Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D62EB6C687D11F09349B878DAE4EC9C.roa
File: 6D62EB6C687D11F09349B878DAE4EC9C.roa (raw, json)
Hash identifier: 4VvhjKLEmpYp5fvaX8koZs+9ZzwGAWNM0eadkzM3WwQ=
Subject key identifier: EC:EE:BE:79:0B:39:10:89:9C:D6:E7:92:35:03:71:E7:3D:69:81:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016743
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D62EB6C687D11F09349B878DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:00:37 +0000
ROA not before: Thu 24 Jul 2025 11:00:32 +0000
ROA not after: Sun 31 Aug 2025 11:00:32 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91971 (0x16743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:00:32 2025 GMT
Not After : Aug 31 11:00:32 2025 GMT
Subject: CN=68821255-bf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:f8:6e:03:24:38:93:97:f9:4d:c7:e2:fb:
92:be:6e:60:30:1c:fa:d6:2a:ed:6f:a4:32:dc:28:
b3:8e:76:72:de:de:7e:c0:b0:a2:59:d1:f2:18:ab:
b1:84:2a:89:b1:a0:32:62:8c:a4:bc:27:e9:35:7c:
c3:94:7a:97:83:02:2e:5a:00:c6:32:ef:f8:1b:c1:
0f:4e:88:f5:94:1e:c8:64:fc:f7:08:85:42:22:17:
d4:4a:8a:01:e5:8a:d9:80:19:7e:b1:e0:dd:bf:ac:
fb:31:ee:39:38:c2:73:d8:78:68:28:6c:8a:c8:af:
8a:7c:3a:e9:f3:44:30:44:0d:6a:0e:a5:b3:51:62:
1c:9a:0d:88:6f:d4:af:66:37:20:e7:b4:c3:2a:fb:
84:30:f7:6a:34:13:22:f8:e8:6f:b4:ad:e6:d7:5d:
e9:7d:4d:ca:1b:3f:28:86:a0:12:dc:5b:5c:23:13:
fe:78:e7:6a:70:34:00:c0:54:b8:d2:10:6e:75:e6:
bf:c8:bc:98:7f:d6:51:d1:31:a9:5b:55:20:3f:03:
53:56:33:74:cb:da:48:12:93:6a:c7:f6:57:65:e6:
68:85:7a:78:12:60:e8:0d:15:12:dc:0e:6f:45:66:
03:41:61:d7:32:e4:75:32:3b:76:97:75:b4:2c:a8:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:BE:79:0B:39:10:89:9C:D6:E7:92:35:03:71:E7:3D:69:81:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D62EB6C687D11F09349B878DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3f:23:91:64:3a:e5:ce:de:be:95:82:29:08:9f:ee:ba:c0:
9c:99:95:61:7d:75:89:40:b7:8a:9a:1a:36:f4:dd:6d:fa:0b:
00:c2:6d:13:34:b6:96:a4:cc:e5:29:08:a2:34:54:6e:d6:8a:
ee:d1:ec:4c:b4:99:dc:50:d4:75:a7:c0:0c:5b:ad:f3:f5:f5:
e8:6e:29:a8:e7:a9:45:1a:39:9f:9b:9a:62:75:55:d3:c1:5c:
fe:37:f1:48:75:ba:89:39:70:6f:fe:c2:4a:36:be:ad:68:ae:
41:04:9a:19:da:64:35:7a:2d:3c:b0:42:8c:4d:a2:62:1d:62:
96:0b:f5:e6:37:99:eb:cb:af:cb:15:6f:8e:30:0f:c4:ec:df:
ce:87:f8:41:f2:55:0a:8a:a9:ce:3a:1f:6e:ee:f5:26:53:c5:
23:06:bd:fe:51:f8:8b:95:fa:02:30:10:73:5e:c6:4a:01:f8:
ab:ca:12:56:ab:b5:b2:66:13:29:d1:67:84:29:29:2c:35:25:
09:44:65:26:e8:41:b9:60:08:c6:b0:59:83:44:4c:17:a8:7f:
bd:dc:9b:6a:c5:d4:f5:5f:28:63:34:da:65:a8:70:b1:ff:2e:
11:21:14:f3:85:50:79:c8:79:cf:e1:8c:c3:c6:ec:ce:bc:e3:
16:71:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:12 2025 by rpki-client