Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E6D7D62983D11F0913B18EADAE4EC9C.roa
File: 0E6D7D62983D11F0913B18EADAE4EC9C.roa (raw, json)
Hash identifier: /ZkSmrtthIoHfMUbpX1nkiGkBWiLeSd9++Txf97g/hE=
Subject key identifier: 00:DC:57:8E:DC:57:0F:FA:6A:8E:A5:3F:87:96:41:88:75:A8:6C:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E6D7D62983D11F0913B18EADAE4EC9C.roa
Signing time: Tue 23 Sep 2025 05:20:45 +0000
ROA not before: Tue 23 Sep 2025 05:20:39 +0000
ROA not after: Sun 26 Oct 2025 05:20:39 +0000
asID: 55154
IP address blocks: 45.206.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97425 (0x17c91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 23 05:20:39 2025 GMT
Not After : Oct 26 05:20:39 2025 GMT
Subject: CN=68d22e2d-1a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:ef:1c:5b:ad:f7:64:ae:e8:c8:eb:8d:64:
99:27:d7:a8:5c:a7:c1:d2:38:73:ff:65:94:52:9a:
a8:1a:b5:bf:2e:77:af:a6:f9:cc:1f:3d:ab:69:1e:
ea:bb:12:fd:bd:f7:18:72:b1:8d:df:9a:c0:5b:38:
1e:27:ec:71:e4:cc:7c:31:95:9a:2b:5e:28:41:e9:
27:a4:93:84:9d:7f:c6:85:44:7e:94:d8:1e:4f:c6:
e2:94:b0:85:f6:70:0c:cf:f2:68:8a:50:ee:6b:71:
a5:41:98:9c:f4:9b:d3:3a:07:f2:b9:e9:ba:f3:23:
70:d4:73:b1:66:1d:59:76:fd:b7:67:13:b6:04:2a:
4b:85:8e:d6:65:97:fc:27:0a:81:dd:09:b7:fd:d9:
ae:6b:5f:43:c9:56:bf:37:52:38:ca:f8:8c:7f:fb:
c5:61:fd:38:45:6d:7e:35:b6:50:34:b6:1c:c0:9f:
ac:7b:b5:66:17:9b:ce:9e:62:99:87:ee:ed:a0:c4:
7c:16:90:0c:e1:08:59:13:89:cf:b5:ce:e6:7b:08:
18:8c:d7:d4:d3:d2:03:fd:b8:f9:42:bd:c4:81:db:
35:15:96:96:dc:af:1d:f2:c5:42:fe:8e:5b:e8:64:
a9:b4:88:67:ff:3e:42:3f:61:8b:90:99:4b:50:a1:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DC:57:8E:DC:57:0F:FA:6A:8E:A5:3F:87:96:41:88:75:A8:6C:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E6D7D62983D11F0913B18EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.12.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:48:d5:8c:25:56:6c:8b:46:f1:f4:1e:4d:6e:da:2d:96:46:
f5:69:59:30:d3:bc:75:f3:66:02:4c:08:f4:99:a3:8f:e0:92:
62:24:7b:5e:79:88:81:c0:ab:5e:f2:b8:18:73:57:be:41:d5:
19:ff:b9:87:46:75:68:77:a7:ae:da:b5:eb:9d:43:a5:56:67:
aa:0a:9b:18:a2:7e:41:e1:57:8f:a6:25:27:ab:0e:db:2d:d7:
8c:ef:37:0f:94:9d:7d:b3:59:a3:e3:0a:cc:f5:b4:5f:f5:17:
9f:b2:30:0c:31:0a:5d:83:bf:24:8c:b8:1d:3b:b0:90:47:a6:
a7:96:01:f5:f6:e5:77:0a:6a:c2:0c:5a:0a:49:99:bd:6f:ef:
8b:b5:48:da:2b:e3:7c:66:b8:3e:98:b2:01:d1:a3:02:62:24:
a9:ad:4a:83:a4:33:fe:dd:f2:8f:b4:29:41:af:73:5d:8a:99:
04:9d:f6:3b:4c:5b:8f:0a:16:f0:63:e2:39:49:49:d1:bb:62:
75:36:d1:07:08:dc:c6:b9:3e:73:73:2a:c1:5b:52:ec:3c:25:
70:44:3c:07:1d:88:7b:e3:fc:5d:b4:66:8f:76:fb:49:03:5b:
da:57:85:a3:59:6d:d8:56:40:3e:f0:2c:ce:04:60:a0:38:88:
9b:2b:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:59 2025 by rpki-client