Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B5C83E9D7211F087DDB897DAE4EC9C.roa
File: 05B5C83E9D7211F087DDB897DAE4EC9C.roa (raw, json)
Hash identifier: uKFsd9HoyNEET81+paOX70hL/7ZEnwEeIJMoh9pJ9zI=
Subject key identifier: 73:E5:15:35:54:EC:62:07:AF:D9:97:9E:54:15:E9:39:9F:34:AA:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B5C83E9D7211F087DDB897DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:22:30 +0000
ROA not before: Mon 29 Sep 2025 20:22:25 +0000
ROA not after: Mon 03 Nov 2025 20:22:25 +0000
asID: 401783
IP address blocks: 45.192.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97781 (0x17df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 20:22:25 2025 GMT
Not After : Nov 3 20:22:25 2025 GMT
Subject: CN=68daea86-94a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:28:40:8e:9b:eb:98:d0:ae:35:97:b6:82:
d8:3a:c2:30:0e:b9:05:a4:2a:1c:bf:0f:23:0b:a0:
a9:1d:e4:af:ca:31:7a:6f:2b:ca:20:11:4c:2d:26:
b0:77:80:e7:4b:2e:05:ef:62:05:c6:73:2e:1a:cd:
c2:b7:64:30:6f:a6:36:1f:15:91:bd:2f:b5:e0:d8:
63:4b:a4:3e:65:89:98:e6:c2:54:35:5e:ae:4d:cd:
ad:80:fe:08:28:31:80:a3:f0:5d:f0:f7:46:9b:4b:
a7:18:65:46:62:0d:24:da:f5:0c:c6:85:37:dc:59:
40:80:b8:e2:c8:fa:d6:e8:9c:5a:8f:cb:7a:fc:a6:
53:ba:81:47:28:de:16:51:4e:45:fb:17:de:62:3b:
a0:b3:dc:27:83:1b:18:6c:3e:3f:7d:90:90:66:3e:
0f:fe:43:ff:c8:0d:95:13:26:9a:cf:3e:47:99:91:
5b:09:65:83:d5:7a:33:23:28:c2:4c:bf:a1:39:0f:
cc:62:8f:35:44:4c:a9:19:29:37:b0:59:19:63:75:
12:70:6a:19:2f:44:6d:d6:3a:6b:1e:1d:8b:0e:11:
f5:1a:5c:33:06:06:f0:41:d6:77:96:a5:5e:4e:c8:
20:85:95:1d:08:f1:69:1a:f5:b0:f4:46:5c:d0:c4:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E5:15:35:54:EC:62:07:AF:D9:97:9E:54:15:E9:39:9F:34:AA:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B5C83E9D7211F087DDB897DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.235.0/24
Signature Algorithm: sha256WithRSAEncryption
13:34:a7:66:19:10:46:3e:ca:13:76:33:15:d6:f7:db:bb:b2:
91:40:f6:17:0d:b2:f2:6d:77:ce:00:a6:11:50:5a:aa:7c:b5:
d6:3f:5d:77:d9:7a:81:e4:90:f3:7e:23:08:32:5d:02:17:4f:
ba:98:4d:9a:16:10:49:7e:e9:dc:fb:c4:ea:7a:78:80:ad:c7:
55:b1:23:4e:0c:5d:5c:c2:cf:55:40:81:1f:17:d7:f2:a7:90:
d0:c0:37:32:31:70:7e:3a:57:46:90:26:18:46:56:c2:8a:1a:
b1:c2:56:e4:8d:48:08:4a:c7:1e:47:6b:0d:5b:fd:67:9e:0b:
be:2c:d9:1f:e7:00:f6:25:f5:df:01:ed:52:b6:00:c8:d0:12:
32:42:dc:b1:c2:25:90:8e:24:5b:81:61:a6:16:92:07:f3:1b:
78:b4:a2:10:69:9b:32:19:15:c9:6a:22:e3:08:e5:27:84:54:
54:86:14:a6:fe:eb:a3:28:cc:f4:f9:d1:2b:8e:b5:c1:02:99:
e6:69:c1:3e:6f:89:50:36:b9:2e:64:be:30:32:13:38:e7:68:
2e:56:a7:b6:06:4b:6b:0a:bf:f0:d9:16:01:bc:f3:33:db:a7:
02:cf:d2:89:a2:c6:3f:52:c9:a8:78:35:3f:4c:04:36:02:b3:
84:ff:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:39 2025 by rpki-client