Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01971F70AA9011F0B326D6E5DAE4EC9C.roa
File: 01971F70AA9011F0B326D6E5DAE4EC9C.roa (raw, json)
Hash identifier: VoKbOAE/w9U25o/WAJb+NrWvEx7oPbNHED1O9TNEVGg=
Subject key identifier: 66:DC:8D:AC:5A:73:F1:AA:99:FC:51:3F:32:1E:1D:D4:D4:03:96:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018146
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01971F70AA9011F0B326D6E5DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 12:59:53 +0000
ROA not before: Thu 16 Oct 2025 12:59:47 +0000
ROA not after: Sat 22 Nov 2025 12:59:47 +0000
asID: 50028
IP address blocks: 45.198.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98630 (0x18146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 12:59:47 2025 GMT
Not After : Nov 22 12:59:47 2025 GMT
Subject: CN=68f0ec49-a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:34:ee:01:cb:55:38:6c:31:57:5f:9a:d3:
af:60:f9:bb:82:e7:53:b3:46:17:3a:82:f7:a2:0c:
e6:f7:c1:6c:b7:99:c8:af:da:78:1a:a7:e2:4d:32:
a5:bc:8b:2b:60:ee:39:21:5f:d9:ea:66:43:4b:d4:
42:55:5f:ff:fb:30:c9:e5:6c:b4:3f:96:fa:83:a0:
4e:11:cc:0a:e7:bb:31:82:e0:6f:32:2f:34:66:fd:
62:7f:ed:bd:cf:5d:9b:3e:0c:06:af:a8:9f:ce:29:
42:f0:65:50:e9:8f:b8:8c:9c:05:73:9c:06:d9:ef:
22:c8:1b:43:63:19:71:7b:c7:62:bd:f4:cc:e8:63:
d9:34:ed:be:bc:92:01:58:9b:4b:d9:66:e5:d1:3f:
e3:52:99:6a:7e:6b:b3:e0:a8:a1:66:7b:bc:f6:89:
06:f2:42:32:a6:0f:f1:e0:dc:67:7e:1c:09:2e:37:
a6:79:4c:99:5a:00:04:e8:62:58:9f:70:f3:97:11:
f8:75:ef:7f:26:3f:08:30:89:b6:2c:64:e2:b6:18:
93:37:97:cc:44:19:04:d0:ea:ec:2f:af:d4:86:2b:
6f:7b:2b:47:d5:be:b4:46:5d:4a:33:df:e7:b1:f4:
27:97:3a:22:08:af:c4:d3:0f:89:c6:60:da:b3:8d:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:8D:AC:5A:73:F1:AA:99:FC:51:3F:32:1E:1D:D4:D4:03:96:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01971F70AA9011F0B326D6E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:05:3f:f3:33:b3:11:6b:4d:cd:c8:09:9c:31:d5:da:c8:9d:
db:de:a9:bd:0b:6f:1c:4a:57:36:85:c6:de:56:f0:63:0b:c3:
d3:6b:57:37:71:e3:5c:6e:19:2d:d5:6b:6d:72:13:9d:d4:c2:
86:85:aa:e0:81:96:f3:5c:3d:27:9a:24:35:a8:01:ae:85:6e:
4a:b6:ca:39:72:ae:90:8e:ec:e6:ac:72:5b:d0:c5:13:34:01:
14:39:ab:89:1c:30:92:b6:31:17:4b:2b:2c:79:a6:3e:5b:8f:
7a:06:b0:4e:7f:ec:83:23:49:f9:4b:65:da:22:3a:72:aa:83:
bb:7f:06:42:96:8d:31:29:d2:b6:1f:18:a5:43:60:79:50:29:
53:eb:07:89:f1:82:5a:05:db:ad:c6:29:60:bc:bb:cb:f8:f1:
34:e1:2a:6c:9a:69:e9:16:71:24:2f:ea:f7:74:46:c0:b4:7d:
b1:d7:34:4c:f1:ee:58:e5:e0:91:13:10:9b:c4:23:43:99:d4:
1b:6e:e5:4b:1f:79:c4:34:d6:dd:67:41:47:cf:ec:cc:8f:2f:
d6:6b:18:59:6a:b7:d0:32:cd:9c:99:a7:f4:ac:77:6d:9a:14:
86:71:8a:01:36:21:4f:cc:09:78:23:46:1c:09:eb:af:13:1a:
fc:36:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:03 2025 by rpki-client