Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6B4592AFFA11F0B2131FF4DAE4EC9C.roa
File: 1B6B4592AFFA11F0B2131FF4DAE4EC9C.roa (raw, json)
Hash identifier: fYMm2Zqby5ohrog9EuNUpxHsBsg5A4Xyzgv+bZ2JWbw=
Subject key identifier: F2:E9:46:7B:EA:D8:66:57:43:06:23:85:51:12:17:AE:E6:1F:49:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018233
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6B4592AFFA11F0B2131FF4DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 10:21:59 +0000
ROA not before: Thu 23 Oct 2025 10:21:52 +0000
ROA not after: Fri 28 Nov 2025 10:21:52 +0000
asID: 214238
IP address blocks: 45.192.59.0/24 maxlen: 24
45.192.63.0/24 maxlen: 24
45.195.161.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Oct 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98867 (0x18233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 10:21:52 2025 GMT
Not After : Nov 28 10:21:52 2025 GMT
Subject: CN=68fa01c7-be71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:67:02:7e:ea:e1:d9:e1:23:2c:7e:9e:5d:
f7:b7:6a:8d:df:d4:a0:72:bf:74:2b:63:cc:f8:b8:
52:9e:ba:07:65:2a:e6:68:38:96:f8:68:39:eb:1e:
29:52:83:9a:56:52:0b:4c:9f:fa:35:64:4c:91:67:
f8:f7:ca:4c:3b:e8:14:62:26:2f:ce:ef:50:f6:96:
9b:d6:eb:0f:20:61:12:9d:fb:fa:98:ae:51:da:52:
67:5b:41:db:01:f8:f6:cd:d4:5d:67:30:0b:24:34:
aa:b1:88:11:f7:50:e2:99:78:6b:9d:1a:70:ea:0e:
70:c4:f4:10:0e:89:c7:af:f8:b8:ad:ed:65:8c:ab:
5e:00:e8:27:44:1c:8d:eb:34:2b:30:f5:77:6a:37:
62:dd:b2:26:bd:76:b2:2e:ef:59:0f:7c:17:98:82:
b2:c5:41:4b:b7:31:5a:bc:07:97:09:dd:14:e5:eb:
2e:cb:d1:43:10:4b:58:48:5d:af:08:a0:bb:7d:7f:
9b:2d:9c:8e:3b:8c:2b:e3:a6:da:e6:e1:c5:04:72:
61:2a:81:4a:a9:5a:08:0d:e8:1a:03:b7:bd:66:1a:
ff:36:72:5f:00:a6:9d:7f:46:bb:88:75:56:9d:da:
7b:14:8e:d0:f2:86:3f:4b:ce:9f:38:2e:94:1a:a6:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:46:7B:EA:D8:66:57:43:06:23:85:51:12:17:AE:E6:1F:49:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6B4592AFFA11F0B2131FF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.59.0/24
45.192.63.0/24
45.195.161.0/24
45.199.219.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
af:29:71:1d:f1:3a:b1:61:79:6c:38:96:b0:38:50:7d:79:58:
16:82:27:f1:9a:cf:34:35:67:98:6d:bd:dd:d9:5a:43:bd:01:
8a:61:7d:c5:e4:aa:4b:70:42:bb:3d:48:ce:aa:c4:4a:06:a2:
b2:f9:b5:84:74:17:c6:18:c8:9f:93:70:fb:cb:d3:6a:cb:3d:
d1:eb:ec:b6:d9:c8:27:39:c4:18:95:fb:0b:cd:2c:6a:e6:55:
9b:99:60:78:0c:28:09:2d:d2:5b:bb:b3:60:1d:c3:fc:41:2b:
69:3d:c7:6e:5d:71:62:02:f4:f9:3c:72:30:7e:94:f4:d3:da:
06:e3:1a:fb:e2:43:14:ef:ba:d1:6f:7c:f2:2c:5a:de:91:d7:
92:25:19:6a:5b:d5:20:33:ac:82:96:26:06:25:4e:8e:82:dc:
6c:4e:04:30:e4:2e:b1:19:9b:db:76:91:ae:3d:31:11:6a:7d:
54:6b:a2:6c:47:8e:48:c7:b4:8d:91:c3:7f:19:c7:58:19:09:
66:3a:9a:ca:a0:3f:f9:55:bf:4a:1a:1a:56:e3:0e:15:cd:a2:
72:a9:0c:ea:2b:20:b6:f0:14:92:e7:9f:12:2d:f0:6a:4d:a7:
e5:d8:19:36:50:66:e7:7b:9b:ce:3c:4c:49:c4:f5:d7:32:5d:
7c:e6:f7:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 24 03:13:20 2025 by rpki-client