Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B49938C9DCB11F08ED6ACE8DAE4EC9C.roa
File: 3B49938C9DCB11F08ED6ACE8DAE4EC9C.roa (raw, json)
Hash identifier: OQgWoKNXGGFkhqyCYLE3xIMEHgTBOoOHKGAede531GE=
Subject key identifier: CA:4C:C5:DB:66:E7:B7:D0:AB:EC:F6:C1:EC:94:B2:88:24:0F:F7:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B49938C9DCB11F08ED6ACE8DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 07:01:05 +0000
ROA not before: Tue 30 Sep 2025 07:01:00 +0000
ROA not after: Mon 05 Jan 2026 07:01:00 +0000
asID: 16276
IP address blocks: 45.206.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97799 (0x17e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 07:01:00 2025 GMT
Not After : Jan 5 07:01:00 2026 GMT
Subject: CN=68db8031-fbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:48:39:4c:0a:57:fa:78:18:82:e6:46:67:
7b:b1:e2:c7:49:18:17:fd:80:40:0b:56:35:38:fd:
2c:21:06:38:38:49:56:1a:af:2e:c3:d3:b9:56:12:
0e:d0:b1:3b:28:5c:b8:be:c9:06:02:50:60:21:d2:
d6:a2:a0:7f:07:73:2f:5e:e2:e9:62:2a:1b:7a:93:
61:b2:db:21:1c:86:04:94:99:f0:e3:4c:48:81:35:
6b:20:98:6b:fd:b9:0c:e1:05:c6:e9:f8:9d:a6:d7:
17:d5:57:1a:90:b1:b6:8f:d5:ed:30:39:43:41:8e:
1c:04:db:ae:ff:31:d0:f4:9d:38:9b:9e:8a:79:d2:
b7:03:8d:d5:bc:2f:10:e1:bf:d0:bf:bf:40:79:97:
6a:b7:95:80:4a:57:3c:79:3b:a8:d2:27:e0:83:b7:
93:26:29:b5:2e:14:fb:9d:98:70:29:d7:76:cb:90:
0b:10:91:d7:1a:d1:1d:e0:9e:37:ea:4f:3f:ee:5f:
c8:0b:9b:02:a5:bc:41:15:97:6e:00:67:f9:17:88:
d6:3d:2a:70:9c:73:c2:b8:f2:0c:44:09:ae:4e:48:
a1:99:40:18:e9:83:b3:be:0c:f2:78:2e:1f:35:6c:
34:23:e0:e5:5b:c5:e5:dc:23:a4:94:15:ca:0a:87:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:C5:DB:66:E7:B7:D0:AB:EC:F6:C1:EC:94:B2:88:24:0F:F7:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B49938C9DCB11F08ED6ACE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.0.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4d:f9:d4:97:5d:88:31:c3:12:88:ff:01:9d:72:ea:ed:45:
56:94:0b:46:d3:e8:30:6e:52:99:33:df:ef:06:b0:42:88:1f:
18:c9:26:46:1a:4b:0d:ed:ac:e8:9a:08:cd:de:d7:a3:cb:2e:
6d:46:8d:96:a7:75:36:e5:1d:52:cb:b7:ab:8d:08:c7:ac:11:
ff:51:94:22:54:2e:cd:ad:7e:19:fc:5b:81:8b:be:ab:de:83:
1c:10:b6:b0:dc:bb:f1:05:39:7a:d1:46:6b:99:58:18:c2:a1:
ad:a6:a3:45:5c:53:38:2d:1e:8f:1f:16:2c:a9:77:1c:e1:c5:
43:43:7d:af:c0:47:90:27:08:d4:93:87:05:ca:a3:79:b3:f5:
50:5d:b0:4f:09:ce:07:38:18:27:d9:0a:8b:97:22:fe:13:18:
7f:eb:97:c9:0a:ce:c7:50:aa:06:36:09:15:bf:e8:ef:2b:12:
dc:a6:70:ab:97:08:70:df:93:08:eb:21:15:0f:06:88:00:da:
9c:b8:ae:9f:58:c8:b0:7f:e9:4a:1b:af:c6:09:e5:25:d4:32:
3b:60:c9:2f:1d:4d:6d:dd:1a:ba:cc:12:69:bd:78:48:ac:b6:
83:00:9a:40:af:63:e2:66:a1:2d:49:ce:3a:9e:9f:4d:27:9f:
26:b4:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:10 2025 by rpki-client