Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2B029E939C11F0AC2803F5DAE4EC9C.roa
File: 0D2B029E939C11F0AC2803F5DAE4EC9C.roa (raw, json)
Hash identifier: EYscze78bg092Cdo6fDau9gNcpzxld2EHc7RuiYZLP8=
Subject key identifier: 6D:98:AB:61:CE:E2:99:E5:9D:C0:A1:C3:90:BD:3A:D4:88:C8:93:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2B029E939C11F0AC2803F5DAE4EC9C.roa
Signing time: Wed 17 Sep 2025 07:58:10 +0000
ROA not before: Wed 17 Sep 2025 07:58:05 +0000
ROA not after: Tue 21 Oct 2025 07:58:05 +0000
asID: 273020
IP address blocks: 45.195.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97174 (0x17b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:58:05 2025 GMT
Not After : Oct 21 07:58:05 2025 GMT
Subject: CN=68ca6a12-1cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:5c:2e:05:42:82:da:35:78:6a:46:6e:6b:
7e:93:a9:77:c7:bb:28:19:d1:c9:ff:f1:ef:84:0c:
64:d5:67:a2:ae:18:46:e4:ca:92:db:65:34:a4:11:
2d:ee:38:ae:aa:f2:07:57:6a:86:ab:ca:3a:97:15:
7a:ef:40:78:08:07:eb:42:83:fd:9f:74:27:87:0f:
0f:73:2d:7e:57:5e:ff:61:37:fb:c3:6d:57:67:c5:
65:4c:48:73:ef:27:fb:f9:ff:40:81:b2:18:a9:93:
6e:f0:38:ce:82:29:05:8f:2d:43:5b:e2:76:59:08:
68:9e:a9:99:72:3a:d4:c8:7d:31:a5:cf:97:60:93:
d5:21:c2:60:fe:a9:e2:6c:db:f2:49:17:b7:c3:84:
6f:ab:89:3a:52:bc:12:55:c5:43:53:5d:2e:f8:9b:
bd:3a:bf:ab:82:9b:08:de:b7:19:12:8d:f3:72:c0:
97:34:83:f8:5d:97:3d:7f:4e:4b:3d:b8:91:4a:78:
55:ac:c9:fc:88:76:e9:4f:ef:87:9d:99:ad:0d:93:
45:31:f1:0d:f7:70:07:2f:cb:da:9f:bb:30:de:ab:
7c:9a:dc:4d:eb:c1:02:8b:67:df:54:39:51:13:83:
83:f8:1b:bf:1e:21:d5:75:72:fb:e7:19:06:8d:61:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:AB:61:CE:E2:99:E5:9D:C0:A1:C3:90:BD:3A:D4:88:C8:93:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2B029E939C11F0AC2803F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.104.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0f:61:98:58:74:b1:31:8e:7f:a6:f3:53:a6:09:cf:14:c3:
1e:fb:04:53:9c:6f:21:91:14:80:a4:d9:f5:4d:78:55:cf:d4:
78:db:41:62:db:9c:fd:2a:57:bd:e9:70:bd:93:68:90:31:66:
95:cb:e4:f1:f1:f9:d3:80:8d:be:8b:28:ed:1d:85:ca:ac:8c:
7c:e1:93:cd:67:0b:cf:f0:75:1e:8b:3d:3b:52:65:c1:01:e5:
0f:0e:2e:98:95:cb:a5:0d:df:6c:69:89:41:b5:cb:4f:0d:37:
7f:93:76:ef:83:7e:3d:59:e8:be:02:a9:06:d1:b5:08:39:df:
e6:5d:be:2f:3a:1b:ff:a1:25:c3:10:81:29:b5:9b:6a:7e:05:
3c:e4:6b:fe:7d:05:83:96:aa:00:01:1b:b0:00:64:cc:6e:04:
bd:fd:0f:11:ef:35:a6:5d:73:f0:5b:7c:73:79:42:15:e2:d4:
66:90:c7:7f:b0:43:18:2f:94:e0:3a:18:2c:3f:00:15:97:e0:
1f:90:fe:3e:f0:24:b9:a6:76:2b:51:1e:43:ca:f5:a6:bd:83:
b5:3a:0b:83:cf:dd:56:b4:40:a8:ba:c0:b0:50:01:02:b4:67:
9e:ef:5e:d7:50:e1:87:f0:5b:b8:44:85:3a:93:3e:a9:be:83:
7f:8e:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:13:26 2025 by rpki-client