Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57AB3F12A43811F08E2DC692DAE4EC9C.roa
File: 57AB3F12A43811F08E2DC692DAE4EC9C.roa (raw, json)
Hash identifier: x14dSj9DfIv/M3wiMqW1OEmxA421iqmGANMnSpZ2q6Q=
Subject key identifier: 99:80:FD:21:AA:B6:68:20:86:40:FF:0B:1D:1B:05:07:80:C8:83:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57AB3F12A43811F08E2DC692DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 11:17:15 +0000
ROA not before: Wed 08 Oct 2025 11:17:10 +0000
ROA not after: Mon 10 Nov 2025 11:17:10 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98164 (0x17f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 11:17:10 2025 GMT
Not After : Nov 10 11:17:10 2025 GMT
Subject: CN=68e6483b-eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:71:14:1c:9e:53:c4:4c:0f:4d:23:73:c3:
55:65:59:ac:2b:06:dc:d5:3a:e2:72:44:10:3f:e3:
c6:41:48:d8:12:80:0f:5f:76:f8:e7:08:35:1a:31:
6b:85:52:cb:2a:ab:0b:7d:e7:23:69:a9:0b:d2:4e:
67:35:82:8c:57:e4:1e:b6:b0:5b:fd:35:23:77:94:
cb:53:94:90:e8:a3:6c:00:f0:61:7d:3b:6a:e3:99:
da:1f:81:c6:1d:9b:03:5c:1d:66:5a:b1:1d:87:ff:
5b:58:f7:72:34:d9:25:ab:55:c3:0b:b6:58:1b:ed:
dd:ac:18:31:97:f6:da:a4:3c:c7:0f:d8:5c:04:c5:
be:3c:54:00:3a:9a:e0:bc:4d:81:e3:80:55:cd:39:
76:db:ab:52:0a:62:2c:ce:a1:ff:60:78:05:14:d7:
d9:96:9c:5c:96:29:ee:91:df:df:5f:49:3e:c8:db:
ec:e2:19:58:26:02:6b:f7:11:07:8b:21:17:b0:f6:
a9:3d:cc:47:84:22:85:29:c1:b6:7b:90:b1:63:14:
bb:c7:60:11:5d:68:72:90:66:c4:cc:74:73:8f:96:
c8:ed:15:50:22:5f:b9:51:d6:5e:22:b1:68:69:3b:
bf:46:73:55:77:dc:30:83:60:19:57:e6:ca:f3:1f:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:FD:21:AA:B6:68:20:86:40:FF:0B:1D:1B:05:07:80:C8:83:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57AB3F12A43811F08E2DC692DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:7b:71:0e:11:87:ef:5c:dc:4b:18:bd:14:f1:58:70:54:05:
bb:62:12:8a:21:7d:f2:31:ee:f3:bb:29:a4:8f:2c:e1:e5:f6:
11:10:7a:45:6d:4c:1e:fe:88:0a:c1:43:d4:c3:10:6e:d8:64:
6b:aa:04:01:6b:32:ac:60:f3:11:f5:35:2d:f9:9c:61:b2:dd:
76:33:ba:63:a7:5f:c7:74:bf:e9:64:28:47:01:a9:93:d2:57:
86:02:39:75:36:f2:88:c9:68:35:31:1f:22:4f:53:8b:ad:f8:
b4:41:d2:57:9d:45:68:c9:df:0a:0c:84:9a:00:ad:99:cf:b2:
b4:2b:40:8c:e5:73:6f:f9:27:b0:9f:f4:59:32:4b:43:f7:ac:
5b:d6:76:ec:72:6a:5c:27:24:2a:77:56:a9:2c:05:b4:73:85:
b7:cc:ce:2f:0b:75:e7:07:c0:5a:23:0b:4c:6d:e2:3e:4a:a9:
7b:4b:74:99:7f:c8:97:a5:08:cf:59:d9:da:c7:b7:d4:b2:97:
cb:ee:31:34:2e:b7:0d:d8:63:b1:42:1b:d1:19:bd:67:24:02:
59:51:8c:37:e5:30:27:3d:f6:6c:4f:b8:36:a5:99:aa:3e:69:
1d:43:c2:c6:d9:a4:d4:53:76:ef:0a:e6:e0:2b:61:d2:92:45:
08:ef:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:10 2025 by rpki-client