Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03061EC0AA8511F083D71BA3DAE4EC9C.roa
File: 03061EC0AA8511F083D71BA3DAE4EC9C.roa (raw, json)
Hash identifier: LtibngmHlE8wZkEMqVQ+7uWlJ6hLzhxtEGQR5HqY/oQ=
Subject key identifier: 0D:97:47:D1:B9:5B:63:2C:38:EE:5E:E9:B7:EC:22:48:0D:21:F2:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01812E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03061EC0AA8511F083D71BA3DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:41:11 +0000
ROA not before: Thu 16 Oct 2025 11:41:06 +0000
ROA not after: Wed 19 Nov 2025 11:41:06 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98606 (0x1812e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 11:41:06 2025 GMT
Not After : Nov 19 11:41:06 2025 GMT
Subject: CN=68f0d9d7-9f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:5d:39:ef:31:b0:28:95:c2:6a:39:ef:cb:
dd:c4:7d:f5:de:08:51:e8:50:94:b5:5b:e7:cf:00:
b2:8d:58:09:a8:82:40:3b:1e:27:9e:49:3d:f4:db:
45:e1:80:c3:59:05:6f:36:12:cd:63:bf:fb:ef:5b:
2f:af:ad:98:97:ce:99:00:1e:f9:1e:05:2e:a5:35:
97:e7:8d:ff:be:9b:f1:15:af:e4:26:5a:20:7c:40:
c4:d0:79:f2:c8:d3:da:9d:9a:10:30:87:fa:25:34:
f1:51:0a:8f:21:02:07:b7:66:4c:c7:e2:ad:38:19:
4a:a9:ee:da:06:d5:bb:41:c6:7e:32:d1:30:e1:d2:
18:b9:e0:86:b7:64:79:7f:66:ee:d5:81:f3:ad:57:
1a:cb:f4:97:eb:91:aa:54:d1:04:56:2a:a9:92:30:
3b:cd:40:b7:47:aa:d7:de:a8:64:72:97:7f:21:da:
1f:0d:22:a3:13:5f:5c:17:38:28:0d:11:73:3c:1b:
ec:7b:e0:0f:39:ec:fe:05:cf:f9:dd:02:fa:dc:e7:
e0:a1:c6:cf:e2:0d:f5:68:dd:68:b1:d5:a3:02:4c:
16:f1:27:88:3c:70:78:10:8a:b0:c8:e8:13:4e:22:
cf:18:ba:a3:63:ec:91:31:1e:9c:5b:bf:2b:e8:b4:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:47:D1:B9:5B:63:2C:38:EE:5E:E9:B7:EC:22:48:0D:21:F2:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03061EC0AA8511F083D71BA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:48:4f:df:e4:a5:f9:5a:06:0c:37:3b:63:8c:c2:dc:31:7e:
ba:7f:fc:e5:47:9b:aa:da:01:54:4f:73:e0:27:cb:e6:34:9f:
d4:d9:79:e2:70:d1:1e:58:c5:09:a3:19:1e:71:3c:36:0c:95:
53:ac:c0:c8:16:b2:cd:48:2f:0c:a1:ee:a6:fa:28:f1:27:88:
3b:89:c4:33:96:06:27:80:d1:70:fe:4f:73:bc:ac:7e:9e:64:
ed:85:b5:0c:93:05:f7:1f:a2:6d:af:10:df:d8:cc:6f:69:3f:
e0:c3:0f:63:eb:1b:7b:9b:ca:19:a2:3c:b6:a0:1e:63:59:ac:
18:63:04:f1:f0:d6:cc:9a:7a:4e:87:66:24:82:ee:5a:a1:3d:
61:54:92:0d:6e:1c:6a:12:13:2c:0c:72:e8:e3:20:6f:49:bf:
fa:b7:ab:7e:24:5d:05:4c:81:de:ca:fa:b7:96:f1:51:ed:9a:
b2:aa:97:26:01:7f:b8:5d:21:4a:9b:5e:fc:17:fc:2b:1a:49:
22:3c:f3:f6:75:66:e6:7e:8f:f1:40:c0:50:c8:dd:dc:e5:9b:
3c:01:6f:dd:29:f9:bc:42:ac:ca:2e:aa:07:58:80:eb:aa:09:
9f:12:3b:15:1b:9c:a7:d2:c7:2a:11:68:46:7e:78:8a:1f:e2:
7d:cb:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:28 2025 by rpki-client