Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2750797EA44011F0AA4A16C4DAE4EC9C.roa
File: 2750797EA44011F0AA4A16C4DAE4EC9C.roa (raw, json)
Hash identifier: 4zc1gQHqldnx+cThaSlqAAI9tbdHad3ViP2zsXjLAgc=
Subject key identifier: 00:F3:E0:86:44:11:E0:73:1F:AC:DF:55:94:0A:91:81:F5:C6:13:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2750797EA44011F0AA4A16C4DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 12:13:10 +0000
ROA not before: Wed 08 Oct 2025 12:13:05 +0000
ROA not after: Sat 22 Nov 2025 12:13:05 +0000
asID: 395886
IP address blocks: 45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98182 (0x17f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 12:13:05 2025 GMT
Not After : Nov 22 12:13:05 2025 GMT
Subject: CN=68e65555-5047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:6b:f9:b5:fb:58:15:2b:2a:d0:2f:66:cb:
4d:11:4e:7f:6d:19:d7:c0:c3:da:3c:b4:cf:34:5f:
80:f5:92:8a:ee:dc:84:ed:e9:9e:ef:a0:0a:62:eb:
b8:79:a6:2f:81:de:24:1a:10:75:75:fc:bc:04:cb:
a6:3a:50:4b:58:68:86:12:d2:dd:32:a7:f2:58:d2:
af:68:5f:f9:be:49:11:40:99:8f:e4:a8:8b:38:51:
71:90:bd:10:5b:07:6c:8e:e7:c5:17:d3:9f:f7:e4:
dd:72:17:b4:af:c5:5d:b1:72:3c:61:a6:93:78:a1:
ff:12:21:cd:4b:9b:93:fd:87:74:ab:c2:90:c7:7a:
8c:6f:b7:8a:23:93:91:ff:1b:9e:8d:23:db:3b:10:
00:0f:c8:33:49:4f:0f:06:fc:17:57:e3:38:cd:a5:
c9:6d:7c:a3:e8:cf:eb:6f:f3:ab:cb:e8:d5:d8:64:
98:b1:f5:3f:ba:d5:af:82:44:e0:61:91:4a:7e:0a:
e0:94:e0:da:0f:46:5b:e5:fb:f1:7e:eb:6d:e0:ac:
5d:55:9e:a9:c0:10:5d:8b:35:a8:0c:12:86:bc:db:
5f:3a:1c:00:6a:25:91:17:78:e0:fa:f8:5f:c0:20:
89:29:86:8f:04:4b:fa:9c:2f:cb:b6:44:e6:66:21:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F3:E0:86:44:11:E0:73:1F:AC:DF:55:94:0A:91:81:F5:C6:13:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2750797EA44011F0AA4A16C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
78:0c:2b:6c:03:0a:70:60:97:08:44:39:85:98:db:e9:d1:33:
67:6b:29:6e:b7:7b:98:78:40:1d:0c:2d:2d:c5:54:ac:34:df:
44:dc:a5:40:27:71:34:c6:bb:96:9c:1f:fc:b0:c5:c1:70:d3:
09:d6:85:e5:7e:8b:fe:66:3f:78:cc:ef:f1:39:60:1f:ea:46:
45:bf:3c:74:68:9b:84:12:cc:79:88:08:a9:1f:0d:80:8f:d1:
f8:58:bd:23:c6:a1:6e:54:11:04:76:b4:88:13:a7:3b:80:35:
bc:ea:25:a8:f9:0e:83:d4:48:b4:46:bc:7b:e9:48:27:2a:4e:
2e:86:b5:44:c0:03:52:c6:b3:76:a0:03:f6:68:70:c8:dc:be:
59:b0:f2:c0:ee:e3:0d:7f:69:b5:21:12:b7:3e:53:ea:27:38:
13:4b:b3:0f:b0:63:ed:d8:13:22:29:54:11:da:7b:76:90:50:
e8:b1:ff:83:19:33:b4:bc:9a:6d:dc:56:37:fe:66:9b:18:32:
d5:3e:ba:a8:ea:99:43:2a:27:8f:d1:01:fd:4a:e1:ca:77:63:
c3:fa:ee:23:36:64:d5:20:dc:2d:62:ce:30:4a:6e:c9:ac:19:
65:95:1b:bf:c7:93:cd:ca:f5:c5:41:dc:28:a4:dd:b6:2c:a8:
0e:93:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:05 2025 by rpki-client