Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FBBDD74B57C11F083692687DAE4EC9C.roa
File: 0FBBDD74B57C11F083692687DAE4EC9C.roa (raw, json)
Hash identifier: a6JU6bQ6FTZ33YIbghJtaGfEczAjS25OA+2JbFYpV9E=
Subject key identifier: 39:64:BB:45:B6:77:0B:56:EC:2D:A9:76:0A:6F:39:39:6D:01:99:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018411
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FBBDD74B57C11F083692687DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 10:34:50 +0000
ROA not before: Thu 30 Oct 2025 10:34:42 +0000
ROA not after: Sat 06 Dec 2025 10:34:42 +0000
asID: 328840
IP address blocks: 45.192.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99345 (0x18411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 10:34:42 2025 GMT
Not After : Dec 6 10:34:42 2025 GMT
Subject: CN=69033f49-d53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:5f:88:33:de:22:a0:aa:24:84:4b:66:bc:
2a:1c:60:f6:eb:2a:5f:40:4c:83:2f:30:ac:6b:b2:
1d:17:fd:de:69:ce:28:53:d1:66:01:58:f0:f0:36:
c0:61:8e:e8:24:2e:68:0b:ac:bd:a6:55:21:6a:8c:
03:8c:10:44:56:78:5d:9a:05:fc:2f:26:68:dc:51:
8b:97:2c:29:4e:ee:d0:97:c2:5e:9e:a4:46:a1:23:
14:58:c8:2d:2d:e5:1b:4e:39:28:54:7f:15:ee:bf:
b1:f8:bb:99:dc:3a:37:ca:40:37:6d:f5:7e:17:c5:
c2:12:e8:22:5d:95:cd:0d:a9:e6:5d:80:3a:05:67:
88:2f:e6:3c:69:96:cf:07:0f:f0:7e:85:3e:99:8e:
cb:65:62:03:96:74:b3:dd:f0:b9:1f:e6:e8:65:ea:
0e:6c:43:dc:af:41:aa:6d:51:c6:df:2b:a9:07:f5:
61:c1:59:67:7f:29:96:c7:08:f6:a5:31:1b:00:9a:
35:cb:6e:96:f7:b2:a9:68:2a:f1:5b:6b:55:70:1a:
99:0c:25:0f:92:ad:b8:9e:18:31:0c:ac:7f:80:d3:
b9:0d:6e:38:5c:61:34:36:a3:6d:ab:00:f6:53:ce:
ea:5d:26:38:4f:80:12:f0:36:16:e3:c5:96:a4:09:
a5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:BB:45:B6:77:0B:56:EC:2D:A9:76:0A:6F:39:39:6D:01:99:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FBBDD74B57C11F083692687DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:33:f0:3d:63:a6:26:e0:25:5b:70:a0:a5:b8:1d:84:99:11:
92:6f:9a:c2:50:0a:67:e9:01:ed:84:e1:6b:5b:e4:97:91:46:
37:9d:be:0e:a0:98:76:e7:68:35:8a:a4:77:ff:e2:5c:ed:a7:
74:b2:ad:e6:e1:a6:f5:75:cc:91:36:30:60:2e:41:ac:6b:fc:
e2:cc:d8:95:8e:e5:f8:0b:ec:4b:44:0f:a1:5f:51:58:04:b7:
ee:ef:bf:d7:42:6f:02:25:41:b7:c9:b8:82:a4:06:9f:32:78:
10:97:29:a2:e5:e5:3e:92:f3:50:1b:64:e5:02:ec:84:b8:8d:
43:5c:fc:25:69:a5:4f:3d:90:c2:1f:e9:45:0c:54:fb:73:31:
86:b3:fe:c6:70:f4:b8:8c:b9:6f:a7:32:fd:81:aa:74:b2:73:
e3:56:99:83:bd:20:22:46:62:62:81:44:ab:61:03:ca:77:76:
f4:c7:83:49:45:00:b2:44:55:3b:51:44:9b:10:42:cd:b5:0b:
27:8c:83:40:22:f6:19:46:a9:f6:11:10:c0:47:6c:51:94:46:
f7:d0:a5:98:54:13:38:16:dc:7f:35:b5:2f:bd:ca:18:ef:c5:
c9:db:c1:ea:99:c9:e0:bb:36:07:67:88:59:80:bf:b5:38:13:
b3:19:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:32:57 2025 by rpki-client