Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/981D54DA66E511F0A231E196DAE4EC9C.roa
File: 981D54DA66E511F0A231E196DAE4EC9C.roa (raw, json)
Hash identifier: /2+B17DAxRhEFDyBtR87poOJRI1PiV23NAKnyiE4xoM=
Subject key identifier: 96:37:D5:E9:42:26:52:4E:CE:C8:DC:35:7D:6B:8A:94:E3:A6:B3:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016691
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/981D54DA66E511F0A231E196DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 10:21:14 +0000
ROA not before: Tue 22 Jul 2025 10:21:09 +0000
ROA not after: Thu 04 Sep 2025 10:21:09 +0000
asID: 204741
IP address blocks: 45.194.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91793 (0x16691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 10:21:09 2025 GMT
Not After : Sep 4 10:21:09 2025 GMT
Subject: CN=687f661a-9c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:b6:47:83:d0:d7:d2:a5:f7:2e:44:da:f9:
bd:40:ca:07:7f:57:78:4f:f6:65:fc:28:f6:f3:8c:
d8:9e:b0:cc:cd:65:23:99:65:22:ec:f5:de:e9:38:
6a:9c:49:7a:68:a3:2d:c8:70:3e:63:bd:14:cf:a6:
b4:62:fb:fe:a8:6a:ec:47:3d:98:b1:2e:d5:a4:01:
64:84:b1:31:97:a4:9e:05:25:24:db:80:f7:95:cc:
81:fe:44:c9:bf:66:db:7f:d0:6e:3f:be:57:44:54:
76:d5:47:34:ae:05:60:08:d6:7c:a4:18:db:c9:1c:
96:21:69:36:5e:e8:ef:01:47:2d:dc:2b:7d:e9:6e:
53:6f:82:5a:44:2a:8d:08:92:d9:d3:a1:ff:9d:20:
fb:0f:46:5d:91:6f:61:e6:1a:b8:b3:fa:ec:59:d9:
97:a0:51:22:28:5b:a4:0c:dd:79:9c:84:cf:de:16:
91:f4:7b:f6:8e:1b:0a:a9:89:f0:6f:84:03:3c:13:
81:a7:fc:45:b1:ec:a4:86:5d:f6:53:a9:d9:ec:48:
58:65:ff:b2:1f:a1:10:32:34:4b:c0:9c:d9:78:d1:
67:ab:8e:8f:85:fe:7c:bb:89:a3:da:46:46:e7:58:
49:44:50:45:c2:35:ca:01:e4:d4:54:5d:0c:db:04:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:D5:E9:42:26:52:4E:CE:C8:DC:35:7D:6B:8A:94:E3:A6:B3:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/981D54DA66E511F0A231E196DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.65.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2c:51:75:1b:03:bc:6e:01:45:da:4e:ca:94:87:c2:39:ab:
87:b5:ca:51:a3:12:89:78:e6:63:58:c5:ed:39:8d:2b:0d:0d:
61:11:f8:10:f3:20:da:31:ad:4b:ef:df:8f:0d:1b:c2:a7:02:
74:20:96:4c:ef:2d:e9:ea:75:a3:b1:54:f5:94:78:4f:3d:f5:
40:e8:18:4a:ae:e3:ac:1a:3b:9a:b2:c5:08:90:27:73:17:2b:
f1:f3:a7:bc:2a:01:49:63:20:4f:f7:ed:84:73:78:a8:3d:48:
fb:42:ec:9a:aa:87:b5:e9:a2:9a:5e:da:85:c7:0f:df:73:73:
98:e8:12:1a:de:1e:28:40:01:15:49:cb:01:27:8e:2f:99:42:
45:58:e1:87:81:60:11:30:78:8b:6e:6b:55:47:a3:cb:36:5a:
1b:84:4c:b3:b7:5d:65:8d:cc:e7:6a:21:33:8d:63:2c:e8:f6:
e7:5f:a4:33:23:e4:fe:93:cf:1d:aa:07:ea:b5:62:46:3d:cc:
0b:15:43:d5:9f:39:86:c7:11:64:7b:1e:96:ee:24:6e:84:29:
3d:93:b0:13:ea:72:1a:da:54:b2:66:54:34:6b:03:47:60:6a:
fe:58:01:23:4b:40:79:b5:8b:7b:69:d7:38:7f:54:ac:22:8e:
bd:68:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:15 2025 by rpki-client