Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5095E526A81411F0B156C792DAE4EC9C.roa
File: 5095E526A81411F0B156C792DAE4EC9C.roa (raw, json)
Hash identifier: HUm7oiiwg4FEsPCGWZPGZEqkwktndxX3u56YAy2lEHo=
Subject key identifier: 26:C9:DE:84:D0:C8:F1:99:DD:67:C1:BD:2E:CE:BE:31:3F:0F:CF:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01804F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5095E526A81411F0B156C792DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:09:26 +0000
ROA not before: Mon 13 Oct 2025 09:09:20 +0000
ROA not after: Tue 18 Nov 2025 09:09:20 +0000
asID: 25198
IP address blocks: 45.195.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98383 (0x1804f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 09:09:20 2025 GMT
Not After : Nov 18 09:09:20 2025 GMT
Subject: CN=68ecc1c6-d6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:64:8c:a7:ba:57:72:7b:d6:83:42:c4:12:
1f:dc:b7:40:86:c6:06:4a:25:50:af:40:93:ba:4c:
c5:af:09:28:3d:47:1b:b9:3a:eb:c0:80:85:3b:75:
3c:d6:c9:67:39:83:c9:37:1a:8c:47:b2:0e:9d:7b:
6d:29:63:b9:ca:19:8e:e0:3b:ba:50:ed:8d:21:44:
f2:05:69:e9:9f:c8:8e:5b:39:4b:41:32:96:af:f6:
2a:ef:a5:e3:09:b8:2d:4f:30:45:88:8c:3c:21:20:
5d:83:8c:9c:1e:54:da:c8:8a:ff:f5:79:4f:34:b8:
19:2f:45:e6:12:5f:26:1b:b0:b8:e1:65:7b:aa:6f:
81:7d:58:d6:9e:aa:0b:6d:da:86:c4:52:40:02:93:
77:bd:0f:de:4f:d1:3a:43:85:42:78:d2:17:1a:32:
2a:7b:9b:86:1c:0b:e0:cc:d3:11:1d:5f:7e:f1:7a:
c7:76:b0:3c:3e:a2:ae:d4:94:56:9b:d6:84:28:20:
1f:be:7e:2d:38:4a:a6:b9:5a:7c:da:ca:d1:83:51:
e2:c4:11:ce:ae:6b:3c:c6:5b:c4:3e:e1:0e:e2:f0:
b9:2a:0c:64:28:3f:3a:d3:c5:63:88:2f:cf:03:24:
d1:3b:63:76:01:f2:3e:26:7a:43:fa:ca:03:56:80:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:DE:84:D0:C8:F1:99:DD:67:C1:BD:2E:CE:BE:31:3F:0F:CF:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5095E526A81411F0B156C792DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.156.0/24
Signature Algorithm: sha256WithRSAEncryption
68:77:f4:c4:32:4d:05:f0:17:12:40:89:34:1a:f7:41:29:e8:
8c:ec:e4:3d:ad:b7:9a:95:34:f5:42:85:44:f2:b6:7b:88:ee:
78:8c:dd:d4:1f:cf:50:a4:20:d6:57:37:77:20:2a:41:b8:35:
11:6e:b7:65:9b:3b:7a:0e:3a:89:68:0d:58:1f:75:c3:6d:de:
05:b8:f9:08:36:fc:7a:0f:28:23:12:be:c3:be:22:2b:08:2d:
56:21:11:8b:e9:d7:13:95:fd:46:27:e8:d3:ad:cc:b7:4b:44:
f2:a9:2c:f1:a8:d0:43:d4:80:dd:38:f2:59:2a:a7:9b:3d:3b:
c0:a0:40:74:68:b4:96:7f:c8:8d:1e:da:e1:6a:23:06:5a:90:
60:ae:9f:fa:bf:8a:68:0e:76:1e:ed:f8:75:32:71:73:c4:f0:
e7:da:e8:48:2d:95:0e:0b:8a:7a:4c:1d:93:89:5a:c6:20:96:
9d:34:83:d6:2d:d2:ba:85:fa:4a:12:30:67:8e:61:ae:6e:ca:
05:48:bf:91:f1:47:08:4f:9e:ac:6c:39:79:85:98:20:06:1e:
7d:8f:3d:38:c5:d2:d9:db:86:bb:29:2b:19:f4:d6:b3:9c:24:
6c:43:ec:2b:20:7b:b3:0f:db:c2:d6:5b:fe:03:3a:42:1f:15:
51:09:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:57 2025 by rpki-client