Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32ECA194A68011F09A843EDDDAE4EC9C.roa
File: 32ECA194A68011F09A843EDDDAE4EC9C.roa (raw, json)
Hash identifier: I/vyTaMYrsMl5gkqQRQCo4mhwVBdPo2YsVo6wklKs18=
Subject key identifier: 42:E4:84:98:25:31:3B:25:85:7C:C4:C1:F1:DB:AA:10:EB:10:97:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01800B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32ECA194A68011F09A843EDDDAE4EC9C.roa
Signing time: Sat 11 Oct 2025 08:56:39 +0000
ROA not before: Sat 11 Oct 2025 08:56:35 +0000
ROA not after: Tue 11 Nov 2025 08:56:35 +0000
asID: 984
IP address blocks: 45.195.154.0/24 maxlen: 24
45.195.156.0/24 maxlen: 24
45.200.124.0/24 maxlen: 24
45.205.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98315 (0x1800b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 11 08:56:35 2025 GMT
Not After : Nov 11 08:56:35 2025 GMT
Subject: CN=68ea1bc7-e3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:4c:d9:ce:82:bc:8b:74:ef:48:23:08:9a:
62:88:c3:bf:26:fd:2b:66:93:a0:3b:b7:b0:5f:6d:
2c:28:49:43:a8:ed:bd:3e:97:65:21:ef:d7:ba:16:
54:e5:93:da:1c:99:a6:e1:e4:73:94:ea:06:93:d1:
d9:1b:df:6e:d8:1b:d2:c7:e1:90:a9:e0:23:07:b8:
9d:a1:07:22:dd:2a:55:9e:40:6b:d0:96:48:e9:88:
4f:e3:18:fa:20:bb:35:d5:40:9e:05:23:f5:b2:46:
4b:3e:59:f5:f2:5d:0d:0c:78:29:db:c9:15:02:c9:
1d:91:34:62:5a:35:a7:16:05:8d:dc:e6:ce:f3:1c:
49:6d:bd:7f:a1:a9:c5:f4:30:a7:30:64:30:54:f5:
0c:eb:4a:d8:41:a8:5d:36:ea:67:65:bf:b6:bf:a3:
1d:09:f6:05:fe:0c:d7:65:59:2e:8d:e5:13:34:75:
a2:9b:aa:ab:a7:12:f8:89:b4:1b:28:35:0e:8e:24:
b7:6f:ed:cd:f9:0e:11:c1:09:97:49:d4:97:85:9c:
1e:da:da:bd:d0:2f:aa:0d:58:af:e6:13:7e:a4:07:
ce:23:6b:bd:4f:e9:5a:4f:07:83:21:05:d5:cd:09:
9f:51:af:2c:aa:34:0b:bc:7a:61:14:0c:0b:22:8a:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:84:98:25:31:3B:25:85:7C:C4:C1:F1:DB:AA:10:EB:10:97:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32ECA194A68011F09A843EDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.154.0/24
45.195.156.0/24
45.200.124.0/24
45.205.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6b:ce:36:0f:e8:9d:ae:87:cd:87:f7:ad:ca:ef:ec:13:9d:
e9:e4:a4:70:6e:ce:5c:9c:75:64:12:69:e3:1e:a1:c4:6e:fc:
68:d1:3c:df:a6:d2:dd:75:51:2f:04:fd:03:cf:7e:31:99:c7:
22:30:ab:2e:9b:01:0f:bb:5b:30:90:47:66:dd:74:5f:20:7e:
a7:cc:af:8a:96:65:64:36:23:41:01:86:fa:a2:9c:45:ba:6a:
e4:28:87:4a:a2:3b:e5:26:48:27:ea:2a:e9:1c:8e:31:17:95:
d5:5f:9f:49:4c:cb:eb:f6:7e:a4:8a:e6:4f:f5:16:7c:54:69:
80:60:55:56:0f:b8:9b:5c:6d:2a:a6:1e:e7:03:05:70:6b:be:
85:d9:c2:fd:f2:0c:bf:aa:5b:8d:e3:ec:07:a8:cb:49:74:fe:
a0:48:c3:b5:d0:64:7a:b7:df:ee:27:6e:6a:65:25:7d:47:da:
e1:fb:6d:99:a4:ec:e2:95:21:5f:83:ba:71:7e:ae:e5:a0:c5:
d1:e7:dc:e6:ca:61:b9:76:98:a9:37:a1:81:1e:3f:3f:f1:41:
cf:66:0b:0b:f3:43:db:9c:27:55:be:d9:ec:2e:ea:5f:66:2d:
9f:8c:77:01:85:3c:0c:c9:d9:a7:06:54:d0:a8:1f:9b:5f:74:
c8:06:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:31 2025 by rpki-client