Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DBF88E4997F11F085099A83DAE4EC9C.roa
File: 1DBF88E4997F11F085099A83DAE4EC9C.roa (raw, json)
Hash identifier: oC1gj6nYvR2ng8WgGKyM+mmx/wsuWCbl8AYmx8Hp6oY=
Subject key identifier: 20:91:8F:70:FD:A9:6B:7E:EC:0A:EE:CF:2C:F8:7C:83:8E:26:69:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DBF88E4997F11F085099A83DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 19:46:09 +0000
ROA not before: Wed 24 Sep 2025 19:46:04 +0000
ROA not after: Fri 31 Oct 2025 19:46:04 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97553 (0x17d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 19:46:04 2025 GMT
Not After : Oct 31 19:46:04 2025 GMT
Subject: CN=68d44a81-4d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:11:9f:ef:ea:6f:60:20:e0:7a:41:2d:48:
a9:cf:b6:28:2a:43:e3:ad:e1:4c:cb:b0:8c:e3:0d:
11:85:56:03:37:44:f1:c4:9a:88:10:17:46:97:9f:
40:34:c8:1c:ad:ab:4f:45:9c:69:e4:70:c7:d9:0e:
6a:5e:94:a2:6f:8d:80:4d:dd:33:88:3a:b6:96:72:
f9:d0:ed:ac:05:7d:6c:f3:51:44:5d:ca:97:64:a3:
7d:84:47:ab:4c:a7:08:ce:c2:2a:ee:88:3a:06:f5:
a7:6f:9a:64:8b:67:4a:78:e1:26:9a:3d:80:dc:28:
f0:49:0c:72:b2:2d:c5:0b:4e:75:4e:37:09:3b:40:
87:e5:82:0e:c0:1f:c3:cc:13:83:53:1a:54:e9:62:
59:90:69:dd:b1:12:2f:5c:87:e1:55:76:fe:5c:e0:
b3:33:cc:24:ac:f8:c4:83:65:6d:0b:23:97:ed:8a:
35:98:0d:e2:ff:7a:e5:a3:66:ed:b3:a0:19:2c:77:
26:18:c4:62:dd:c0:0c:af:61:8d:bd:85:9d:e2:e3:
c1:41:d6:fa:46:17:8d:bf:c7:0e:78:5a:24:14:70:
a0:81:8b:5a:55:c8:ba:b2:2e:f9:4d:13:fa:4a:b7:
83:bd:5e:9d:1e:89:68:19:2b:2d:80:22:e5:c9:c9:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:8F:70:FD:A9:6B:7E:EC:0A:EE:CF:2C:F8:7C:83:8E:26:69:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DBF88E4997F11F085099A83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:db:48:25:e0:bf:ff:7d:6d:f9:9d:e8:52:32:23:2d:ea:5d:
34:e6:95:fd:80:9b:a8:0a:18:d0:6c:c1:37:b3:4d:45:02:e5:
06:a6:69:48:a3:72:d1:c3:af:0d:11:b5:b3:42:38:e7:8d:76:
a1:48:ba:93:57:9b:58:d6:81:01:34:1b:8d:14:be:64:06:b4:
2a:73:36:dc:4f:f3:a2:4e:60:25:7e:7b:f2:a6:7d:8a:29:b8:
07:ed:25:f6:5b:0e:d7:cc:ad:3f:ff:9f:b2:76:07:d1:32:99:
1b:96:7e:37:0f:57:9d:e6:ec:18:5f:79:d6:2f:aa:c7:06:98:
57:6d:10:c4:45:8d:d7:0e:14:b3:27:f0:ec:80:b3:1e:46:c3:
06:7f:5a:93:1c:86:a2:8e:0d:d9:04:fe:3a:5f:d2:7d:15:e2:
63:db:6e:e4:1f:1d:58:9e:55:bf:61:ce:c7:0f:1f:2b:fc:63:
cb:1f:f0:a2:03:df:cb:8f:83:cd:64:28:f0:bb:5e:9d:fb:d7:
3b:91:94:95:97:68:18:53:cb:93:5b:e9:37:97:c5:44:62:63:
68:71:ee:97:8e:46:1d:00:9e:76:e9:31:95:da:28:c3:66:35:
14:27:d6:b3:6f:63:b1:c3:ba:aa:49:9d:22:e0:f2:97:93:5a:
12:b7:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:06 2025 by rpki-client