Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9057D0CC8EEA11F0AA32AF95DAE4EC9C.roa
File: 9057D0CC8EEA11F0AA32AF95DAE4EC9C.roa (raw, json)
Hash identifier: 18nao0ZsXPw4HxzoIjSzcyNtkB8Hs+tHTLcSlRo9IeI=
Subject key identifier: 41:95:26:93:2B:73:82:91:1F:D1:5C:F9:7A:7A:1E:5F:C2:8B:81:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017AA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9057D0CC8EEA11F0AA32AF95DAE4EC9C.roa
Signing time: Thu 11 Sep 2025 08:37:35 +0000
ROA not before: Thu 11 Sep 2025 08:37:28 +0000
ROA not after: Fri 17 Oct 2025 08:37:28 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96936 (0x17aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 08:37:28 2025 GMT
Not After : Oct 17 08:37:28 2025 GMT
Subject: CN=68c28a4f-ad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:d1:73:23:2f:23:84:ce:92:b5:1d:23:4d:
44:34:9d:51:61:b0:0f:c0:78:b9:e2:75:f6:ac:d0:
45:19:fd:6e:55:a4:ef:da:2e:a5:35:0a:1c:d5:b3:
9e:8f:bd:45:5e:29:f3:f5:b1:d4:16:bf:36:a6:b4:
6d:33:c0:69:f7:19:9a:40:24:7f:d3:48:92:cd:69:
80:03:5e:78:6a:03:9c:00:4c:4a:7c:46:8d:aa:98:
7b:fd:b0:1f:b4:87:66:18:a1:4a:de:d5:9d:e7:c6:
d9:fd:45:a0:c1:f0:06:fa:1d:48:1d:21:ab:35:7c:
d1:36:9c:09:0a:30:f1:af:fa:a2:2a:b5:65:ca:4f:
a1:59:ba:81:95:7d:cb:c2:4f:e7:41:86:89:5a:f6:
b4:17:e9:37:73:68:5b:92:e0:35:85:9f:c5:3d:75:
e0:7f:f9:14:c2:5e:dd:fc:6c:cf:6a:b4:b0:58:5c:
66:f2:3b:c8:d8:e6:15:25:84:dd:d6:50:22:ab:a9:
d0:15:ad:83:29:ca:a2:da:8e:2c:ac:96:99:de:45:
cf:71:d0:00:1f:7b:76:96:c9:1b:6d:f5:9a:6b:bf:
b7:15:82:68:74:f9:f8:82:f6:77:eb:45:9e:d2:a3:
95:ec:62:f3:8e:18:74:b0:86:29:a4:22:52:cd:4d:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:26:93:2B:73:82:91:1F:D1:5C:F9:7A:7A:1E:5F:C2:8B:81:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9057D0CC8EEA11F0AA32AF95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:cd:3f:22:f0:16:7e:59:a4:19:b0:eb:cf:2d:02:c7:d1:65:
ee:50:b0:c7:86:dd:e7:19:46:da:54:b4:0b:25:f2:e6:72:43:
ab:fd:69:6b:df:f6:24:63:83:06:ae:c5:78:54:f7:4a:1a:4b:
11:28:d8:5d:d1:c0:63:1c:4b:da:53:8e:0d:eb:c5:b7:a2:6c:
65:e6:59:08:f2:27:9c:98:36:94:f6:f5:39:fb:8b:23:a7:3e:
dd:e6:0d:af:3b:4c:18:a0:16:9f:7f:a1:ab:a8:3a:b7:27:1a:
a9:a5:aa:e6:ef:9d:a9:51:9b:09:8a:11:a2:de:ac:93:0e:8c:
66:44:5a:59:d8:ed:0b:56:e4:7b:07:97:48:7c:1b:ad:73:47:
96:b7:cc:dd:bf:a4:25:ea:a3:bf:d7:02:bb:2a:d5:f8:bb:b5:
c1:2c:4b:fb:eb:e0:95:63:7e:00:2c:9b:34:00:57:e7:d9:38:
32:81:8a:dd:05:07:85:f4:31:6b:f1:25:66:6f:88:3a:cb:49:
95:cc:36:69:17:17:b2:2f:6d:87:f6:72:4d:a1:09:2e:84:a8:
3a:95:35:8d:96:eb:f0:90:dc:22:04:97:5c:d2:45:ae:c5:f6:
b3:a1:b3:88:c6:c6:94:42:d5:01:36:f0:0a:46:1e:82:da:1c:
ae:ef:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:35 2025 by rpki-client