Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/606AB2466B8E11F0A25A1DF2DAE4EC9C.roa
File: 606AB2466B8E11F0A25A1DF2DAE4EC9C.roa (raw, json)
Hash identifier: xxrKf+gSucpFW1MkCTUwyU7rpRW621/fuhDmeFkH1d8=
Subject key identifier: 74:29:72:E9:CA:93:A0:5D:BF:15:2D:5F:8D:37:21:B6:C1:65:B0:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/606AB2466B8E11F0A25A1DF2DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:39:30 +0000
ROA not before: Mon 28 Jul 2025 08:39:25 +0000
ROA not after: Sat 01 Aug 2026 08:39:25 +0000
asID: 135405
IP address blocks: 45.199.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92124 (0x167dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 08:39:25 2025 GMT
Not After : Aug 1 08:39:25 2026 GMT
Subject: CN=68873742-da73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:92:60:21:69:64:c0:80:ab:f9:ca:a4:42:
7b:f0:65:e1:e7:93:9d:73:df:47:a1:a5:92:78:57:
90:21:a7:83:a5:72:17:5c:17:7d:43:0f:21:f2:1e:
9f:23:65:24:d7:bc:14:71:d9:e9:a1:12:a3:4a:0d:
db:e5:d7:7b:49:3c:b6:ff:f7:3d:99:98:89:ea:4e:
75:97:35:f1:9b:b3:4e:cf:5d:61:c2:96:b7:13:d9:
28:dd:e6:27:3b:c6:7e:1c:b3:2d:1f:bb:69:bb:d3:
c2:15:19:a2:b0:9c:43:24:bc:ce:86:80:79:c8:55:
85:c2:b4:c2:3d:86:5e:89:38:e6:c8:fd:df:7b:56:
0b:53:92:57:fd:78:87:8f:5c:97:67:5e:e8:8e:ad:
68:58:63:c4:e7:12:ca:5c:b3:3b:e7:1e:ed:2f:e9:
df:81:04:4b:13:c4:70:bf:9a:e1:10:7c:4a:d1:e4:
2b:10:b2:dd:15:9f:a0:74:70:11:49:ae:1a:93:0b:
15:c1:12:67:64:4f:be:03:58:98:6b:65:a5:ed:23:
a9:3f:61:42:07:70:f8:9c:b4:5e:80:9a:77:ab:0b:
27:97:54:d6:ac:68:19:8a:9f:30:f2:96:08:13:10:
ec:ae:3c:50:bc:90:8e:79:6e:27:69:0b:21:9f:bf:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:72:E9:CA:93:A0:5D:BF:15:2D:5F:8D:37:21:B6:C1:65:B0:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/606AB2466B8E11F0A25A1DF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:24:68:93:dc:4c:a6:1a:fa:76:f4:fe:89:e9:a2:44:b2:24:
4c:17:89:05:0d:bd:2d:3f:56:43:81:8c:89:59:4d:42:93:27:
b0:dc:e6:cb:73:c2:31:b3:d1:07:5b:3d:12:df:6e:81:84:c6:
bb:9f:fc:68:3f:17:bb:15:5a:96:25:bc:f5:e0:ac:ad:aa:21:
f5:34:cf:37:87:5d:8f:9c:63:2f:23:78:a6:2d:5f:a8:04:8a:
b7:9c:24:78:c9:ac:20:3f:01:c0:7b:f9:f5:0b:bd:ae:1b:7d:
49:b9:e5:bc:83:2b:f6:08:03:03:53:b9:0c:ca:68:db:1a:46:
06:a4:bf:7b:65:47:f9:16:6e:13:78:de:15:55:ac:d8:68:26:
37:52:ea:85:a7:9b:68:4f:d1:f4:8e:46:bb:0d:de:b8:3d:f6:
da:5a:76:f1:ff:a2:4a:74:a1:f3:0e:ee:86:94:7d:fa:4f:f2:
fb:e3:9d:5f:9d:ea:fc:15:d4:97:10:7b:11:20:13:2d:a4:c1:
4c:02:03:09:32:42:28:1c:07:f7:d9:a4:c8:14:e9:68:a7:ac:
5f:89:94:bf:b1:8f:64:fb:28:42:28:b8:15:34:44:1a:3d:00:
0d:b6:15:20:c5:88:be:88:c9:c9:7c:6b:f3:cc:44:e2:4e:76:
87:01:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:53 2025 by rpki-client