Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/550E13F29D6B11F09D8FA0E9DAE4EC9C.roa
File: 550E13F29D6B11F09D8FA0E9DAE4EC9C.roa (raw, json)
Hash identifier: +LxRpwwVvk4kguYE0oJrBBhIjRTyE3dOVTnJgOorxwo=
Subject key identifier: 4E:ED:F6:4A:C6:F9:FD:B5:4A:B0:A3:24:51:41:48:C9:1E:44:3B:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/550E13F29D6B11F09D8FA0E9DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 19:34:37 +0000
ROA not before: Mon 29 Sep 2025 19:34:29 +0000
ROA not after: Sun 02 Nov 2025 19:34:29 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97765 (0x17de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 19:34:29 2025 GMT
Not After : Nov 2 19:34:29 2025 GMT
Subject: CN=68dadf4c-6a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:e8:52:38:32:04:a1:5f:5d:49:49:25:72:
39:27:05:0d:54:0b:12:ba:7b:56:dc:21:1e:e4:b8:
e9:d4:7e:d0:d3:09:72:59:16:9f:72:05:ef:4f:d9:
d2:07:28:ec:73:4f:02:bb:e0:85:01:9a:bb:71:bc:
67:f3:74:2b:2a:e2:69:c8:4a:ca:dc:dd:b7:6e:7a:
5f:fb:cd:55:cd:ae:09:70:03:de:c4:34:dd:77:20:
ba:f7:b8:3c:c7:12:53:0e:50:58:8d:78:5c:e6:eb:
75:a3:de:2a:08:a6:91:1f:00:b3:ec:d4:59:dd:9d:
cf:ac:26:3e:8b:ae:d7:f7:14:1e:6c:6f:67:f6:6f:
01:92:b1:be:e9:ef:f9:e7:a0:7e:8f:e2:c6:fa:05:
0a:a4:27:30:fc:59:60:6c:7d:d5:0c:b4:bf:7e:a5:
16:85:f7:27:70:25:61:c0:8b:e1:93:52:c9:48:e8:
bc:b2:d1:53:1f:0a:03:39:b8:80:e9:23:4a:fe:9d:
65:3e:4c:23:78:71:96:55:dc:9b:e3:09:79:f9:7c:
df:57:5a:42:4c:ab:41:a9:48:7a:fa:4e:af:a7:a4:
85:84:90:6a:0c:76:b3:31:50:bf:71:3a:83:29:3c:
20:08:f2:15:4c:b2:50:93:b6:1d:0b:20:5f:34:5e:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:F6:4A:C6:F9:FD:B5:4A:B0:A3:24:51:41:48:C9:1E:44:3B:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/550E13F29D6B11F09D8FA0E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
77:84:3a:1b:7c:0f:92:79:a0:2a:b6:91:1d:3e:96:b0:96:a8:
b2:43:d8:7d:51:e5:c8:73:bc:8c:21:71:12:d3:20:d0:9b:61:
8c:9f:51:10:0d:ab:49:08:87:aa:02:a8:a6:a2:76:b3:b6:a5:
37:b4:f0:0d:cf:10:2e:63:3f:7e:fd:c5:45:3f:b2:6e:d7:28:
4c:dd:e0:5d:d2:5d:09:43:42:c6:b4:3e:fc:7a:2a:5f:24:ac:
98:a9:40:df:a2:05:9e:27:85:19:82:95:83:1a:81:6a:09:eb:
db:da:43:a9:50:a6:88:71:79:d9:61:ae:aa:56:86:08:d8:35:
50:11:84:f0:6d:a0:6e:7a:e2:2a:cc:b2:e8:c4:bd:0e:14:66:
ca:94:82:95:c7:09:2e:1f:6f:c1:ff:4f:bb:41:2b:f5:f0:09:
f1:45:0f:01:22:5a:f5:ae:c7:5f:07:c7:6a:bb:74:37:9c:ec:
71:c9:a0:2d:72:ea:4e:61:29:e5:aa:65:b6:ab:7d:7c:8c:4a:
05:16:df:1a:f4:b3:31:0d:fb:2b:58:b7:ce:d6:d0:d9:17:b7:
82:46:ad:85:e2:a1:92:dc:f8:5e:9b:e6:d7:b8:24:87:9f:3e:
9b:6a:64:89:8d:cb:40:b6:10:40:28:e5:c5:4c:52:f1:63:29:
7a:85:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client