Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5B712C9DDB11F09A6965CFDAE4EC9C.roa
File: 8C5B712C9DDB11F09A6965CFDAE4EC9C.roa (raw, json)
Hash identifier: 2q8Uhm6840cwoOTrJwMHRFou5yJBoBP0QCCnDhnL8eY=
Subject key identifier: 14:15:DD:3E:83:0F:25:D2:A3:F2:EA:A3:31:1A:68:17:AC:D0:EF:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5B712C9DDB11F09A6965CFDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 08:57:53 +0000
ROA not before: Tue 30 Sep 2025 08:57:48 +0000
ROA not after: Fri 28 Nov 2025 08:57:48 +0000
asID: 153347
IP address blocks: 45.192.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97831 (0x17e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 08:57:48 2025 GMT
Not After : Nov 28 08:57:48 2025 GMT
Subject: CN=68db9b91-1b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:5b:57:35:f4:32:6f:9e:b3:9e:94:76:7a:
1d:0f:f3:1c:db:5f:18:55:8a:ba:99:16:72:9a:36:
3f:b7:9a:52:18:99:99:67:a6:29:d6:00:df:1b:60:
3b:bc:8c:a1:c4:3b:bd:ba:e3:ce:51:7b:e7:b7:93:
91:8e:5f:97:32:29:2a:39:a6:14:d3:de:b6:54:e9:
e4:ae:27:62:5c:60:07:96:09:c3:ec:fc:3a:58:9f:
90:75:52:fe:89:af:94:0c:73:6c:a6:fe:dc:d4:e8:
85:03:49:ee:99:7e:dd:60:a0:84:ff:b5:5e:69:3a:
ea:ad:02:d4:dd:b0:1a:4a:11:44:e1:04:59:a8:07:
14:04:be:2e:55:32:64:b4:9c:1f:01:a3:9a:b9:f4:
eb:b6:fb:fc:44:1c:ea:4f:0c:66:60:9c:83:49:41:
df:cd:bb:4d:a5:bb:fe:b4:ec:40:b7:70:f7:d2:18:
4e:b9:f9:20:b1:4e:6e:f5:88:1a:e2:92:06:63:75:
0b:c6:15:ef:f5:27:7d:d4:4e:b0:cb:f9:02:e0:98:
5e:27:83:81:fc:bd:bc:78:a8:86:be:53:10:84:5e:
b3:ff:56:5a:37:aa:a6:03:0f:22:13:58:b0:bf:06:
3f:65:93:7b:68:d6:2f:8f:6e:95:39:78:5d:88:8b:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:DD:3E:83:0F:25:D2:A3:F2:EA:A3:31:1A:68:17:AC:D0:EF:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5B712C9DDB11F09A6965CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1e:d1:cf:53:4c:6c:cf:ed:ee:a1:d6:07:b8:3a:64:d8:ab:
4a:d5:c5:cb:c4:f3:c3:ac:b3:5b:31:41:ad:a4:04:96:e6:a1:
fc:d0:a6:9b:a1:cc:ab:6c:bd:23:07:19:5a:1b:f9:9e:5f:f3:
a0:a5:16:84:b5:83:5b:18:9d:f5:e0:6c:59:08:29:cf:21:bf:
28:b3:e6:c5:39:1b:96:f1:1d:e6:8b:f1:6d:10:9e:64:e1:b3:
11:aa:e2:50:9f:d1:ad:aa:92:5e:53:96:4a:65:c1:d5:56:c6:
25:32:a5:e4:fd:44:8e:15:fe:d6:1b:4c:6e:f7:6b:70:26:e2:
fa:86:c9:ac:25:fa:e6:40:f6:3e:6b:40:c4:82:32:f1:32:f1:
61:36:2b:e8:b0:d2:33:e9:ef:ea:67:11:8c:60:d3:02:0e:cd:
76:50:72:68:92:64:41:d6:bd:a1:4e:e3:1c:f9:40:3f:17:a3:
26:f4:64:a6:48:8f:df:d4:5b:1f:42:ea:e7:df:df:7b:6b:3d:
ea:3b:e0:0b:82:9d:ff:31:c0:cc:3e:50:55:2c:3d:97:e6:dd:
34:7d:8c:bc:8b:d3:c0:8f:81:7e:ac:da:9d:65:8b:49:6b:53:
04:49:12:3f:c1:7f:15:4e:b6:50:ff:15:ef:35:77:65:46:ec:
1a:a5:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:12 2025 by rpki-client