Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6F9807C6D1811F0BB86217DDAE4EC9C.roa
File: E6F9807C6D1811F0BB86217DDAE4EC9C.roa (raw, json)
Hash identifier: CUzX07pEFYbkZpnojHSK98+eub74IQhtS6qJtedDf/g=
Subject key identifier: 6F:7D:F6:AE:B3:37:47:B0:EC:30:70:E2:10:56:D3:22:BE:D0:FE:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016826
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6F9807C6D1811F0BB86217DDAE4EC9C.roa
Signing time: Wed 30 Jul 2025 07:43:37 +0000
ROA not before: Wed 30 Jul 2025 07:43:33 +0000
ROA not after: Thu 16 Apr 2026 07:43:33 +0000
asID: 137263
IP address blocks: 45.195.16.0/21 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92198 (0x16826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 07:43:33 2025 GMT
Not After : Apr 16 07:43:33 2026 GMT
Subject: CN=6889cd29-2ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:f3:9e:f6:3e:a2:41:5e:30:df:66:b7:1f:
2e:14:ad:ff:aa:c1:dc:f1:ca:79:29:4a:e7:16:bc:
2e:2f:41:ba:e9:1f:ef:3b:3c:3c:50:b7:7e:b3:73:
f4:22:03:8a:2d:9f:21:fa:6c:44:6b:de:29:36:b5:
b0:43:7a:78:99:d4:34:c0:d3:c0:b0:99:51:21:85:
2e:db:51:e8:a4:77:87:79:8f:7e:af:64:ac:e0:ed:
04:74:28:de:0e:a4:a7:50:e0:ea:4c:76:68:52:95:
23:99:54:02:11:9d:df:9c:04:05:36:56:ba:bc:15:
24:f9:99:c7:1c:65:47:5f:da:b2:e1:12:96:bf:e9:
91:65:24:82:c2:6d:a8:e3:fc:fe:9e:50:1d:f5:86:
bb:d3:7a:53:97:59:07:20:17:77:dc:75:7b:72:e6:
c9:f2:8f:01:16:56:bc:ed:a4:b9:04:3d:46:72:d4:
fe:ec:21:f3:96:f3:41:d5:fe:b9:04:9c:6e:5c:55:
15:9d:bb:9a:4f:70:0f:0d:f7:14:94:63:16:81:7a:
72:15:8f:b8:1d:e2:6b:e9:4b:bb:1d:1b:88:31:85:
7d:5c:ee:62:33:35:ee:c3:ec:e1:06:de:16:a2:7e:
29:8b:5f:47:94:f7:a6:69:c7:a1:54:24:d3:fb:e0:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:F6:AE:B3:37:47:B0:EC:30:70:E2:10:56:D3:22:BE:D0:FE:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6F9807C6D1811F0BB86217DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.16.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
9b:93:3d:f8:b1:c8:79:63:41:09:30:54:ad:3d:76:19:55:d5:
0e:b3:1e:20:32:b9:82:48:c6:6b:c4:87:2e:13:66:94:99:f9:
86:a4:a3:69:6e:38:e4:eb:6c:8a:3d:60:9f:58:0e:49:88:91:
56:d7:30:fe:61:58:be:9a:3c:5c:90:ad:d7:90:76:6a:21:ed:
dd:52:88:6b:c3:8f:18:f6:f8:01:18:1b:6d:68:bb:5f:2b:aa:
31:3b:11:a0:e9:fc:f7:c6:3d:c2:f4:19:e4:c5:2b:e9:4d:bf:
db:c9:a3:81:1a:76:db:4e:eb:5f:00:58:f2:7e:21:0c:a5:45:
6d:87:43:35:f7:d2:4d:d3:fe:1c:f2:5e:14:c8:ea:19:b2:54:
fb:b4:97:0e:4f:0d:65:cc:b2:f5:e9:b4:84:b0:3a:e3:79:2b:
d0:86:86:5c:08:44:72:4f:6c:35:0a:fd:b5:b7:2b:3d:ed:ea:
48:79:55:a7:71:89:e3:3a:e2:4a:fa:7d:a8:87:a7:ce:9d:96:
d3:13:be:97:31:29:b5:cd:9e:45:87:ff:ae:df:0d:44:e7:1a:
69:01:cb:48:43:88:1a:34:e0:b6:3b:a9:1b:16:ac:11:74:9a:
ba:05:e3:0d:f9:8f:8f:ae:b2:f6:9c:a7:60:c3:76:db:b7:0c:
9c:32:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:53 2025 by rpki-client