Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1DEE15E9D6F11F0A941C68ADAE4EC9C.roa
File: E1DEE15E9D6F11F0A941C68ADAE4EC9C.roa (raw, json)
Hash identifier: 45F9XWdyUxnBmCx61E0IR1OchlLNT5fGBHDMVihCis0=
Subject key identifier: 51:DD:83:F3:BB:AC:74:7F:03:72:C6:A8:3F:66:6F:1E:8B:4F:4C:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1DEE15E9D6F11F0A941C68ADAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:07:11 +0000
ROA not before: Mon 29 Sep 2025 20:07:05 +0000
ROA not after: Mon 03 Nov 2025 20:07:05 +0000
asID: 152599
IP address blocks: 45.196.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97775 (0x17def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 20:07:05 2025 GMT
Not After : Nov 3 20:07:05 2025 GMT
Subject: CN=68dae6ef-270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:6c:89:61:de:19:07:f6:9f:10:01:0f:30:
d5:3c:c3:e1:39:d5:18:3a:58:39:64:19:eb:a5:d6:
91:3a:be:b5:32:72:20:c5:c0:b6:81:54:f4:eb:68:
0b:24:51:6b:97:93:18:d8:56:b4:c0:2a:6c:82:24:
a6:09:b1:62:48:e3:66:b8:07:a4:2b:7f:6c:6b:cc:
6b:bd:9f:bd:92:59:c3:f8:5a:c4:19:42:51:64:de:
d9:9f:af:35:bd:c3:a9:2b:37:2f:76:62:14:b3:5b:
28:06:00:40:00:1b:0c:ec:fc:1d:b8:5f:b9:0e:6e:
37:cf:e8:30:81:a8:25:10:7e:58:af:3c:13:75:b5:
19:0c:a7:17:0a:af:1b:4b:32:5b:33:0a:6e:c1:86:
b1:f3:43:09:5f:93:7e:b8:70:13:d2:41:fe:fb:9b:
ff:5a:dc:80:86:4e:06:39:65:29:b6:b4:ec:95:39:
f7:db:60:f9:af:ee:d4:aa:96:6f:6d:ab:5d:7a:40:
35:ab:7c:e2:7c:9c:64:7c:26:c1:a7:d2:60:ee:68:
b2:db:29:e9:e6:80:89:7c:90:e1:4c:0a:b4:65:69:
98:4f:29:f7:60:c2:2d:ee:a7:6c:93:21:65:a8:3a:
7b:77:19:5d:2c:ff:fd:40:51:3b:89:2f:98:64:ac:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:83:F3:BB:AC:74:7F:03:72:C6:A8:3F:66:6F:1E:8B:4F:4C:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1DEE15E9D6F11F0A941C68ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e6:53:11:89:3a:a8:92:dc:f1:cd:18:fb:bd:b4:37:d1:88:
14:3b:07:18:5e:8d:3a:4b:36:b7:db:e0:87:9e:72:62:40:1c:
00:29:ea:69:27:c7:dd:dd:42:7f:65:8f:78:e7:fd:b7:77:c0:
f8:3e:2d:c9:36:2c:e9:8c:07:49:2d:ef:27:ed:98:3f:c2:78:
e2:9f:18:32:67:69:a7:58:34:1f:32:fe:12:df:e0:5f:21:6b:
dc:53:76:75:a8:2a:a8:68:a6:4e:09:e7:e4:5b:33:6e:1d:ab:
ac:92:c7:1c:08:6b:79:42:17:5a:53:3b:f9:ad:f7:7b:11:ab:
e7:10:d7:69:32:ce:16:70:b0:1c:7d:de:87:6c:2d:b3:46:d7:
13:19:f1:3c:71:f0:f0:4e:9c:6d:5a:c5:1c:1a:dc:05:8d:d3:
60:ff:20:af:15:7e:0b:f2:ae:f8:ae:4e:be:19:78:e2:67:fd:
ea:ea:be:51:91:83:ce:cc:6a:e5:3e:94:a7:b6:bc:d4:fd:07:
c4:22:e0:95:e9:8a:dc:aa:3c:37:67:d0:b9:0b:97:7c:4e:e7:
b9:8b:99:d4:77:ed:d5:05:e2:ae:17:33:51:76:31:d3:6b:6a:
22:23:0f:a8:67:db:06:c1:b6:d2:1a:fc:08:cb:1f:92:6a:1e:
63:24:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:20 2025 by rpki-client