Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C7595A8A38E11F0BE2019BEDAE4EC9C.roa
File: 3C7595A8A38E11F0BE2019BEDAE4EC9C.roa (raw, json)
Hash identifier: NtJs1y1Dyh+t4BxZ+HoNQMF/9avHmwMqawri95e3wVE=
Subject key identifier: C7:85:41:EF:1E:74:4A:BB:50:BA:54:77:CF:BA:BB:51:84:84:47:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C7595A8A38E11F0BE2019BEDAE4EC9C.roa
Signing time: Tue 07 Oct 2025 14:59:35 +0000
ROA not before: Tue 07 Oct 2025 14:59:27 +0000
ROA not after: Thu 06 Nov 2025 14:59:27 +0000
asID: 401783
IP address blocks: 45.192.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98107 (0x17f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 14:59:27 2025 GMT
Not After : Nov 6 14:59:27 2025 GMT
Subject: CN=68e52ad7-969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:56:eb:44:eb:a3:0a:8a:3b:2a:a6:14:8b:
98:4d:ca:b7:e9:56:ef:92:5f:b3:54:09:d1:28:c8:
97:8e:55:41:07:76:a4:23:e5:89:00:bc:05:ee:1a:
cb:12:9c:26:6e:b5:53:73:20:ac:9d:f2:96:c2:40:
c2:64:42:72:c5:27:2a:e5:55:cd:1f:66:33:f4:16:
94:77:94:c3:81:16:41:60:fd:be:e0:d1:bb:23:60:
8b:ab:5a:6d:a4:9d:d5:d8:0f:9c:41:ef:55:01:94:
1d:4a:af:bb:55:70:43:e4:26:61:3b:40:01:f2:e5:
d4:f6:0f:de:97:a6:9e:7c:4f:95:a3:c7:bd:e4:b2:
74:97:a8:62:68:3f:4d:f6:44:a1:be:39:33:84:0d:
b9:a0:aa:f0:f0:21:46:ab:a1:16:f0:c7:20:82:50:
b4:20:b6:3b:2d:32:ef:15:ff:66:ca:3f:a1:34:2c:
ea:bf:1c:53:d1:3d:11:98:f6:38:b8:03:32:49:1e:
da:ab:0a:66:e3:3f:0c:1d:0c:4c:a1:05:65:c0:1b:
7b:49:3b:1f:e0:30:41:e9:42:b2:15:9a:64:a9:ba:
cc:89:de:7f:1d:17:fe:ac:dd:c2:88:82:80:de:66:
40:19:91:cd:61:35:d6:96:90:52:f1:b3:fe:f8:9a:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:41:EF:1E:74:4A:BB:50:BA:54:77:CF:BA:BB:51:84:84:47:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C7595A8A38E11F0BE2019BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:61:d8:59:ac:85:ff:5c:bd:bf:ee:6a:ed:38:b0:69:1c:e3:
60:7d:d2:5e:14:0d:1d:e3:be:e1:cc:d9:c6:b8:7d:5c:7d:3c:
73:ee:4b:21:10:f0:ad:37:80:22:fd:ba:eb:c6:ee:8d:2f:14:
ae:df:96:34:c1:5a:8d:ae:59:86:4b:38:e9:c6:3c:bc:5c:bc:
58:98:8d:9c:11:06:7b:78:57:47:cd:b8:cd:08:ca:95:2c:23:
dd:88:c2:4e:c3:6b:88:65:e7:1c:01:9f:a3:5b:af:f2:8a:ad:
10:d5:fa:13:a6:49:0d:c9:35:13:de:63:9c:24:8e:67:ab:ff:
b1:68:c5:f4:30:75:1c:da:0c:0b:0d:f7:82:1a:50:06:25:c5:
5c:84:8f:0b:2d:87:34:8b:5d:00:dc:5a:0b:ad:20:9c:e8:01:
8e:cb:4a:bb:0b:48:df:4d:78:5c:f8:7b:bf:66:fa:05:72:80:
0a:d7:6e:ac:b5:60:c4:ac:54:69:77:de:38:a9:60:a9:fb:29:
ef:8b:fd:26:ce:b6:b2:85:70:8d:e1:08:ed:52:1a:19:d2:83:
e7:12:cc:99:5c:e7:3e:e8:ff:b0:30:1e:c8:2f:5e:9e:af:e4:
9d:98:05:79:0b:82:5b:f0:a4:bc:52:8c:0b:90:44:43:e2:cb:
0c:92:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:46 2025 by rpki-client