Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45A3B800A9AE11F0BEB58BDEDAE4EC9C.roa
File: 45A3B800A9AE11F0BEB58BDEDAE4EC9C.roa (raw, json)
Hash identifier: 9AkUdFVREfodcFCzjFQjxl0SKSCiOG9M6bX3b1SbQvs=
Subject key identifier: C2:77:21:19:C3:D9:A3:82:85:23:57:41:28:CD:33:D6:04:D6:EA:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45A3B800A9AE11F0BEB58BDEDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:04:01 +0000
ROA not before: Wed 15 Oct 2025 10:03:56 +0000
ROA not after: Thu 20 Nov 2025 10:03:56 +0000
asID: 214413
IP address blocks: 45.194.87.0/24 maxlen: 24
45.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98471 (0x180a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 10:03:56 2025 GMT
Not After : Nov 20 10:03:56 2025 GMT
Subject: CN=68ef7191-06c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:be:34:2e:eb:e7:7f:70:d6:a1:6f:82:fa:bb:
d3:81:5d:a5:1c:e9:da:66:f9:e5:1e:e3:a1:2e:d3:
fc:8b:4b:cc:42:8a:37:8d:24:f3:48:fc:31:4a:fd:
5c:a8:4d:d0:ef:eb:58:56:35:74:92:4a:2b:94:13:
98:a8:99:63:87:a6:c2:8e:92:3a:90:b9:cd:9c:7b:
e1:92:cd:9e:ef:a1:e1:77:f6:1b:72:34:d7:89:1e:
ac:11:87:f6:be:ab:94:bb:b4:19:82:ff:2d:f6:3d:
e0:fb:0d:d1:e9:56:d5:4a:d6:40:6a:59:cb:c1:f6:
a3:6f:43:36:00:da:11:5e:a4:26:a5:51:b0:d0:b7:
d1:56:f5:65:8b:56:47:7c:b4:18:7d:f6:6e:5c:4f:
3b:87:d8:7b:94:a4:b2:d9:6f:65:f8:ca:9e:02:f2:
40:3d:30:7f:7d:3a:9e:e1:54:bc:88:62:7f:0b:48:
f7:87:6a:ad:ea:24:a2:d3:2d:d7:b6:49:61:ca:f0:
95:d1:0a:5d:0a:33:fb:36:59:73:67:5c:c5:ab:ce:
c7:02:05:8b:83:b7:25:fe:16:f3:cd:e4:91:50:be:
db:23:14:e6:b4:42:7c:a5:e1:1e:2f:cd:c7:96:9f:
53:45:80:31:65:35:0a:18:5a:72:dd:c0:3b:63:c8:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:21:19:C3:D9:A3:82:85:23:57:41:28:CD:33:D6:04:D6:EA:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45A3B800A9AE11F0BEB58BDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.87.0/24
45.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0d:1b:93:77:4e:8c:7e:2b:ec:55:b2:18:8a:9e:5a:50:65:
79:a9:25:34:76:f1:90:db:9d:29:94:7c:be:fd:49:5c:7c:74:
0e:6d:6f:1a:60:22:5a:ae:15:55:29:32:5c:d0:d3:b6:78:97:
bf:49:e8:c6:da:15:67:9c:5d:68:fd:98:eb:a3:99:8f:8d:5a:
bd:58:7d:29:ef:5f:b1:81:b3:e4:9d:0a:79:4a:69:2f:e0:4c:
65:83:5a:42:87:8d:58:c7:e0:c7:83:37:1c:22:f1:c1:1a:9c:
08:49:04:ed:62:9a:5c:98:f5:f4:db:50:5a:91:8e:b1:d2:5a:
c3:f0:f0:c2:11:85:05:65:e8:0a:2f:8c:94:b1:8a:f8:b2:85:
4c:4f:7c:6f:7a:c2:cc:43:40:f2:d2:3f:aa:a6:a0:73:3c:4a:
2e:c2:a2:d7:f9:83:bc:2f:32:6e:1c:47:b7:43:41:5a:ec:28:
78:8a:f3:29:a7:ae:76:bd:32:2a:1c:f7:92:35:7a:38:75:7b:
0e:5d:1c:d9:53:75:82:e0:a4:72:d7:e4:03:99:43:75:6a:8c:
10:ff:74:14:fd:4b:7c:8b:02:0a:6b:bd:8c:91:b0:05:21:39:
3c:e5:7f:41:2a:97:92:c0:a6:7e:2f:fa:47:b0:f2:36:4b:e0:
f7:c7:26:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:44 2025 by rpki-client