Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1EB49788E2311F0B733318ADAE4EC9C.roa
File: D1EB49788E2311F0B733318ADAE4EC9C.roa (raw, json)
Hash identifier: ISmz20bctSdWJscEvcfy+DssVB5xcS0ZdS/b3N2FSiE=
Subject key identifier: E4:9E:15:41:AE:07:B4:BE:EB:14:EE:E9:6E:14:B5:62:18:C6:CA:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1EB49788E2311F0B733318ADAE4EC9C.roa
Signing time: Wed 10 Sep 2025 08:54:55 +0000
ROA not before: Wed 10 Sep 2025 08:54:50 +0000
ROA not after: Wed 22 Oct 2025 08:54:50 +0000
asID: 273986
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96868 (0x17a64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 10 08:54:50 2025 GMT
Not After : Oct 22 08:54:50 2025 GMT
Subject: CN=68c13cdf-96ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:ad:27:0d:19:ad:de:df:50:51:a3:66:27:
ac:3a:b7:10:e2:f9:e0:08:75:da:ac:70:56:53:e5:
74:6c:e0:51:e9:c5:71:9c:98:38:05:90:da:b7:67:
83:aa:5f:2e:6d:9a:c8:68:1f:0f:90:bc:bf:92:4b:
0b:a9:e2:e0:d3:fc:f0:34:cb:f8:60:5c:2d:a5:f6:
6f:31:c0:c4:f5:87:71:7e:ec:88:4e:d9:42:91:a9:
12:da:c6:d9:6d:8a:09:d8:eb:40:8d:39:8e:f2:9b:
ee:f7:9b:db:d6:30:a3:70:79:e9:8e:6a:97:ce:34:
39:a8:2a:4a:19:51:03:02:10:5e:5f:3b:39:f0:83:
40:ba:57:19:57:25:60:ad:c5:22:be:b2:a8:6c:93:
6a:6f:0e:e3:1a:79:51:07:35:f7:a8:cb:48:5e:49:
7b:a1:d6:e0:4e:f9:9a:9d:93:7f:1a:5a:a5:a9:b9:
81:17:fa:4a:f0:57:0f:72:8d:cf:2e:ae:76:55:db:
47:ba:5d:99:f1:f9:22:91:9c:72:2d:d0:ec:6c:c9:
5c:65:86:7f:2b:5c:55:ce:5f:47:9f:52:76:8b:8e:
f7:7e:56:e0:1f:39:2a:8f:ce:e8:d5:59:d8:0d:5a:
42:b3:75:a5:48:23:70:ad:27:d5:7d:74:55:0c:d1:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:15:41:AE:07:B4:BE:EB:14:EE:E9:6E:14:B5:62:18:C6:CA:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1EB49788E2311F0B733318ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b5:ed:de:cb:6a:61:10:6f:ef:86:e9:89:21:b7:87:ea:d2:
68:96:a3:eb:59:36:83:84:e2:b4:33:b8:b1:d4:2c:9a:7a:79:
1a:ea:46:43:26:e4:fa:ac:69:51:40:8d:86:09:79:ed:ec:4a:
ac:b4:93:65:49:8e:92:cb:eb:5e:cd:60:53:ef:59:ff:9f:82:
7d:4c:e4:4a:45:48:5c:29:90:f3:66:23:58:46:71:b0:69:0e:
11:80:0e:89:33:b6:9d:ac:a0:cb:a6:b2:55:ea:98:dc:e3:95:
75:ed:17:de:24:31:b4:35:65:27:65:4d:de:c2:2b:47:55:9e:
ab:9b:9f:57:1c:0e:53:11:db:22:43:f2:0c:6c:d9:3e:f2:b1:
4c:2a:e1:ab:88:4a:46:52:a1:e4:35:bd:44:33:2c:a0:64:c1:
6f:bf:64:98:b1:0b:07:8e:b6:cb:e9:1e:3b:87:74:f7:6c:4a:
c1:56:dc:8b:e0:44:59:00:88:3c:0a:d8:0a:ae:e2:b1:1e:ee:
11:db:cc:ec:cc:c1:05:6f:de:3c:51:6b:36:bd:37:0e:2d:bd:
f0:34:21:4c:97:d8:40:f8:38:b4:2e:92:f4:ea:90:26:6e:c2:
43:ab:e5:e5:a8:fa:5a:ea:69:98:bb:9b:d8:91:eb:dc:a6:8d:
74:dd:d7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:36 2025 by rpki-client