Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C54FC4AA41A11F0AEF433D3DAE4EC9C.roa
File: 2C54FC4AA41A11F0AEF433D3DAE4EC9C.roa (raw, json)
Hash identifier: zcxbVzwTKfLr/+qOz8X+s6/TW7+3Y522WTZskw8gWog=
Subject key identifier: 5E:88:13:2E:8C:7E:0D:8A:B7:31:1D:75:B1:30:09:E7:BE:07:63:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C54FC4AA41A11F0AEF433D3DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 07:41:17 +0000
ROA not before: Wed 08 Oct 2025 07:41:09 +0000
ROA not after: Thu 06 Nov 2025 07:41:09 +0000
asID: 395793
IP address blocks: 45.192.236.0/22 maxlen: 24
45.192.239.0/24 maxlen: 24
45.192.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98136 (0x17f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 07:41:09 2025 GMT
Not After : Nov 6 07:41:09 2025 GMT
Subject: CN=68e6159d-2e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:f0:20:5c:3e:d4:bf:7d:8f:49:65:eb:fa:
ee:ee:9a:e6:25:49:ed:a8:ca:84:bd:32:e8:1e:19:
be:5a:b9:da:5c:99:2e:fe:76:59:22:c3:3f:5f:b0:
e9:8b:39:f5:3f:cc:a5:0c:74:04:a4:41:a6:d6:ca:
1d:a7:1d:f0:27:87:2b:1b:c8:1d:8f:b9:98:4d:d7:
9d:ed:2a:64:5f:b9:18:74:95:3a:83:f9:f7:d7:b7:
2e:82:e3:a7:18:a3:40:d8:41:de:ef:47:4c:55:62:
19:99:51:d1:d8:46:42:44:76:95:c9:e5:d2:36:84:
a5:9a:39:8c:0e:4a:52:5a:d1:27:b2:50:95:46:fc:
77:34:25:4e:1f:7a:43:29:2c:77:8b:61:b5:2f:91:
3d:a3:55:37:86:e8:75:6b:ac:e6:ff:9d:1a:59:33:
58:74:9e:76:3f:83:65:ea:ee:b5:25:47:64:77:14:
5a:93:04:04:21:54:13:ac:b3:93:28:e7:8d:2d:66:
2d:3e:bd:25:01:8e:c9:4f:7d:c4:28:df:c3:51:b7:
a2:dc:6e:48:c4:fb:9a:88:07:8f:2b:4a:b0:ae:fb:
a5:9d:0f:31:e7:f4:9a:d3:9e:7a:5b:c1:bd:34:b9:
a6:6e:c5:c7:2e:fb:85:32:6c:26:d9:a6:57:5c:9d:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:13:2E:8C:7E:0D:8A:B7:31:1D:75:B1:30:09:E7:BE:07:63:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C54FC4AA41A11F0AEF433D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/22
45.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:90:b1:5e:d2:71:ec:ab:08:73:a1:77:69:35:cd:ea:e6:67:
82:38:5c:5c:fa:41:08:27:fb:62:97:26:c5:24:83:1a:65:71:
17:c4:01:ab:4e:70:1d:25:93:9c:9e:b5:e5:74:5c:c2:f1:bc:
46:84:43:45:43:98:d6:f2:64:62:87:8f:b0:a5:26:85:b3:3f:
8e:24:69:e0:78:ff:7b:aa:3c:5b:f7:a6:1a:56:fc:cc:a6:f4:
02:f6:70:e7:e0:22:84:ee:4f:31:19:33:8e:a6:98:97:26:90:
90:81:ae:de:8a:ed:cb:b9:81:e2:4f:bd:d8:99:48:fd:55:5c:
3a:90:86:00:36:d6:89:22:c8:b6:4e:92:20:84:be:1d:08:36:
18:b7:70:a5:b5:3a:a8:6f:0a:11:2d:4d:b6:af:7c:2a:af:4f:
a5:34:a3:8b:df:50:a1:52:41:8a:98:42:70:56:34:91:a8:36:
0e:06:e4:11:ee:d6:5c:2b:53:91:2b:6d:60:52:a1:e2:c6:b9:
ae:b9:9a:5b:71:21:00:d4:4d:41:8d:94:4e:1e:08:41:0d:4e:
08:a3:4e:aa:be:72:aa:88:62:7b:53:5d:b4:64:2b:39:a7:d4:
0f:ad:2a:23:0d:53:5c:96:95:57:e2:4c:6c:58:cb:f1:c5:ae:
13:7a:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:08 2025 by rpki-client