Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C856E8A0706D11F095DBFCABDAE4EC9C.roa
File: C856E8A0706D11F095DBFCABDAE4EC9C.roa (raw, json)
Hash identifier: qs3G83Vkn1Zph+umat7B6IFS9mTdv8ye2kA+hFEz664=
Subject key identifier: A4:18:47:7B:4E:43:6C:02:D9:26:77:B4:4F:47:78:91:E2:4F:7B:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01691D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C856E8A0706D11F095DBFCABDAE4EC9C.roa
Signing time: Sun 03 Aug 2025 13:28:47 +0000
ROA not before: Sun 03 Aug 2025 13:28:40 +0000
ROA not after: Mon 08 Sep 2025 13:28:40 +0000
asID: 149940
IP address blocks: 45.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92445 (0x1691d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 13:28:40 2025 GMT
Not After : Sep 8 13:28:40 2025 GMT
Subject: CN=688f640f-25a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:be:c7:4c:6c:3a:c7:2e:61:0c:3e:cc:8e:
57:d8:73:86:99:30:1a:6b:bd:14:5b:75:85:3b:ec:
cd:21:1f:3e:55:77:8a:c7:5e:a7:22:05:12:b5:54:
11:6c:96:53:5c:7f:d8:90:cc:f3:e2:c4:a0:1c:a8:
27:cd:a7:b2:bc:7c:6b:6d:9f:dc:a0:0e:2f:41:13:
ff:47:9a:cb:4b:9d:c6:a6:f1:2c:a6:70:b9:63:11:
85:b7:6b:f0:f4:84:6c:dc:02:d2:98:30:ec:5a:ff:
54:c3:01:93:29:3f:9a:a2:5f:97:f3:dc:d1:cb:33:
15:8f:32:bc:be:fe:2c:06:c4:2c:21:be:19:36:f9:
27:7b:87:46:2b:35:0a:c7:49:b3:c1:12:c5:f0:5b:
7b:d1:c9:26:1d:cc:5a:9d:ef:c7:44:f9:89:98:a5:
11:a2:74:f3:c0:3c:47:95:9b:f5:9b:47:3b:f9:85:
69:40:98:2d:69:57:70:9e:b1:f0:c2:90:8d:fa:95:
eb:ef:81:83:8a:83:95:49:ef:bb:9c:78:82:0c:1b:
10:0c:18:44:08:65:a5:af:be:d7:68:27:97:2a:49:
9f:b8:e8:bb:9d:d5:25:f5:df:63:7d:4f:54:2b:11:
cb:2e:29:55:d5:7b:37:35:89:74:90:5b:82:ea:72:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:18:47:7B:4E:43:6C:02:D9:26:77:B4:4F:47:78:91:E2:4F:7B:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C856E8A0706D11F095DBFCABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f3:05:12:62:b3:11:c1:64:7f:6c:76:7c:ad:79:c1:4f:52:
10:82:b3:4a:d9:2a:5c:6c:5a:c7:35:aa:b4:ca:82:12:eb:93:
e0:51:9c:b0:3f:a2:b4:e3:64:fd:5c:f1:c6:eb:cf:a4:dd:ab:
ac:59:5b:fd:24:b7:09:87:24:4a:30:4c:5a:9c:70:ec:82:36:
21:2d:d0:57:00:1d:cd:d0:8e:a0:89:c7:f0:ec:f7:8c:a0:90:
6d:07:02:a3:9f:84:13:bb:af:c3:57:7e:e4:9b:61:d8:cf:a4:
a3:73:0b:ba:98:72:bd:11:c4:f7:fe:d2:d9:ee:ad:da:4e:ec:
e5:06:46:eb:cb:8b:86:54:25:2d:fd:de:2d:f7:a2:e9:74:8c:
d9:81:9c:a7:4f:67:78:e8:4d:2c:f3:01:34:41:b4:df:c9:72:
c2:53:f7:2a:f6:46:f4:02:4a:f2:cf:ec:f1:83:4e:a8:6c:3e:
58:2c:50:3a:81:15:e2:c8:d4:a4:c2:d9:ff:19:16:ed:47:b2:
b0:16:b2:31:1d:69:3e:bc:36:7e:84:b5:65:a0:03:58:fc:26:
d7:9d:7f:fa:aa:1a:2e:2c:b2:a5:bd:9f:e0:34:14:33:2e:f8:
22:40:17:3c:29:88:ef:47:d1:58:4d:aa:ba:83:9c:42:46:e1:
ba:41:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:26 2025 by rpki-client