Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72BDE848A71E11F0A25033DBDAE4EC9C.roa
File: 72BDE848A71E11F0A25033DBDAE4EC9C.roa (raw, json)
Hash identifier: imlX5nZrOxN7KXV9PvC72SxGUpJiHGh8otjMYt93nIk=
Subject key identifier: C1:55:75:C0:53:E9:B7:D2:75:3D:9D:EE:3C:3D:5A:73:B2:93:F1:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01800E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72BDE848A71E11F0A25033DBDAE4EC9C.roa
Signing time: Sun 12 Oct 2025 03:49:27 +0000
ROA not before: Sun 12 Oct 2025 03:49:22 +0000
ROA not after: Tue 18 Nov 2025 03:49:22 +0000
asID: 205886
IP address blocks: 45.195.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98318 (0x1800e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 03:49:22 2025 GMT
Not After : Nov 18 03:49:22 2025 GMT
Subject: CN=68eb2547-c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:53:cc:84:9e:07:b0:9d:72:1e:2b:52:ba:
15:4d:0b:88:e3:cb:75:ae:78:db:7b:91:25:65:6b:
49:62:21:f9:4b:c5:11:62:aa:76:01:23:6f:25:b8:
e3:41:b8:9c:d7:22:20:b9:c9:c5:f2:ea:71:73:b2:
1a:64:75:1f:10:b0:f7:1a:cf:c5:15:65:eb:9d:b0:
7c:05:87:6e:7d:6e:b3:dd:d4:b7:3c:60:bd:2e:60:
8b:3b:53:90:1e:02:81:4b:1a:48:19:13:b5:90:38:
8b:54:6b:5d:fa:a1:94:c8:3e:88:58:2c:47:45:62:
02:8e:d1:03:ab:e5:a9:02:74:51:97:7f:4b:2c:6e:
d9:35:47:71:25:9e:af:de:c3:fa:61:b6:0a:92:d8:
7c:2c:f2:5c:cc:a1:ad:36:e0:0c:0f:29:ba:f9:8b:
4b:a1:82:d7:c3:16:43:02:07:1b:1e:c4:b8:9b:ce:
ae:a4:9c:2c:30:80:f9:1e:56:90:c2:82:6d:d2:78:
56:30:b2:25:ad:7f:68:ee:36:af:b5:77:8a:0e:46:
0a:92:83:f3:d2:de:ab:88:c9:c5:ea:3e:9f:92:b9:
de:9b:2d:dd:5c:a4:fe:07:02:62:1c:ef:23:37:30:
9a:b3:46:62:75:84:e5:33:6c:2a:55:dd:6b:21:68:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:55:75:C0:53:E9:B7:D2:75:3D:9D:EE:3C:3D:5A:73:B2:93:F1:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72BDE848A71E11F0A25033DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.154.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e3:fb:4a:82:28:f6:10:7b:7e:26:c7:59:00:49:95:df:ab:
83:ba:6b:6d:cd:d7:b1:09:94:83:8f:1f:e3:69:74:1f:a6:3c:
4d:db:72:3e:4e:1c:65:8d:4a:b7:52:8e:38:fe:cc:c4:99:0b:
57:ae:55:4f:3e:59:99:b6:53:88:f2:40:1f:8f:ca:a7:e7:0e:
ea:a1:37:1d:36:9f:95:8b:0b:6b:cd:e0:3d:37:ba:df:e5:d0:
86:4b:8f:3e:14:19:06:8c:f0:cc:91:af:bd:1c:c9:0f:1e:4b:
00:d9:dd:a5:2c:c3:81:e0:d5:ec:10:ec:21:72:38:4b:6a:d1:
e6:43:bb:c1:0c:c5:ee:2e:96:63:58:4f:11:71:4c:d6:8a:12:
e4:7f:32:99:1b:e1:94:e4:50:f4:a3:ac:81:d9:0e:2b:1d:63:
e1:4a:ab:83:49:9b:14:9a:7a:fa:79:63:9a:ed:da:af:ee:53:
a2:67:8e:8f:b1:c4:36:50:7d:b7:39:12:67:a3:60:e4:d7:1d:
ac:ec:72:4d:a4:76:80:ef:2d:f7:12:15:22:61:4e:c0:7f:45:
43:35:7e:51:4f:bf:dc:7e:de:05:c2:7b:ac:de:db:a6:04:f7:
01:29:0b:68:d3:d7:bc:18:09:0d:f9:72:b1:1f:65:0f:57:6d:
ca:70:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:34 2025 by rpki-client