Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC7BE1EA5B011F0AFF4679ADAE4EC9C.roa
File: 5EC7BE1EA5B011F0AFF4679ADAE4EC9C.roa (raw, json)
Hash identifier: lNLEgF7b0rhc7f0c67bP6ERrKkOENbvMvixysQKJuD8=
Subject key identifier: A5:0E:5D:03:F7:D9:60:30:BA:A7:0E:59:26:9F:1C:C7:CB:71:78:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC7BE1EA5B011F0AFF4679ADAE4EC9C.roa
Signing time: Fri 10 Oct 2025 08:08:57 +0000
ROA not before: Fri 10 Oct 2025 08:08:53 +0000
ROA not after: Sun 16 Nov 2025 08:08:53 +0000
asID: 63199
IP address blocks: 45.194.64.0/24 maxlen: 24
45.195.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98274 (0x17fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 08:08:53 2025 GMT
Not After : Nov 16 08:08:53 2025 GMT
Subject: CN=68e8bf19-8064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:1a:e4:1b:83:84:77:03:b7:31:ec:48:10:
98:92:50:f4:dc:6f:4d:a1:72:03:d8:a5:b1:53:ca:
50:48:f4:d5:18:be:2a:00:2c:9b:58:0a:c0:07:98:
3c:f7:e4:9f:13:b3:3d:40:03:ad:09:6e:5a:3f:7f:
af:b7:a6:91:5d:0e:62:53:81:8c:55:87:08:6e:e3:
64:da:bf:a2:00:25:2c:b0:78:44:a8:db:34:50:a3:
59:97:2f:01:83:a5:aa:8b:89:6b:98:8b:1d:3e:ea:
85:15:e3:40:8c:ae:9c:e0:a2:02:99:7e:51:d2:97:
70:8a:36:50:84:53:5f:fa:ea:ee:b9:6c:50:0e:63:
45:59:39:64:59:d1:3f:b6:9e:cb:1f:e2:dc:ea:99:
fb:f6:12:9e:0c:48:08:7b:82:22:1b:d8:71:22:f9:
06:6a:40:56:57:35:b5:cd:72:91:15:db:23:33:e1:
41:f3:7e:8a:08:bf:ab:f6:2f:ad:6f:79:ef:6f:18:
27:9b:58:95:c4:ca:98:04:41:19:60:35:46:4f:39:
dd:99:5d:90:e5:ab:15:19:b6:88:72:6e:a7:d4:b4:
ee:b8:9e:ae:4e:04:79:20:23:72:20:3f:59:11:e3:
5d:51:52:61:5b:65:99:26:f8:2b:c4:13:59:3b:9c:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0E:5D:03:F7:D9:60:30:BA:A7:0E:59:26:9F:1C:C7:CB:71:78:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EC7BE1EA5B011F0AFF4679ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.64.0/24
45.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:61:33:26:b0:a6:01:93:e7:38:2e:74:a3:ce:2f:6d:92:c0:
f1:9e:d6:f9:a4:43:f4:e0:10:99:7c:e6:11:25:25:d5:65:ea:
ca:81:dc:cf:a0:4d:b3:61:f4:1e:c1:4b:19:ed:56:f2:9e:08:
58:04:16:a2:ec:d8:bf:aa:cd:13:99:81:25:25:2e:9d:5a:55:
7a:13:b2:43:c2:13:3c:49:35:c7:65:5e:5c:aa:80:ff:ca:db:
27:a6:f3:4b:93:6c:af:c1:4c:63:5b:1e:7e:5d:ad:dc:a3:68:
38:5a:02:85:e9:0d:5b:d4:12:e3:f3:eb:3d:dc:ea:49:f2:54:
99:c6:d6:39:a4:5d:a2:88:7d:de:23:42:80:a7:2b:4e:08:c6:
0d:32:51:89:f9:e9:d2:c2:32:4a:a1:42:fb:ba:e9:6f:c1:d8:
c6:36:81:8a:29:64:14:f9:12:b9:f9:a4:f7:a4:97:a1:8d:bc:
9d:58:de:40:f4:c4:d6:25:ab:53:1f:bf:cf:c4:9a:83:f9:51:
71:96:7d:c2:b1:6d:7d:0f:04:68:94:38:72:86:4f:d0:88:e4:
d9:fe:89:a0:64:fc:41:dc:cd:9f:e0:72:12:80:96:2e:9e:10:
17:8a:48:39:82:54:6c:7d:18:25:eb:56:34:29:c8:ac:59:04:
a8:51:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:26 2025 by rpki-client