Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1856AF98A82211F0986567EADAE4EC9C.roa
File: 1856AF98A82211F0986567EADAE4EC9C.roa (raw, json)
Hash identifier: uZYVxiwjEMhvnLQSor9sgw1X1WsqlYxCXXheu28/2lw=
Subject key identifier: 95:2E:49:65:D2:56:76:C5:38:68:B7:1D:81:CF:92:43:73:8D:EC:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018067
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1856AF98A82211F0986567EADAE4EC9C.roa
Signing time: Mon 13 Oct 2025 10:48:04 +0000
ROA not before: Mon 13 Oct 2025 10:47:59 +0000
ROA not after: Mon 05 Jan 2026 10:47:59 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98407 (0x18067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 10:47:59 2025 GMT
Not After : Jan 5 10:47:59 2026 GMT
Subject: CN=68ecd8e4-60b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:68:c0:f8:40:11:a0:bc:c9:3f:4a:94:08:
16:ee:d9:f6:fc:a2:2d:88:30:0f:a1:32:b5:f4:fa:
2c:09:93:03:cf:9f:fe:20:c7:98:f8:62:00:21:b0:
b1:6b:d2:7e:89:ed:f0:12:ea:90:e5:71:63:a8:30:
3b:d9:d9:22:71:43:75:a0:35:4d:f9:19:ea:2d:76:
00:ab:9c:be:69:82:07:2e:ae:b0:6a:60:ee:35:cd:
d2:c8:60:c7:8c:48:82:8e:54:a4:51:2b:af:58:47:
eb:dc:11:e6:82:ff:cf:59:41:f7:a0:2a:df:59:e1:
ab:ea:bd:74:97:a6:c0:be:5c:42:ab:ee:7e:1b:d5:
f1:3d:73:6a:e9:df:d8:46:bf:b6:c9:fc:6d:28:16:
08:3b:7b:48:cd:1e:e4:e0:62:24:63:46:42:8c:24:
45:89:7c:83:2d:0f:87:39:7c:31:d8:11:2c:95:0c:
bf:6c:d9:4e:b1:86:18:34:c9:74:bf:73:e6:e5:96:
25:f6:32:1c:78:b2:00:3d:6d:29:eb:b5:77:60:03:
7b:02:6d:5e:e8:c3:10:a8:73:ab:9c:cf:69:e3:ce:
47:fc:53:b3:bf:8c:46:25:3d:23:0d:57:09:2a:3f:
28:76:8d:5a:df:8b:4d:3b:0f:05:78:39:40:31:61:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:49:65:D2:56:76:C5:38:68:B7:1D:81:CF:92:43:73:8D:EC:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1856AF98A82211F0986567EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:86:8d:24:a6:ac:c1:ec:78:9d:7d:2a:c2:fa:6f:73:14:13:
c1:66:61:ff:31:c5:7e:c4:97:4e:4d:94:c6:5e:54:2d:c3:68:
16:b5:98:43:38:5f:27:9f:ef:8c:d0:e5:f1:2d:72:d3:08:1a:
00:bb:da:87:ea:f5:23:be:cf:7a:ef:6d:8d:27:a9:74:0b:d6:
1b:e4:00:08:73:78:e7:4c:49:4e:6c:c8:9c:c2:fe:30:b7:98:
48:f4:5c:ec:9d:d6:8d:e3:ef:15:be:74:a9:ee:f5:d6:a4:80:
41:e2:71:c6:9b:19:fc:77:04:10:b8:f3:b1:4c:f6:d6:52:f3:
b1:d3:83:8b:30:1c:7c:01:da:ec:df:c6:7d:67:8c:d2:dd:55:
d2:21:28:91:e3:44:b9:bc:e2:aa:e4:51:0c:68:0f:53:57:53:
8a:44:78:73:e5:6b:50:b4:89:e4:f0:07:68:40:d4:e3:17:7d:
6d:e8:7a:9c:7f:db:67:6e:20:31:b5:a5:6c:b0:e9:a4:3c:83:
9c:7c:bd:ee:ef:c1:5c:25:88:d3:99:60:ae:43:2b:7b:36:03:
e4:8a:44:74:a6:28:a5:66:e7:7c:98:b1:6e:aa:0d:2d:58:53:
22:34:dd:d6:5e:9a:ab:97:53:58:7c:94:5b:cb:d3:6d:27:85:
b0:2d:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:35 2025 by rpki-client