Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82FAA4D867BF11F0B71476A0DAE4EC9C.roa
File: 82FAA4D867BF11F0B71476A0DAE4EC9C.roa (raw, json)
Hash identifier: 3T/ORv2gsBKPegUxNKyamLX/3Uf1IKzTuKcVLIy+PYM=
Subject key identifier: 01:8E:C3:18:93:51:96:D7:99:FD:59:AE:86:CE:A8:36:B5:69:DF:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0166E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82FAA4D867BF11F0B71476A0DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 12:21:09 +0000
ROA not before: Wed 23 Jul 2025 12:21:03 +0000
ROA not after: Fri 05 Sep 2025 12:21:03 +0000
asID: 14315
IP address blocks: 45.202.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91881 (0x166e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 12:21:03 2025 GMT
Not After : Sep 5 12:21:03 2025 GMT
Subject: CN=6880d3b5-1949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3a:10:4e:dc:81:c4:b6:a1:d1:57:7f:b1:cb:
25:a9:a8:76:71:b0:22:c3:bf:91:61:1c:d3:c3:9f:
0c:c8:34:b6:1f:ca:85:de:8e:a8:45:61:87:4f:b2:
b3:29:ad:1f:e1:75:bd:0b:8a:c8:6c:15:f2:00:38:
e2:5f:9f:74:97:ce:94:c1:a3:9d:97:7a:13:57:9d:
3b:39:0c:88:9f:75:dd:48:74:39:75:35:2a:ef:df:
8b:f8:7f:2c:ff:96:74:10:f6:34:2a:ea:26:a9:1a:
20:56:5c:2e:ae:31:38:ca:d7:2a:38:4f:d0:3e:34:
0b:93:85:78:3e:63:f3:c9:0a:bc:15:74:59:d3:aa:
ec:be:f5:4e:b8:12:dd:4e:cd:2f:61:39:80:88:8a:
07:6e:51:67:77:89:19:c4:10:ed:61:aa:90:06:6e:
6a:f1:c8:0a:fa:8d:eb:bb:ee:1a:52:5f:dc:6e:0d:
9e:55:b2:85:24:57:cd:58:86:8a:08:7c:8f:1c:0f:
42:69:3c:9a:03:be:06:0e:ad:14:88:5a:34:64:1c:
2b:94:fc:7c:77:c1:52:07:6a:a4:c2:94:29:8f:7f:
66:96:cb:13:c7:ee:e3:b1:4d:bb:e2:ce:51:e1:20:
aa:33:ad:40:ec:a5:22:78:6b:9c:d4:bd:99:32:fc:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:C3:18:93:51:96:D7:99:FD:59:AE:86:CE:A8:36:B5:69:DF:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82FAA4D867BF11F0B71476A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bb:db:ae:3d:42:2b:b7:0f:7d:6e:8d:c8:af:74:50:a8:f8:
de:69:51:62:2e:db:b2:be:34:a1:f8:ac:bb:fc:9a:9c:7a:3a:
2b:91:3c:35:52:36:bb:3e:ae:52:a9:e6:0b:27:72:b2:fa:ae:
b0:f2:a3:49:19:88:62:e3:9a:af:d5:ee:d5:9c:77:41:e6:69:
7c:e8:9a:30:eb:16:61:27:e9:f7:84:86:79:04:96:19:21:d3:
dc:5c:02:ad:5a:b0:2a:d4:04:2f:b8:a2:b3:a8:f0:78:c6:7c:
60:c2:ab:11:00:b0:76:01:af:ce:d3:a7:e3:ec:c0:0e:71:ed:
da:f5:7f:a0:f1:66:e6:70:60:8f:a8:93:6b:43:fe:5c:30:d2:
54:cf:73:d2:12:da:2b:60:df:02:1d:12:72:e8:04:15:71:c9:
2b:ad:97:e4:5a:3c:a0:88:f3:28:fc:1b:e6:05:17:ed:f8:8d:
f3:11:b3:5f:c9:c5:4f:01:28:3c:6a:73:a8:10:35:85:ef:0c:
2f:b0:bb:1a:48:b4:56:a6:1f:52:2e:c3:6a:a2:94:c3:ef:16:
1d:e7:0f:34:66:f0:6d:9c:1b:ce:32:89:c6:b2:e7:b0:cb:c0:
18:c0:00:d2:b2:dc:f9:04:3c:ad:29:2b:5e:87:50:56:12:22:
b7:3a:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:47 2025 by rpki-client