Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E1B3B46A43211F0BC00BCE9DAE4EC9C.roa
File: 0E1B3B46A43211F0BC00BCE9DAE4EC9C.roa (raw, json)
Hash identifier: aZZv2/Os5O2VYYwH3apcI5EI8UnkdduScn4VEAmQiNs=
Subject key identifier: 65:A2:A5:14:36:D8:10:DD:73:F3:A6:91:C2:8A:EE:13:95:3D:C6:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E1B3B46A43211F0BC00BCE9DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 10:32:14 +0000
ROA not before: Wed 08 Oct 2025 10:32:06 +0000
ROA not after: Wed 12 Nov 2025 10:32:06 +0000
asID: 53808
IP address blocks: 45.207.216.0/24 maxlen: 24
45.207.217.0/24 maxlen: 24
45.207.218.0/23 maxlen: 24
45.207.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98154 (0x17f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 10:32:06 2025 GMT
Not After : Nov 12 10:32:06 2025 GMT
Subject: CN=68e63dae-ecdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:46:ba:26:53:b3:11:60:02:01:b1:97:2e:
b7:a4:d2:c7:e7:23:50:b3:27:da:0a:07:cd:c2:b9:
2e:2a:7a:80:6b:09:3b:ce:a6:e5:40:c2:3b:88:14:
f2:4e:fb:5e:91:19:67:58:df:9e:43:ec:0f:f9:49:
86:e9:27:32:ae:4c:5e:d9:2b:35:84:0d:dc:e8:61:
19:50:86:0f:9a:5e:27:b1:8a:28:bb:b5:3c:4b:84:
d3:b0:58:f3:d1:94:45:9a:ab:2d:a0:03:f6:28:9b:
c4:8a:07:9f:35:f1:af:84:81:da:91:12:2e:fa:1d:
40:90:95:a9:25:46:99:c2:4a:3b:2e:fa:57:46:d1:
34:5b:d1:0b:28:d8:48:59:a6:95:6d:9f:cb:03:d1:
ca:83:aa:73:71:42:e3:2e:89:b1:65:6e:94:ef:d4:
66:df:4c:2a:c4:9e:bb:99:91:d4:5e:d7:79:f8:18:
9a:85:fa:8f:8d:6d:23:26:8f:9d:f3:73:bc:d4:a1:
b8:55:89:b4:17:61:08:6b:a5:63:5f:14:cd:32:35:
11:be:8c:4e:83:8c:be:e7:aa:4d:28:9c:1b:e5:7d:
5c:85:94:b3:4c:0a:03:15:97:ea:73:3a:7d:8c:ea:
4b:3d:f0:ab:7b:8b:c1:58:ff:db:8b:4d:76:18:ba:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:A5:14:36:D8:10:DD:73:F3:A6:91:C2:8A:EE:13:95:3D:C6:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E1B3B46A43211F0BC00BCE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/21
Signature Algorithm: sha256WithRSAEncryption
23:d4:f2:63:4f:38:70:36:4d:73:01:ed:40:f9:34:83:e2:37:
c5:3a:88:b7:30:55:af:e2:c9:f9:0f:22:7e:bd:3a:b4:25:ee:
ca:7d:97:ba:c3:a2:b9:36:42:2a:60:db:d2:8b:39:4d:43:cb:
2b:de:60:6f:53:e3:c8:2b:ad:33:8d:fb:c6:42:c5:3e:a9:51:
48:a1:2a:fb:8b:9b:61:8b:d3:24:32:68:07:43:6b:c4:ab:31:
22:18:d8:51:94:da:45:f7:bf:99:e5:18:84:91:59:75:bf:cc:
4b:3f:17:e4:f6:04:7b:89:1a:aa:6f:da:d7:50:0c:57:5f:5a:
3c:38:12:9a:26:01:04:7b:71:94:b0:0a:e0:81:6a:1a:7e:df:
97:4b:e7:34:41:e6:72:e2:6d:12:50:2b:9b:d3:c7:91:6a:e6:
51:ae:ea:a1:eb:14:12:62:bc:50:1f:cf:22:c7:4c:70:54:7f:
be:16:29:ca:e2:71:d5:11:3b:12:df:e3:19:ae:31:8e:29:37:
94:42:67:d8:ca:7f:e1:5d:30:6a:f4:12:af:6d:ab:00:5c:9e:
df:93:18:d8:85:27:0d:62:de:56:02:e6:35:c4:27:f1:e5:e8:
f6:c6:dc:ee:48:7e:c9:1d:60:b9:11:3c:23:19:2f:b2:9b:d3:
5b:97:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:44 2025 by rpki-client