Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BA923667C111F0BD51DAADDAE4EC9C.roa
File: C0BA923667C111F0BD51DAADDAE4EC9C.roa (raw, json)
Hash identifier: z6cKor2tx/BMY4eLOOGSo77NUqOleXgoZQFNqhynnXg=
Subject key identifier: D7:22:F3:A5:BA:EC:C8:FC:CB:32:A8:A3:B4:FD:D0:70:BC:81:1C:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0166F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BA923667C111F0BD51DAADDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 12:37:11 +0000
ROA not before: Wed 23 Jul 2025 12:37:06 +0000
ROA not after: Sun 23 Aug 2026 12:37:06 +0000
asID: 984
IP address blocks: 45.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91890 (0x166f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 12:37:06 2025 GMT
Not After : Aug 23 12:37:06 2026 GMT
Subject: CN=6880d777-6a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:ef:98:35:c2:89:e8:0d:36:fc:2e:58:69:
89:12:74:5b:ec:01:75:3b:ae:4b:d4:be:7d:1e:89:
3f:27:87:44:c1:ba:1b:4b:f1:54:07:31:d4:56:5f:
03:97:aa:63:e9:d8:99:9a:4a:48:91:16:b9:79:1e:
c7:6f:cc:1d:34:ce:66:40:4a:49:a6:35:48:8b:0d:
51:97:f5:b3:e0:41:f3:0a:1e:46:8b:15:a1:a6:27:
a2:b6:99:e1:e3:31:c5:73:69:e0:f1:1b:bf:03:46:
43:4e:2f:d2:6a:e6:92:6c:65:52:08:20:65:69:54:
40:97:18:70:40:0a:fc:62:a7:94:18:63:5b:ba:71:
a0:95:68:ad:b8:b9:04:76:ef:d6:81:09:67:73:24:
0c:dd:f3:4d:77:21:e8:cb:12:16:c0:fc:55:d3:e6:
2a:c6:8b:42:a5:6f:6a:37:92:27:ff:52:17:02:4a:
f5:5c:02:06:1a:84:9d:e2:c8:bd:b9:ff:4f:d2:ae:
9f:13:d6:69:48:50:57:a3:0d:40:9f:7c:5b:61:f4:
ea:f9:d4:f6:a8:b4:fd:15:9a:c9:d9:bb:43:f0:57:
8b:c6:8f:e7:23:ac:9e:1e:e5:45:99:8a:18:de:c1:
41:7b:72:74:38:3f:a7:72:d3:cb:bc:15:52:b0:13:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:F3:A5:BA:EC:C8:FC:CB:32:A8:A3:B4:FD:D0:70:BC:81:1C:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BA923667C111F0BD51DAADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ae:95:60:11:42:5e:18:9d:b4:54:f7:00:c2:94:3f:11:9a:
3a:29:1b:b8:78:5a:55:00:35:0c:75:2b:73:71:fe:4e:a3:f4:
5b:c1:91:40:a3:c4:8d:28:39:2d:de:a3:01:14:7f:1c:ee:ca:
18:9f:c2:8a:e7:0d:54:b2:4e:e0:52:88:4a:38:e6:79:9e:48:
8d:af:17:2e:82:a7:35:df:47:69:da:6a:2a:07:0d:d1:a8:92:
15:74:8e:4b:12:d6:10:87:d3:1b:2e:e2:19:13:6b:0f:1f:e4:
56:97:b3:dd:71:2c:2b:f2:52:21:fc:e8:ae:34:59:02:16:ff:
3e:5b:9d:ac:98:da:ef:5f:5d:5a:52:ef:b5:76:d9:3b:de:b5:
b3:1b:de:24:4f:ca:14:c0:3d:16:e4:ed:d0:57:a3:56:60:c3:
64:6b:05:a4:21:1e:ea:39:71:d5:99:75:13:b6:75:db:d6:47:
9e:25:be:50:d0:23:4e:52:50:e8:d7:d4:66:f8:ef:8d:a9:23:
92:0e:38:33:7b:6f:aa:49:0f:2c:12:fe:92:f9:23:2c:76:ac:
cf:b1:1b:47:6b:08:c6:6a:f1:c3:67:17:01:8b:8a:42:fc:6b:
3b:11:26:da:92:bd:6e:f7:88:96:59:5d:d5:90:3b:f9:14:75:
a2:0e:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:59 2025 by rpki-client