Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29A7BB166FEC11F0B02D96D3DAE4EC9C.roa
File: 29A7BB166FEC11F0B02D96D3DAE4EC9C.roa (raw, json)
Hash identifier: fiMRqleTkDY+QUMOZ/kuXBHg6/i2MizT9UtPEQiVGCU=
Subject key identifier: E2:79:4C:77:72:5B:EC:CC:D2:B7:FE:90:F6:F9:47:BC:9B:D3:F3:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29A7BB166FEC11F0B02D96D3DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 22:00:55 +0000
ROA not before: Sat 02 Aug 2025 22:00:50 +0000
ROA not after: Wed 17 Sep 2025 22:00:50 +0000
asID: 398823
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92402 (0x168f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 22:00:50 2025 GMT
Not After : Sep 17 22:00:50 2025 GMT
Subject: CN=688e8a97-1577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:7e:c6:cc:1c:ae:45:58:4f:8b:18:b1:ac:
76:f8:80:a2:24:79:a9:79:75:2f:7a:1b:a0:56:12:
63:02:38:4c:1a:91:f7:b0:94:30:46:94:2c:b7:68:
50:1d:b0:60:2f:65:4e:77:5e:da:9d:27:34:49:b9:
25:ff:a9:c3:96:8e:8c:66:f6:b8:6b:5b:ce:f2:80:
a4:f2:3d:01:98:49:81:b1:80:9a:fe:db:81:a7:26:
47:55:11:f9:f1:83:ab:76:bf:0e:6e:a9:af:25:d6:
1e:c8:76:c7:90:23:3d:fc:6b:7c:d0:0f:34:cd:e6:
c2:da:49:b5:ed:ae:86:be:fe:62:8f:1b:6a:a3:5e:
ee:b1:50:8a:23:8d:f6:9a:10:04:78:18:eb:0b:17:
2f:6d:99:62:b4:07:19:b5:ff:8b:e3:b0:1d:c2:60:
44:1b:4b:64:31:a2:91:e6:ba:87:23:86:b7:79:dc:
67:39:2a:96:ea:71:ea:04:b6:0e:5d:e1:6a:58:48:
5f:4c:5f:6a:c6:c9:47:22:1b:f3:52:92:6e:dd:27:
83:35:eb:cb:9e:fe:55:2a:ef:e4:08:38:24:cf:8b:
00:54:af:07:74:45:c6:a6:3a:80:18:40:c0:85:c3:
8d:bb:75:8f:e7:18:30:5f:7d:25:06:03:7a:d9:f6:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:79:4C:77:72:5B:EC:CC:D2:B7:FE:90:F6:F9:47:BC:9B:D3:F3:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29A7BB166FEC11F0B02D96D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
38:9c:f2:17:76:c8:7d:43:4c:2b:80:c2:bd:a3:61:c5:80:ae:
90:e4:a6:6f:0a:cf:e6:14:dc:b0:90:c2:51:1b:af:89:f9:1d:
15:ed:70:ba:0b:94:e7:cb:cc:82:4b:6b:b4:21:c5:fa:32:1b:
33:42:44:b8:cd:b1:c1:02:b4:37:1a:9f:22:b2:31:44:51:97:
95:10:22:e7:96:ce:01:67:f9:96:13:d3:02:dc:66:26:b6:80:
42:49:63:83:e9:bc:e1:38:7c:20:22:89:3f:04:49:03:3e:b1:
c4:d2:6f:12:9b:bd:aa:84:f2:4c:0b:0a:52:47:06:0c:5c:fb:
12:44:ef:31:19:19:f4:35:cb:f8:d5:1e:5b:b3:0d:51:b2:d4:
dd:9a:83:28:d5:42:96:5e:cf:4b:1f:62:1b:3e:e0:51:8b:43:
8b:53:42:66:89:a9:cc:66:72:63:62:3c:b0:0b:b0:c0:ec:7f:
c8:6b:b2:2b:80:83:aa:90:45:a4:28:63:f3:f1:7c:ba:8a:54:
25:9d:79:e9:cd:55:64:ec:5b:96:ad:9b:92:c1:15:82:a5:50:
f4:f1:bb:05:08:42:5a:0b:89:41:d7:63:7c:8d:77:db:15:ac:
25:15:e0:ea:f1:89:ac:ad:3b:8d:60:46:53:c6:bf:6c:f8:d8:
9c:3a:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:50:09 2025 by rpki-client