Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BE68B86688911F087408EC3DAE4EC9C.roa
File: 4BE68B86688911F087408EC3DAE4EC9C.roa (raw, json)
Hash identifier: 2xy9jekWmW5MbD5kFBIYQqw403tVfHsEEEN+Smt1J7M=
Subject key identifier: A3:E6:E4:52:4D:F7:52:09:1C:3C:C7:25:EF:E4:7B:12:34:21:C2:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016769
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BE68B86688911F087408EC3DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 12:25:35 +0000
ROA not before: Thu 24 Jul 2025 12:25:29 +0000
ROA not after: Thu 28 Aug 2025 12:25:29 +0000
asID: 44559
IP address blocks: 45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92009 (0x16769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 12:25:29 2025 GMT
Not After : Aug 28 12:25:29 2025 GMT
Subject: CN=6882263e-9f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:a4:97:e5:1f:73:b3:67:95:13:72:ee:52:
e8:67:3e:3a:e9:4b:9b:5c:e9:87:e0:4c:47:2c:18:
e2:22:75:cc:4d:ae:7b:44:64:57:ab:83:fc:d8:6f:
d8:a9:d6:bd:fd:3f:60:21:35:10:3f:a4:34:43:8d:
84:33:d2:ff:f7:2d:43:2b:8c:cf:60:d4:18:8b:bc:
cd:7a:73:7e:15:15:04:35:d6:99:57:00:f2:a0:a4:
bb:24:28:9d:54:96:49:54:9f:ff:2d:28:51:e3:1a:
4c:16:87:e7:3c:ca:a2:7c:1a:8c:ca:c7:3f:3c:ca:
93:01:67:d9:4c:ce:36:c9:4b:6b:7e:bb:5e:be:26:
e8:d0:2e:82:59:08:18:d5:75:cc:69:a7:eb:02:48:
f6:d2:e8:47:75:80:65:90:e6:ae:c0:25:16:3e:dc:
99:19:7b:df:bd:17:f3:56:39:6b:9b:1b:3c:4c:b4:
d5:fd:a6:bc:d4:26:96:17:cc:11:28:80:65:73:47:
2a:d1:ac:00:dc:94:7d:bd:ad:19:2e:1f:b3:e6:30:
39:62:6d:5b:f4:ac:c7:c7:9f:67:eb:67:2a:90:6a:
f2:d1:87:dc:d6:0e:b8:c6:69:a4:4a:f9:a3:4b:51:
61:83:2a:2c:13:ba:d0:9d:9e:b1:ae:10:55:30:00:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:E4:52:4D:F7:52:09:1C:3C:C7:25:EF:E4:7B:12:34:21:C2:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BE68B86688911F087408EC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.211.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
0e:81:25:87:60:d9:28:3c:26:b8:f3:98:19:2a:b4:d0:76:08:
5f:52:4c:be:a9:e5:c3:9c:65:68:14:d2:5a:92:fe:46:23:29:
1a:ab:bb:a6:e6:7f:09:79:3f:6e:e2:d3:fb:f6:bc:d7:38:34:
58:24:1d:97:af:91:d2:ca:14:2b:10:cb:52:e2:1f:41:1e:e1:
94:74:21:6a:f2:60:77:da:e3:0d:2a:7b:0b:8c:7d:49:e2:34:
20:96:0d:16:1a:30:0c:8a:ea:3d:e3:e8:64:a4:3a:54:7b:ce:
a6:41:17:56:8a:c5:98:78:4e:98:1f:9a:9e:c2:92:92:12:20:
39:bb:cd:1c:cf:b7:43:0c:54:55:8d:96:bd:db:c2:21:f1:05:
99:b0:d4:54:d8:1d:93:e3:c8:77:02:5b:fe:6e:ad:de:b0:40:
f6:0b:ea:9a:bd:07:e2:f7:78:e4:23:b2:97:56:8f:71:5a:f5:
23:cb:ae:83:b7:a8:dc:15:aa:7a:0b:f0:3d:5a:03:d4:d6:6e:
11:c9:a1:a3:d0:51:41:42:de:75:39:3f:0b:fb:5c:ef:63:1f:
52:a8:23:f0:bd:b7:9f:e8:94:4e:7b:88:85:59:f6:70:4d:42:
d2:ad:d1:b1:9f:64:c9:d4:13:4f:06:0c:e8:dc:10:c9:04:0e:
95:10:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:48 2025 by rpki-client