Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B7C765CA35511F0844B78D4DAE4EC9C.roa
File: 1B7C765CA35511F0844B78D4DAE4EC9C.roa (raw, json)
Hash identifier: xbJhoQ5Y88LLjiT9LXVB3Pusze4hXpWgan9/qKSS4Gg=
Subject key identifier: 99:1F:11:21:07:13:5C:E6:A1:17:E9:F8:A3:16:AF:C7:3E:1C:50:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B7C765CA35511F0844B78D4DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 08:10:38 +0000
ROA not before: Tue 07 Oct 2025 08:10:33 +0000
ROA not after: Fri 14 Nov 2025 08:10:33 +0000
asID: 54252
IP address blocks: 45.199.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98090 (0x17f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 08:10:33 2025 GMT
Not After : Nov 14 08:10:33 2025 GMT
Subject: CN=68e4cafe-c075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ac:02:da:63:a6:53:3b:13:1f:8f:17:bf:62:
a0:54:2b:f1:75:98:93:90:a2:42:a4:59:46:00:3b:
1e:84:85:04:9d:df:9e:e1:fc:30:0b:21:26:42:fb:
86:93:db:2c:f6:c1:72:05:18:c8:92:ab:28:eb:f3:
69:f7:63:f2:21:e2:d5:0a:c8:b1:12:02:44:03:51:
48:5f:ae:9f:38:01:6d:66:df:e5:51:65:ef:b0:8c:
46:74:c6:ef:59:9a:f6:cb:3c:a1:26:fc:e5:f5:c2:
ad:f9:e3:4f:99:a5:09:0e:39:00:bf:30:d0:dd:60:
7d:3c:7c:32:83:da:e1:75:46:17:c6:f8:a0:6f:20:
2b:a9:e7:dd:4d:15:83:72:15:fe:75:be:81:22:7c:
4a:66:19:dc:c7:37:99:dd:31:2b:ed:5e:65:f5:6d:
dd:71:75:61:b3:2e:de:7d:63:47:e8:64:68:21:ad:
00:61:10:6f:64:4a:41:c7:3d:fe:a8:4f:3c:10:6f:
64:58:5b:92:b9:1c:c3:ea:0e:f3:83:b9:c9:fd:e0:
51:2d:2c:3a:36:86:ca:85:63:6c:f1:d8:8f:b5:00:
af:ac:69:a6:92:14:d9:10:0f:3f:06:23:66:9d:bd:
12:b9:c9:95:1e:d4:20:20:c0:06:ed:ee:83:ba:a6:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:11:21:07:13:5C:E6:A1:17:E9:F8:A3:16:AF:C7:3E:1C:50:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B7C765CA35511F0844B78D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:93:ac:cc:14:02:d9:5c:05:35:d8:92:a1:c4:bb:08:f5:c0:
69:39:0f:7b:cf:bc:14:9a:bf:7e:a3:c0:06:35:31:64:f3:4a:
a4:0b:0f:d5:d8:84:bc:e7:e3:19:cd:af:96:a5:b9:39:ca:7c:
f4:70:63:22:48:38:50:c3:e5:31:38:c7:fb:b8:a4:4e:85:cd:
ac:61:2a:7f:e9:00:55:91:ab:d9:e1:63:1f:f9:d1:74:54:b2:
14:04:b5:5f:c7:58:c7:ba:a4:b7:3b:08:2f:c6:3e:15:16:6b:
de:92:54:b7:03:d1:9a:99:cf:81:f0:33:fc:b7:6b:dd:71:99:
08:67:76:ef:9c:db:7b:21:70:7a:4f:a8:a4:c3:ae:47:67:9f:
c7:cf:df:60:2f:3c:67:e8:6c:eb:e9:a3:4b:b5:cb:b7:85:cb:
4c:d8:18:f9:24:17:64:85:7e:59:9f:b0:20:4d:ed:e9:c7:98:
c0:b8:0d:75:44:65:86:2b:6e:1b:cd:8b:43:0b:2b:4e:8f:31:
8c:f3:6b:1b:81:38:96:b8:d8:4b:0e:2e:a5:46:1b:c8:6e:fb:
25:cd:15:05:f9:e3:2f:a3:4c:99:3c:4a:fc:82:d7:5d:45:11:
70:4d:2e:d5:fb:2f:af:9b:34:0f:e6:b5:46:06:74:28:31:80:
e0:df:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:54 2025 by rpki-client