Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8F8EB549F7F11F087A00FF0DAE4EC9C.roa
File: D8F8EB549F7F11F087A00FF0DAE4EC9C.roa (raw, json)
Hash identifier: hb5V4f/RuFxqZuixbw3z597zoBnZBJhHSvqo3hhM8vw=
Subject key identifier: 66:D5:18:DF:FD:F8:3F:19:52:3C:75:DB:E3:1C:A3:7E:2D:A1:AD:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8F8EB549F7F11F087A00FF0DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 11:06:30 +0000
ROA not before: Thu 02 Oct 2025 11:06:23 +0000
ROA not after: Mon 08 Dec 2025 11:06:23 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97920 (0x17e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 11:06:23 2025 GMT
Not After : Dec 8 11:06:23 2025 GMT
Subject: CN=68de5cb6-f606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:4e:d4:c8:2e:4e:f4:95:86:1c:90:3f:21:
2a:a2:cd:6e:e9:97:e7:30:4a:89:63:6c:b7:f8:05:
97:9b:85:3a:66:22:2d:b6:f1:d4:df:43:ba:55:59:
75:1f:03:d1:36:6f:a5:39:56:f6:21:60:95:f5:d0:
c1:cf:2d:a9:c4:31:c7:95:de:2e:31:73:76:8e:26:
36:40:8d:40:b2:9d:60:22:62:70:bd:0d:84:a5:d1:
86:a1:24:5c:d1:b6:5f:21:bb:a1:88:ac:a9:89:2c:
2a:fc:bd:c6:48:38:fc:6d:ff:b2:3f:ad:a4:bd:e0:
01:95:43:b3:cf:14:84:f2:6d:8e:47:3a:38:cf:d6:
50:ab:7e:70:62:d9:31:47:63:04:bc:85:81:3d:f3:
c4:b1:70:fc:a3:2a:7c:4a:61:ad:35:03:0d:ad:f1:
2a:18:10:bc:e4:f6:27:b0:a6:44:e5:c9:26:72:91:
95:29:72:3f:89:be:e1:62:5d:fb:12:1a:6e:1a:23:
a1:50:c9:78:35:d6:9c:4b:d0:60:86:05:82:d8:5e:
a7:16:a4:0d:dc:e6:f2:0b:44:e2:00:cf:4c:c8:cf:
13:f0:5f:d2:e9:5d:ab:28:ba:80:51:63:ab:89:d5:
da:a8:c7:1b:a8:f5:14:3c:9b:25:21:0e:43:9c:30:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:18:DF:FD:F8:3F:19:52:3C:75:DB:E3:1C:A3:7E:2D:A1:AD:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8F8EB549F7F11F087A00FF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bd:2a:9c:e6:01:ff:4f:28:12:49:a0:3c:19:0f:1d:18:fe:
26:44:5c:44:fd:7a:06:22:d8:45:b2:ad:5b:cb:97:6a:6c:28:
e6:f2:45:62:68:05:af:5b:54:e9:a2:31:69:28:11:6e:e6:fa:
0c:a3:83:e2:61:48:af:40:0c:39:cf:7b:a7:d3:31:c7:8c:56:
28:31:ac:66:36:dc:38:db:79:0b:49:7f:39:3d:66:5c:64:35:
05:d9:10:28:3a:55:68:3f:33:97:c4:fe:f1:82:3e:47:1d:c0:
85:e3:f1:10:51:f7:75:f2:c5:a3:c3:30:ea:eb:94:1a:bd:fe:
8a:c7:76:ca:9c:f2:59:e0:74:27:b2:ce:bf:c8:a7:cc:ae:98:
25:4e:b7:87:b6:d4:f6:cf:07:5d:fe:e8:69:20:31:73:da:cf:
15:3c:df:45:d0:27:20:17:da:dc:fa:c9:9f:67:f3:4f:d4:ae:
d7:51:83:f0:2d:e2:57:88:3f:b7:18:e2:c3:40:e2:8d:57:1b:
22:7a:ac:df:e8:f7:59:99:2c:e2:e4:7a:eb:04:19:0e:95:34:
32:10:1b:7c:17:da:e9:78:fb:47:ad:e3:58:83:e0:29:78:c3:
e9:65:91:99:c1:c4:c6:17:94:2c:5c:55:c5:1d:2b:d7:97:85:
bd:96:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:48 2025 by rpki-client