Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECD1D1B4A81B11F0B44A4CC3DAE4EC9C.roa
File: ECD1D1B4A81B11F0B44A4CC3DAE4EC9C.roa (raw, json)
Hash identifier: pWk58roG/5AAFLDCE6nJ8Me6S5c/O4TnXuy2no6x6rA=
Subject key identifier: 5E:4C:F0:15:14:E4:27:A8:6E:C0:87:1A:2B:5E:BC:BB:E6:FD:36:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018057
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECD1D1B4A81B11F0B44A4CC3DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 10:03:54 +0000
ROA not before: Mon 13 Oct 2025 10:03:50 +0000
ROA not after: Sun 16 Nov 2025 10:03:50 +0000
asID: 401783
IP address blocks: 45.196.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98391 (0x18057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 10:03:50 2025 GMT
Not After : Nov 16 10:03:50 2025 GMT
Subject: CN=68ecce8a-4f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:ac:64:9f:53:0a:40:06:67:c8:a5:b9:b9:
53:02:21:60:85:2c:ce:18:e9:34:41:dd:43:a9:8c:
e3:1b:be:eb:db:e0:66:66:9a:70:f7:4c:94:ad:fc:
07:a4:39:b8:56:49:c8:dd:e5:ff:0e:f2:49:b9:39:
62:ce:ec:68:d6:d0:1e:2a:68:7c:33:37:9e:dc:74:
8a:7f:01:23:3d:8f:43:54:53:03:be:71:e9:d1:b1:
0d:b9:cc:d1:51:68:18:46:21:97:5a:76:3e:16:c4:
f8:c4:10:1e:b7:c6:61:b6:2a:7f:43:35:4e:f2:48:
af:3e:c6:55:3b:fa:18:72:1a:99:72:59:6a:3f:9a:
50:ad:7e:90:be:df:fb:72:a3:34:40:82:db:7b:4e:
5f:27:fc:c6:53:38:ec:11:ad:c9:e8:d0:ed:32:85:
76:8d:14:ec:3f:c7:ca:96:4d:8f:56:e5:be:f0:ca:
00:e3:40:13:44:64:d2:cd:32:27:bb:10:93:29:07:
bf:64:49:75:db:3e:4a:43:bb:5a:06:a8:b2:d6:0a:
3c:4a:b4:c0:b5:49:40:cf:d1:4f:71:c2:b0:4c:4a:
06:b4:68:4c:83:e3:81:c4:38:7b:f8:9e:7c:7b:06:
c4:32:ed:01:13:c0:f0:6d:50:3a:f0:1e:45:84:c4:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:F0:15:14:E4:27:A8:6E:C0:87:1A:2B:5E:BC:BB:E6:FD:36:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECD1D1B4A81B11F0B44A4CC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b6:69:f4:cf:27:95:7f:4c:31:83:c1:a2:e4:c6:2f:d5:a1:
5a:cd:00:63:ee:d0:cf:2c:42:1b:3d:e9:f3:7c:05:e4:7a:9b:
51:81:ef:43:a8:f2:06:8e:27:5e:4c:e9:f1:e7:f3:7e:65:62:
b4:85:00:0c:c3:07:6a:1d:79:f7:3e:ec:a0:48:62:d9:de:fc:
4d:39:80:e2:47:fe:32:31:3d:d6:9c:ed:8a:6f:ab:3c:62:f0:
d4:66:41:06:d6:53:e0:30:e0:cf:62:07:11:02:f4:23:55:65:
58:46:ae:e4:f4:a2:f3:bc:c8:3a:ee:00:b6:a1:2b:05:4b:71:
4e:b8:1b:7b:7b:ea:30:0c:93:7a:f0:26:ec:b5:50:a9:41:cc:
ef:6f:a2:34:57:45:a2:37:00:a2:59:85:59:79:49:fa:cb:5a:
62:c0:af:f1:73:e9:39:4e:54:7f:a5:75:32:94:e4:9a:39:51:
e6:0f:4a:81:2c:43:9f:ad:c0:3f:b8:e4:83:0e:9b:70:89:4e:
ae:dd:cc:63:bf:05:f8:3d:4f:9b:85:91:eb:7c:b1:e7:70:bf:
c7:74:62:27:b9:f4:e9:eb:07:b7:13:7d:4d:d3:21:b0:8f:ef:
75:08:f1:1e:b5:55:c7:87:80:37:a8:51:6c:d6:72:d4:40:d7:
52:b0:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:21 2025 by rpki-client