Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CC8B84E871111F08DBD3AE5DAE4EC9C.roa
File: 3CC8B84E871111F08DBD3AE5DAE4EC9C.roa (raw, json)
Hash identifier: 4L+6D7fdI5LIQBbuyTKBPcN/54F1l9VB4bpjNSH9Vhw=
Subject key identifier: 35:A4:16:8D:56:A5:0D:FC:7B:03:CA:A3:25:4F:DB:F6:CB:05:A2:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017509
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CC8B84E871111F08DBD3AE5DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 08:54:16 +0000
ROA not before: Mon 01 Sep 2025 08:54:11 +0000
ROA not after: Wed 10 Sep 2025 08:54:11 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95497 (0x17509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 08:54:11 2025 GMT
Not After : Sep 10 08:54:11 2025 GMT
Subject: CN=68b55f37-aa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:a4:80:0c:7d:f1:04:1c:cd:43:13:b0:48:
50:55:98:02:1d:22:7d:9b:b9:43:41:b1:b0:70:37:
ac:40:9d:bd:3d:d5:9e:79:09:c5:93:3b:e6:da:97:
b3:b6:79:14:08:2c:37:09:98:84:87:21:0a:e2:a1:
75:8e:6b:7a:60:54:7c:f7:82:0c:44:67:6d:dc:f1:
4b:52:84:3a:3c:b0:7c:21:14:b5:b0:79:63:10:02:
38:6d:cc:49:08:d8:84:ef:f5:6c:2a:53:4d:91:1e:
5a:87:7d:11:11:a9:71:bd:af:6c:03:e7:14:15:ec:
ff:62:c9:22:0f:aa:83:fc:d1:86:a7:c7:92:8c:c9:
f7:5e:2b:3d:f3:07:e1:2d:8f:5a:16:26:4b:95:1e:
a6:a8:e9:e4:79:b3:ce:67:f1:5c:59:a7:ae:fc:c0:
69:72:6d:cb:4c:dd:18:2f:f3:1d:a8:45:09:9d:8a:
46:39:ef:95:fa:e8:36:58:4a:f8:a4:38:eb:a9:75:
dd:e4:80:ea:22:ac:d8:09:42:8e:58:4b:b0:0f:3c:
87:75:2a:01:a3:9c:f0:8f:8b:73:9a:2d:92:6b:4f:
bf:1d:4c:bd:c9:b4:ca:2e:93:e3:44:1c:32:2c:c4:
02:aa:a7:ec:c6:41:d6:5c:25:c0:80:7d:8e:74:47:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:16:8D:56:A5:0D:FC:7B:03:CA:A3:25:4F:DB:F6:CB:05:A2:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CC8B84E871111F08DBD3AE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:0f:fc:32:a6:95:9d:f3:47:0d:6a:05:9f:e7:7a:ef:00:62:
78:df:f6:cb:91:cb:9d:0b:91:7e:47:4f:60:4c:6e:50:60:dd:
98:ee:07:22:f1:be:76:fb:1b:b8:3b:fa:ba:69:b1:ba:71:5d:
4f:df:78:0d:d0:ff:eb:d2:a1:f9:0f:9e:c2:cd:25:c3:55:3a:
96:88:47:f1:c2:40:fb:a9:39:94:83:c4:eb:98:f5:56:d5:a2:
c3:96:40:a7:c3:3d:28:0a:98:b1:75:a8:9d:2f:08:f2:50:1f:
9b:db:1c:5a:79:eb:48:e0:b7:54:b5:79:5e:3e:c9:8d:da:f8:
fa:8b:5b:1e:23:25:9e:1d:0d:8d:bb:87:8a:90:ed:b4:45:90:
e7:87:42:d8:2b:71:e3:2e:f1:29:4c:22:3c:04:48:fd:2c:77:
17:06:5f:41:4d:ab:69:86:46:be:d1:3d:d2:c1:d1:06:0d:97:
c0:e6:66:96:d8:c4:76:8c:67:48:b8:c1:2e:f2:60:8f:2a:90:
73:5c:da:8d:96:a9:8c:7a:2c:6f:b1:ad:70:25:99:34:bf:4f:
70:71:45:cd:36:3e:66:93:da:94:67:d0:b9:1f:50:01:c9:ef:
a8:80:24:63:b8:ba:d5:50:7d:b9:ea:cd:c5:01:cc:75:fa:05:
61:eb:73:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:44 2025 by rpki-client