Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36831504706B11F0AFB5DC9ADAE4EC9C.roa
File: 36831504706B11F0AFB5DC9ADAE4EC9C.roa (raw, json)
Hash identifier: 4vtr5zoxuwpvtqj0V69B8NkB1dXetV/q+VOzEjXCfls=
Subject key identifier: 0A:ED:1C:4C:1F:D9:D7:E3:C5:BF:43:14:54:98:FB:BA:4F:2F:40:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016917
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36831504706B11F0AFB5DC9ADAE4EC9C.roa
Signing time: Sun 03 Aug 2025 13:10:23 +0000
ROA not before: Sun 03 Aug 2025 13:10:18 +0000
ROA not after: Tue 30 Sep 2025 13:10:18 +0000
asID: 398823
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92439 (0x16917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 13:10:18 2025 GMT
Not After : Sep 30 13:10:18 2025 GMT
Subject: CN=688f5fbf-dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:ff:b3:92:95:31:61:c4:f5:2f:93:37:86:
64:58:7c:1e:eb:c7:fc:07:f9:27:5b:62:41:62:6b:
3d:52:07:de:43:f7:3d:6e:4a:3f:27:32:b1:ca:ae:
60:e6:34:11:c6:4e:8b:02:d2:a6:ce:77:87:23:52:
76:e9:37:f3:34:16:bd:8b:b8:17:9f:59:7b:95:39:
05:b8:7f:85:86:c6:20:47:c8:58:5c:ac:32:e9:37:
29:04:0f:74:64:93:26:64:21:b4:22:9c:6d:1f:54:
71:b9:d7:c9:13:21:b2:6d:87:21:2a:88:35:33:78:
61:62:80:8f:17:50:c7:8c:1e:87:a5:06:27:81:03:
88:94:d4:90:b4:69:d5:dd:ce:82:af:91:03:f0:b3:
5f:fa:07:2e:ad:81:72:c1:df:63:5a:ec:1b:63:e5:
fa:d3:c6:de:b8:06:33:66:04:2e:13:94:e5:f1:e6:
15:a3:da:be:85:63:52:77:ae:b3:29:24:84:7c:ab:
9e:7c:cb:f2:e1:b1:69:d1:44:fc:06:71:e1:5d:a1:
84:ce:a4:30:d1:df:be:d1:d1:97:36:1f:bd:e5:05:
cd:e7:a2:8a:49:08:53:61:13:1d:dd:f2:87:29:08:
f4:e1:75:50:76:ef:40:07:77:2f:91:83:ea:4e:9a:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:1C:4C:1F:D9:D7:E3:C5:BF:43:14:54:98:FB:BA:4F:2F:40:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36831504706B11F0AFB5DC9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
53:6c:92:cc:4e:7a:64:99:ff:65:7f:ac:ab:4c:33:08:55:ce:
ef:4a:dd:ff:05:d8:d6:ad:ba:ad:40:ef:09:6a:0a:46:fc:a1:
e9:f9:23:bd:5e:4a:61:e9:35:7f:55:cc:08:02:e0:a9:40:a7:
78:86:85:45:36:1f:c4:78:ad:3f:44:f3:c2:6e:b6:f0:72:14:
47:7e:16:a3:54:66:79:e6:39:e8:4f:54:ce:43:40:6c:a6:ef:
e3:15:97:da:cf:4e:c1:30:72:42:25:4d:64:8d:0e:9c:53:82:
45:2c:37:2d:4f:fc:e3:7d:6f:75:e0:19:96:ba:c0:e7:b8:69:
b5:07:43:c8:1d:cf:b4:4c:38:57:b4:9e:da:fa:4f:66:f5:5c:
2f:32:ea:85:80:97:88:01:0a:d8:02:5e:79:75:88:19:88:ee:
75:e4:1d:e7:4f:0f:3f:20:73:43:eb:8a:0a:a7:9b:af:06:59:
82:91:66:dc:78:eb:d1:42:12:3f:9d:f6:0e:a6:09:64:69:f6:
f4:aa:23:93:78:f7:17:f6:b2:c2:64:32:cf:0b:5e:19:0f:87:
1e:30:1f:6d:73:d1:6e:37:dc:fa:87:11:7f:91:1f:eb:47:81:
1e:62:5c:6a:8b:e9:ee:2b:7f:b7:00:85:8c:c7:46:b2:3d:db:
37:df:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:04 2025 by rpki-client