Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2F3726706311F0AC4096E7DAE4EC9C.roa
File: 4E2F3726706311F0AC4096E7DAE4EC9C.roa (raw, json)
Hash identifier: vgKaDKNQkX5ZARw9KhZXOhsmuQtz2YWWfsqvXqCr2y0=
Subject key identifier: E8:92:6F:E4:57:0B:59:47:74:26:B0:FB:4C:B4:5C:52:00:B9:7F:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01690B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2F3726706311F0AC4096E7DAE4EC9C.roa
Signing time: Sun 03 Aug 2025 12:13:47 +0000
ROA not before: Sun 03 Aug 2025 12:13:42 +0000
ROA not after: Fri 12 Sep 2025 12:13:42 +0000
asID: 272854
IP address blocks: 45.195.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92427 (0x1690b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 12:13:42 2025 GMT
Not After : Sep 12 12:13:42 2025 GMT
Subject: CN=688f527b-1852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:af:c5:81:7e:4a:c2:b9:50:bc:6a:9f:cc:
eb:1c:13:17:6b:59:21:4f:26:45:93:37:90:55:96:
3c:16:cb:54:81:64:4d:17:26:7c:59:d4:ba:1f:79:
a8:d6:fd:26:9c:1b:f4:ac:9b:a4:cf:00:6c:02:1c:
a2:f6:cf:49:d9:f5:6f:6a:df:e4:bc:ca:6d:27:26:
9c:3b:e9:fc:c4:7b:9b:55:bd:58:51:fe:10:19:41:
95:0a:1f:a7:b4:f8:6e:32:98:2e:6d:3e:e2:88:9c:
e5:ae:ea:ff:c6:d3:f8:42:e7:27:36:d6:9d:a0:76:
a6:9a:06:43:87:33:bb:81:cc:a1:84:23:8b:a9:4c:
4b:41:cd:a9:05:88:e5:c9:71:2c:31:5a:58:3f:6d:
bb:be:0a:d6:14:98:57:32:4a:23:41:8a:c8:d8:b4:
30:39:7d:de:f0:a5:89:f0:9b:4c:1d:4a:76:d5:b3:
ca:a5:c3:17:6f:5e:a3:a5:9a:c1:cb:7b:1a:8e:24:
66:26:38:02:fb:86:ff:01:a7:a7:fc:ff:62:41:f7:
ff:5b:f9:15:1c:b2:2d:67:14:c4:4b:65:75:25:85:
ab:8e:0d:e5:1b:dd:f4:0d:f8:16:7c:9b:a5:5f:ed:
36:27:05:da:6b:22:59:78:f0:99:42:ec:0f:42:ad:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:6F:E4:57:0B:59:47:74:26:B0:FB:4C:B4:5C:52:00:B9:7F:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E2F3726706311F0AC4096E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:d1:9c:c7:d8:3f:bd:58:fe:a9:e7:b9:57:cd:07:cc:4c:8b:
68:bd:1a:a9:2d:1d:df:1d:2b:ef:28:ea:22:e6:23:d0:68:f2:
0f:24:4d:e6:a1:da:4f:93:c4:63:54:40:61:8f:c1:18:53:33:
cc:7a:8e:53:e1:8c:3e:69:0b:b0:4a:94:89:6f:1c:72:e8:08:
76:73:bb:59:3d:1b:67:c5:f1:60:53:12:10:bd:85:f7:97:76:
40:bc:35:12:0c:62:30:ec:ae:96:43:cf:53:e6:80:7c:15:b9:
23:5c:8d:c7:b8:43:6d:09:fa:28:e2:36:61:e4:4a:1f:0e:78:
5d:ad:90:9b:47:48:37:e6:89:25:64:f3:1c:e0:82:31:e4:5c:
d1:4b:b8:6e:0b:31:70:4e:d4:e0:f0:63:39:05:0b:e3:f6:0b:
42:75:c0:a1:a1:8a:0a:0a:2e:94:5d:08:21:a0:60:99:55:6c:
3a:0b:f3:8b:64:33:3c:9e:01:7b:0a:29:45:e4:c7:fa:d9:a0:
d5:49:c8:02:a0:11:0c:1c:d7:8d:37:3d:f1:a3:c8:59:ea:1d:
a9:83:61:92:bf:b9:3a:06:18:5d:c7:d4:b5:e3:80:c4:b6:75:
80:00:f2:aa:05:b6:65:4d:ad:f0:39:25:0c:d7:d3:b2:f3:96:
85:f4:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:30 2025 by rpki-client