Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5545CEB8845811F08EAE5B99DAE4EC9C.roa
File: 5545CEB8845811F08EAE5B99DAE4EC9C.roa (raw, json)
Hash identifier: QhQPAzcMBFxx+5DVH/q++jVFw0LKeA+z05VHrGapZbM=
Subject key identifier: D4:F4:7A:70:D1:4A:46:40:91:E3:9C:B1:07:B4:E1:94:95:B1:CF:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5545CEB8845811F08EAE5B99DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 21:45:38 +0000
ROA not before: Thu 28 Aug 2025 21:45:32 +0000
ROA not after: Tue 16 Sep 2025 21:45:32 +0000
asID: 274089
IP address blocks: 45.195.15.0/24 maxlen: 24
45.195.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94960 (0x172f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 21:45:32 2025 GMT
Not After : Sep 16 21:45:32 2025 GMT
Subject: CN=68b0ce01-6cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:88:96:0f:23:eb:bb:dd:19:88:49:39:b6:
95:25:7e:60:29:64:78:f6:f0:af:20:53:99:30:d8:
73:35:42:ca:ec:e3:fb:cb:22:b7:25:17:f0:fe:0c:
77:48:24:2e:d2:42:b6:fa:79:8a:5b:ad:2c:2d:8d:
34:fb:d5:7d:80:af:2d:08:ea:ae:0a:82:79:fd:8f:
b3:e9:d5:07:99:53:0e:ac:e9:f8:ca:ef:78:47:0c:
49:a6:6b:85:69:f2:74:e6:61:90:33:82:c9:be:8c:
d6:42:ab:bb:9f:a0:4b:95:4e:da:44:21:1a:68:f3:
8b:17:db:f5:42:5d:52:7a:ed:83:85:cf:d2:d1:d6:
db:05:d4:94:08:a6:74:fd:ca:3e:d9:10:f2:33:c5:
17:b8:0d:88:19:ef:97:ee:f7:5f:46:a3:2a:d6:09:
7b:45:e7:34:b9:33:5a:3a:1b:48:21:8c:8c:e9:3c:
65:fc:21:4d:b1:40:a4:2a:70:4a:49:d3:0a:3a:d9:
06:84:fd:19:b2:5e:9c:40:bb:3c:bb:66:f1:d4:8b:
e0:13:d2:09:4d:66:ca:a8:8d:61:6c:3a:54:79:34:
ce:92:e9:ad:f4:7b:16:83:33:c5:e7:25:5e:92:27:
28:19:42:30:c5:05:b4:f0:3b:60:4e:7f:0a:5b:5f:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:7A:70:D1:4A:46:40:91:E3:9C:B1:07:B4:E1:94:95:B1:CF:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5545CEB8845811F08EAE5B99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
45.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
41:69:0f:24:ab:56:80:9e:72:c9:bc:5d:4a:d5:7e:45:0d:2c:
ed:9c:b5:94:e0:b6:85:44:ae:ae:15:d0:77:d8:90:3d:30:38:
d4:18:3d:40:09:af:12:bf:58:99:92:f9:37:87:50:03:72:ae:
53:74:7f:52:d4:59:49:04:a4:c0:7b:d6:d5:4d:82:ab:4e:4c:
96:cf:ea:f3:9d:c7:69:d1:14:d5:d4:b2:90:8a:fd:fa:ca:05:
50:9c:c1:8a:85:90:92:e9:11:8b:a4:64:14:4b:ba:58:1d:62:
d9:f2:bf:e2:89:1a:c0:97:6a:f3:ba:63:fc:37:66:f7:39:89:
bb:e1:0c:a2:ec:b1:8a:32:19:34:4d:da:19:ca:ca:b7:5a:50:
f5:54:00:bc:41:27:55:e4:0e:85:37:94:d2:79:d3:f0:66:7a:
26:20:3a:aa:fb:25:13:ac:c2:06:6a:39:c9:fe:c0:d8:37:6e:
27:8e:40:cf:58:69:38:e2:79:88:4c:9b:d9:60:71:ce:58:ff:
4a:67:87:c2:30:bf:20:47:9d:27:32:4b:38:09:1e:a5:11:90:
f3:2d:1a:cb:6b:86:64:58:cd:a0:63:b7:07:55:d3:88:ff:5e:
00:a7:ee:d1:3a:24:88:29:46:04:53:fe:f8:ac:e8:1f:57:31:
18:7e:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:32 2025 by rpki-client