c6:cd:ba:53:
ed:fd:38:19:fe:a5:10:6e:fb:50:d0:52:8d:d2:f1:78:61:5a:
21:bd:32:5f:7a:be:d0:25:4f:72:67:85:d3:94:da:32:2d:5d:
fc:98:5c:2c:5f:7f:97:1d:6c:49:8b:49:11:74:5a:53:80:a9:
96:95:43:d3:5c:32:d4:1c:75:3c:7b:54:9c:1f:69:73:cc:12:
d4:fe:e4:8b:58:32:a3:71:2d:ae:1c:34:0f:b6:ce:b3:38:1b:
3d:bc:1b:a6:f3:2d:df:9e:34:5e:f4:1c:70:49:e1:d4:6a:52:
f0:ba:8c:c7:cc:b5:41:dd:e9:eb:0f:cd:b9:0f:2b:49:92:71:
09:42:b6:1b:68:8d:15:13:b7:0a:1e:2e:ef:98:d5:5c:0c:7e:
45:27:80:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:54 2025 by rpki-client