Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E87FFEB690FA11F089ABE9DBDAE4EC9C.roa
File: E87FFEB690FA11F089ABE9DBDAE4EC9C.roa (raw, json)
Hash identifier: y9HSb+PMqvlztgo2n39frfu69lEm17Gqmvbn5ceFuJ8=
Subject key identifier: 39:23:76:4C:D1:A9:97:1B:D2:70:D3:3E:4A:77:95:A5:B5:6F:C6:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017AFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E87FFEB690FA11F089ABE9DBDAE4EC9C.roa
Signing time: Sat 13 Sep 2025 23:39:37 +0000
ROA not before: Sun 14 Sep 2025 23:39:32 +0000
ROA not after: Sun 19 Oct 2025 23:39:32 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 23:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97019 (0x17afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 23:39:32 2025 GMT
Not After : Oct 19 23:39:32 2025 GMT
Subject: CN=68c600b9-e91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:54:15:41:f6:88:33:0d:1c:ab:5b:4e:5f:04:
59:06:1e:75:6f:42:09:1d:33:f8:87:b0:fc:5f:53:
e3:6e:1e:3b:65:cb:2b:13:59:5c:f2:cc:22:b8:ac:
fc:e3:3c:b6:ce:4a:1d:1d:81:3b:ab:93:63:2d:9d:
77:f2:02:36:a8:16:a4:b7:cb:4e:ff:4e:e6:c8:d4:
cf:74:8b:30:47:18:57:b6:6c:a0:bb:65:32:f8:82:
cb:44:ab:a7:02:7e:81:58:bf:54:3a:af:f4:73:26:
b9:cb:9a:8c:55:8e:35:3a:39:0f:44:c2:e3:ec:c4:
23:a9:97:d6:a2:a9:4b:10:ef:20:ee:b7:5d:83:0c:
9a:19:f1:86:42:59:bc:ed:87:08:97:d2:e0:b1:92:
d5:7d:70:b5:0a:34:63:a0:5f:a3:2a:b5:64:77:cc:
eb:57:e0:e4:00:af:af:09:db:1f:8c:8d:34:78:d0:
45:b6:ce:60:b5:b3:64:ca:d1:0f:2e:8f:e1:42:7f:
b3:30:8c:02:91:31:48:ed:e2:fd:79:a1:fb:c0:f8:
46:ed:9d:88:95:6e:93:ee:88:0e:6a:4c:d2:b6:04:
ff:81:8b:4b:27:ea:96:75:0b:68:a5:07:d2:fb:be:
ce:8e:6e:51:92:67:bc:95:56:fb:a5:48:5e:f1:25:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:76:4C:D1:A9:97:1B:D2:70:D3:3E:4A:77:95:A5:B5:6F:C6:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E87FFEB690FA11F089ABE9DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
35:f3:30:b4:ce:4c:06:f4:d6:81:42:c3:a2:b0:63:9a:33:df:
00:5b:cb:2f:0a:35:f1:45:0e:ae:65:fd:c7:f7:fd:4d:9f:91:
c6:5f:6c:4a:5a:7c:55:c5:fa:54:95:b5:39:a3:b4:9f:2b:d4:
2d:ef:47:3e:bd:d8:9a:02:0e:24:b8:50:53:94:55:7d:5d:9e:
8e:81:6d:30:7e:78:c0:e4:9c:71:7c:c5:ca:07:21:fc:0c:f3:
95:b1:53:e5:63:bd:11:84:23:af:d1:69:e7:45:3d:ea:bf:6f:
dd:89:6f:aa:73:42:91:7b:3a:5e:ba:f2:ff:e1:f9:82:03:c0:
01:03:8b:7a:1c:a2:36:d4:af:da:6a:a7:93:0b:e3:98:70:df:
cf:6b:7e:93:91:c9:30:61:5c:d5:ff:47:1f:7b:a8:bd:7d:61:
91:cd:ae:b4:b7:49:b5:b7:fa:fc:42:aa:8f:25:f5:48:ce:f9:
28:21:60:5d:92:5b:2e:e3:fc:93:d9:aa:74:b9:13:8f:87:5f:
a0:d1:c1:c7:e8:dc:3b:3b:d4:ea:9c:55:ea:35:a4:ce:21:de:
40:1b:11:e8:f3:63:ba:a2:3a:5c:53:68:a2:76:4d:c6:ae:d0:
bf:50:b5:98:e4:b6:26:19:f6:14:bc:83:de:64:1b:20:cb:1d:
87:5f:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:19 2025 by rpki-client