Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE10EA69D7911F0BF976AC3DAE4EC9C.roa
File: 3DE10EA69D7911F0BF976AC3DAE4EC9C.roa (raw, json)
Hash identifier: /6ZENf92+Su2VI42zYyuhUyGYNlCy/zk0Uwf8CKH7r8=
Subject key identifier: B7:7D:93:93:5D:77:4A:06:4D:4F:8C:F3:D1:B4:C9:A5:BE:08:5D:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE10EA69D7911F0BF976AC3DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 21:14:11 +0000
ROA not before: Mon 29 Sep 2025 21:14:05 +0000
ROA not after: Tue 04 Nov 2025 21:14:05 +0000
asID: 152672
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97789 (0x17dfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 21:14:05 2025 GMT
Not After : Nov 4 21:14:05 2025 GMT
Subject: CN=68daf6a2-22b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:88:01:ed:f6:fd:12:93:1f:4c:ba:cc:cf:
c7:8b:f5:0b:36:31:c4:81:17:99:30:d5:98:9e:8a:
6c:ea:2b:ce:58:74:a9:3f:1f:c5:29:24:01:13:e2:
32:65:b9:91:99:87:db:fc:84:da:05:b4:95:d9:68:
d4:71:20:45:5e:08:1b:90:85:45:35:b5:5d:b1:7a:
f5:ff:da:75:80:f0:c3:00:14:2a:14:e0:67:03:5a:
63:d2:39:1d:86:3f:78:9f:e3:46:dd:ae:cf:c4:1e:
a7:e7:19:2b:75:fd:32:bb:da:da:30:4b:6b:de:53:
7a:d6:46:14:06:43:0f:ab:32:1b:ee:9d:37:ed:37:
09:e1:f3:d6:00:a1:32:2b:41:22:ad:ca:24:71:df:
a4:31:39:fb:06:a0:f6:d6:50:95:67:45:40:07:67:
a7:1e:de:6f:df:61:be:91:84:82:08:4d:a1:20:8a:
16:73:03:f1:c1:5a:d6:6b:22:46:8d:ef:03:6d:21:
57:63:45:13:ec:8e:0c:16:63:60:de:c4:fe:fc:83:
6a:44:9e:39:f9:cd:47:8a:f4:07:18:f1:4c:27:35:
58:b5:15:3b:0c:d9:4e:bd:21:b4:b2:e3:08:38:55:
85:e6:b5:9a:9e:f7:f1:ba:6b:ab:ef:c5:84:e0:b2:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:93:93:5D:77:4A:06:4D:4F:8C:F3:D1:B4:C9:A5:BE:08:5D:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE10EA69D7911F0BF976AC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8d:e5:40:46:6d:f9:eb:4e:1c:0f:e4:80:52:e0:db:bb:32:
e2:3a:d0:40:48:db:b8:d3:89:7f:ea:a6:40:40:07:f6:1d:68:
73:7a:c6:9d:79:92:29:34:4b:8e:ad:d8:d7:a5:e0:ca:6c:42:
e1:d5:cc:51:e8:2a:ba:d2:d2:11:bd:9c:a1:c7:85:eb:c1:b0:
5d:37:f9:69:3e:6e:c7:a7:18:3b:85:1f:af:c6:c8:f5:81:c6:
c5:37:2e:2c:94:50:d2:1d:be:34:a4:38:3f:26:3c:9e:55:94:
a6:29:8a:06:6a:11:d7:78:79:45:1c:26:70:95:0f:f2:37:65:
7c:e0:70:4e:c0:98:ea:13:9d:3a:81:c4:25:8c:aa:a2:ac:5f:
0e:21:43:c4:65:34:c6:1e:b8:e2:1f:2d:74:88:b9:9b:9e:a0:
ae:7c:3b:bb:1d:17:63:dc:ae:8a:b5:c4:eb:09:18:90:d8:48:
9b:e5:5a:11:0b:d1:66:6c:28:2d:b0:02:ed:f7:00:c6:7b:56:
2a:6c:bd:05:23:ec:cf:da:10:a9:17:7d:47:37:ae:8f:b0:49:
db:98:0a:26:1f:cd:9a:72:2d:71:e1:40:fa:1c:f1:5f:87:ab:
0a:e3:bc:c4:51:8e:0c:ac:32:47:ca:a2:60:8b:aa:1f:35:44:
43:f5:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:37 2025 by rpki-client