Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CC6E20AA6811F0B1BD11E7DAE4EC9C.roa
File: 04CC6E20AA6811F0B1BD11E7DAE4EC9C.roa (raw, json)
Hash identifier: PiPgEeWSKsWkzp4l4jh7ozHPXHIzYMlsucomAblp4cE=
Subject key identifier: 2E:B4:D6:26:DC:F2:4F:B1:CC:2B:16:E6:A5:03:7A:38:25:25:F7:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CC6E20AA6811F0B1BD11E7DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:13:38 +0000
ROA not before: Thu 16 Oct 2025 08:13:33 +0000
ROA not after: Thu 20 Nov 2025 08:13:33 +0000
asID: 395793
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.14.0/24 maxlen: 24
45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98546 (0x180f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 08:13:33 2025 GMT
Not After : Nov 20 08:13:33 2025 GMT
Subject: CN=68f0a932-0c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:94:d8:4f:f5:00:cd:c8:0d:31:b3:11:04:
20:b3:c4:a1:29:2c:f3:55:32:c0:68:c6:2f:13:6c:
a5:f4:db:b0:d2:d7:90:14:3b:22:23:23:b5:59:fc:
f4:62:f1:6a:65:73:33:d6:38:5e:aa:46:e8:db:c2:
82:fd:52:32:69:11:60:57:9e:26:fc:a9:44:1b:2f:
1b:4f:ec:2e:65:0d:b8:0d:6e:fa:78:a6:ca:76:9f:
c2:8e:6c:ca:27:05:cb:ea:16:5b:56:b7:1c:db:1d:
9b:03:83:8c:8c:54:8f:97:8c:c0:05:11:59:b7:c0:
7a:f3:fd:85:5b:43:59:7f:55:56:e9:76:c8:d1:e0:
a3:83:52:34:33:3b:54:9d:f4:a8:97:ac:42:2b:90:
d1:09:bc:7c:65:5f:23:9c:ac:08:4d:d1:ab:ef:74:
c8:3a:8b:21:ac:fe:68:a6:e9:c9:aa:d9:6d:60:67:
c1:95:0b:9b:36:71:ba:2a:20:ea:03:72:8f:04:29:
f9:ec:8c:b3:30:9e:6d:c4:69:59:16:40:cb:be:ec:
4a:a7:fc:91:2b:f4:2e:a8:a6:18:b8:7d:13:78:5c:
69:4a:12:5d:88:34:93:84:4c:77:cc:53:32:57:d5:
61:f7:8b:5f:33:73:d4:85:65:6e:0b:77:9d:40:51:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:D6:26:DC:F2:4F:B1:CC:2B:16:E6:A5:03:7A:38:25:25:F7:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CC6E20AA6811F0B1BD11E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0-45.192.16.255
45.198.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:54:67:d4:08:be:10:ed:a2:f8:3f:e5:a8:a1:2a:6f:f7:81:
e4:98:e7:86:96:0c:55:aa:ac:0d:eb:3c:12:f6:dd:48:6f:76:
40:20:ef:2c:49:16:e3:ec:e3:b0:5e:00:04:5a:69:b4:47:c4:
dd:ff:ba:a2:e4:82:30:07:ef:3e:c7:aa:ad:71:57:91:e4:80:
71:f1:af:67:5b:d2:5a:21:ca:60:52:00:33:44:9e:25:18:18:
36:cf:a8:2f:cf:07:60:84:70:1c:4c:ea:86:e3:d4:2e:94:31:
87:5d:f8:6b:09:f6:54:92:76:25:af:f9:d2:52:7a:71:69:6c:
b0:30:06:6f:85:96:8f:0f:09:cf:5a:08:00:ac:65:97:47:7e:
7f:68:c4:47:e5:9a:72:82:61:23:bc:ad:43:1d:bb:ff:40:e5:
ed:ab:3b:07:38:90:2d:9d:57:02:88:dc:57:fa:b5:1b:7e:4c:
04:12:c5:e1:0a:4d:d1:34:97:11:0f:4a:0d:bc:93:fd:3e:97:
30:61:bb:95:c7:dd:cf:ca:4b:0d:ae:f4:b2:56:c8:1b:34:3b:
80:d5:be:a7:78:07:2f:67:a4:61:e1:1f:38:4a:87:80:1e:d5:
02:e0:c0:0b:d1:fb:3a:3c:65:c7:7c:aa:eb:ef:aa:53:a4:27:
2c:98:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:50 2025 by rpki-client