Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA8AA0A87CD11F0B49FC6B6DAE4EC9C.roa
File: 5BA8AA0A87CD11F0B49FC6B6DAE4EC9C.roa (raw, json)
Hash identifier: j+1NF7Vt0NtJhcfw3/yO6o/fw0+rmByesxn9Ip7lZgg=
Subject key identifier: 75:DD:AE:E6:5B:04:2B:96:25:23:07:4B:0D:CB:1B:DA:D9:32:A2:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017614
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA8AA0A87CD11F0B49FC6B6DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:20:53 +0000
ROA not before: Tue 02 Sep 2025 07:20:47 +0000
ROA not after: Tue 30 Sep 2025 07:20:47 +0000
asID: 401783
IP address blocks: 45.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95764 (0x17614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 07:20:47 2025 GMT
Not After : Sep 30 07:20:47 2025 GMT
Subject: CN=68b69ad5-d6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:17:74:47:c9:8b:ac:e2:3f:00:66:6b:ca:ea:
b9:1c:24:0c:c0:3b:67:84:ef:9e:1c:27:28:3f:bd:
d5:b9:11:b0:7b:96:6c:2c:4c:04:1c:6a:28:a5:5c:
41:ad:df:de:b4:71:1f:c8:17:85:dd:a4:8e:29:b4:
54:d4:f0:71:f5:ab:f6:35:c6:f0:8a:fb:d8:62:2e:
8c:2e:75:35:0a:b9:bc:84:c8:f6:a1:f6:d0:61:4b:
ec:eb:4f:b5:b4:9c:92:dd:3c:3f:4d:3a:ad:5c:a6:
95:cd:c3:9f:27:d9:62:78:5d:73:67:0d:59:37:34:
c5:0f:78:ce:8c:64:cd:f1:6f:27:69:c4:52:16:73:
c3:2c:c0:24:76:42:10:35:bc:fa:ae:7c:c4:70:3c:
95:27:b9:7c:94:1c:97:83:e4:0b:fc:41:70:90:e0:
a6:5c:ca:96:5c:31:7a:7a:ac:95:e2:ae:d8:bf:df:
17:13:70:74:af:b0:5c:b7:7c:e4:de:8f:cc:d9:96:
2e:6d:71:cd:00:96:fa:df:c0:1c:1f:9f:11:85:89:
cb:ac:6e:7e:74:4d:bf:79:eb:a9:28:5b:e2:f4:7a:
a9:e3:01:a3:fa:24:89:28:ee:74:84:b7:45:0c:35:
8b:79:04:00:d2:64:49:0f:97:61:28:25:29:60:e6:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:AE:E6:5B:04:2B:96:25:23:07:4B:0D:CB:1B:DA:D9:32:A2:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA8AA0A87CD11F0B49FC6B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ee:a4:84:5b:84:d3:e5:13:25:d4:40:8e:c6:2f:8c:27:c9:
85:1a:55:f7:de:21:15:47:af:65:c0:da:93:08:a1:d0:5e:13:
57:b1:a6:db:ac:f1:8b:1b:14:a5:a8:4e:c6:12:ba:6b:34:51:
b9:4b:dd:f6:b4:23:c7:71:56:d5:fb:ac:5f:fe:3a:bd:95:d3:
44:48:46:34:03:22:ca:8f:e6:c3:4d:0f:4d:17:e4:58:ca:1f:
a4:c3:66:61:02:95:5d:96:33:fe:72:94:f4:1d:52:a1:99:db:
62:ec:5b:60:12:e7:09:d1:26:9a:2a:ac:c7:e7:e5:25:ae:55:
68:c6:c6:4f:57:df:1a:e2:b3:cf:33:52:b8:40:71:9b:30:c4:
5f:44:e8:35:ee:46:12:ee:fb:d2:69:35:ca:4d:18:cd:ea:30:
61:b4:29:10:e8:01:a1:d7:65:06:ec:3e:95:52:86:e3:ba:37:
66:a5:44:b1:fb:03:9a:21:a5:45:10:86:d5:e0:8d:c6:3c:7e:
55:9c:db:b2:01:8c:45:e4:a6:8a:f1:e8:e3:28:e0:1e:da:99:
c2:d9:dc:bd:ce:5b:cb:42:b2:a1:b1:4d:5c:b2:d3:cf:e1:44:
d4:b9:55:33:4f:f5:8a:5c:81:6f:87:27:1c:80:4c:32:13:dc:
e5:67:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:55 2025 by rpki-client