Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31BFFC7CAA6711F0874C95E1DAE4EC9C.roa
File: 31BFFC7CAA6711F0874C95E1DAE4EC9C.roa (raw, json)
Hash identifier: rlUNDpiJFjuzXxhweamWW59lizdtoDMZKi62Xy+pPZk=
Subject key identifier: 48:2E:79:54:66:B0:5C:61:F4:73:A8:4C:80:C4:0B:37:80:76:C0:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31BFFC7CAA6711F0874C95E1DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:07:44 +0000
ROA not before: Thu 16 Oct 2025 08:07:36 +0000
ROA not after: Mon 20 Oct 2025 08:07:36 +0000
asID: 3561
IP address blocks: 45.194.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 08:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98540 (0x180ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 08:07:36 2025 GMT
Not After : Oct 20 08:07:36 2025 GMT
Subject: CN=68f0a7d0-3a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:18:59:7e:de:13:e3:ba:06:46:fe:c7:eb:
e4:25:53:7e:f9:75:32:68:e5:b9:27:3e:ac:8a:b7:
e9:c1:bb:b0:b6:f2:91:07:5d:b5:66:41:c6:2c:33:
92:5e:ac:e1:1a:36:8c:86:f2:22:fb:f1:9b:ba:2a:
7c:1a:87:d4:9c:3e:3e:40:15:6c:fe:55:84:aa:da:
be:2a:87:63:9c:5a:a4:54:b0:bb:1e:41:ef:59:cc:
d9:b4:a9:8b:74:e6:8b:2a:36:3d:d4:2d:51:04:31:
60:31:71:2d:83:73:cc:c3:30:15:45:ce:28:94:d3:
eb:d3:28:3b:74:fb:d9:e6:99:3d:82:ba:cf:0f:59:
9b:ba:f6:f2:47:f9:5e:32:7b:0e:28:50:82:4b:ef:
4f:3d:dc:b9:5f:e4:33:da:ec:20:33:8c:98:a5:ca:
2e:3d:db:f4:99:86:2c:44:28:b7:02:02:4d:74:a4:
f1:eb:23:d7:d2:81:fd:49:a7:ed:cc:fe:7d:bc:d3:
3d:45:3e:34:37:2b:7c:9a:14:29:37:d1:d1:31:e0:
b7:7f:11:74:e3:24:9d:71:b3:16:a2:d4:c1:f4:fd:
e7:7f:da:f0:73:b0:76:80:ad:d6:f8:34:78:f9:b0:
c4:92:72:ca:44:ee:04:bc:dc:ab:74:d8:37:b0:b2:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:79:54:66:B0:5C:61:F4:73:A8:4C:80:C4:0B:37:80:76:C0:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31BFFC7CAA6711F0874C95E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
04:3d:7a:f5:2f:95:fb:b1:41:a3:eb:37:83:ec:19:ff:d8:ee:
99:5f:f7:01:4b:a1:ae:8d:c7:88:22:9f:81:e6:1e:d2:11:23:
6b:2c:1d:e5:3c:5b:ac:23:15:04:04:9c:3e:27:6c:b6:13:23:
ff:89:75:99:a7:18:5d:b1:14:6a:a1:8f:1f:5f:d1:ce:a8:20:
b2:97:4c:a0:f2:61:74:b0:51:29:70:ec:05:39:b7:60:d4:9c:
b0:1d:55:3c:29:24:61:9f:36:c0:3b:7c:3f:80:ff:cd:a4:14:
a3:2e:aa:d3:c4:67:3e:f2:09:11:4a:53:1d:c4:30:4d:8e:47:
d1:45:02:0c:c1:2c:1d:23:c9:ff:b6:75:af:52:ec:37:81:ff:
48:42:a3:f1:1b:32:4d:cf:a2:de:f3:4b:b8:94:36:ef:c0:df:
1a:72:10:47:7b:2f:da:07:7f:7b:a6:2c:95:e5:2f:19:2b:53:
04:7f:10:c5:eb:48:2c:ab:e1:21:90:95:76:08:6f:a8:5a:63:
a4:99:17:ca:c8:bf:74:f6:f7:b3:64:e9:fa:b8:62:96:05:60:
64:61:1f:86:0f:9b:e1:fb:0f:2c:ca:27:6f:a1:ac:32:57:26:
c0:2a:72:23:76:52:2f:fc:8f:41:bb:e2:ad:da:68:28:3e:67:
22:8b:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:49 2025 by rpki-client