Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CF075EA871011F09F03C7DEDAE4EC9C.roa
File: 5CF075EA871011F09F03C7DEDAE4EC9C.roa (raw, json)
Hash identifier: n/vFx3E/EnVMASNxQ3q79v69ES/VBP5GRGHKSU6RiS4=
Subject key identifier: 9B:FB:5B:9C:36:06:F0:F1:D7:E6:CD:08:D0:88:FA:67:BF:B6:B1:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017503
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CF075EA871011F09F03C7DEDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 08:48:00 +0000
ROA not before: Mon 01 Sep 2025 08:47:55 +0000
ROA not after: Wed 10 Sep 2025 08:47:55 +0000
asID: 56286
IP address blocks: 45.197.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95491 (0x17503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 08:47:55 2025 GMT
Not After : Sep 10 08:47:55 2025 GMT
Subject: CN=68b55dc0-aa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:89:5e:fe:c1:54:4a:d4:aa:e0:cb:f5:2d:
d4:ba:a9:68:e2:e6:58:a0:79:b7:17:74:bb:91:1b:
47:9e:76:fd:5f:70:49:e6:e8:5c:6c:32:e9:6f:0f:
0c:c9:0b:0c:6e:68:02:e0:2d:73:33:80:b0:c3:30:
1d:c7:65:bb:aa:0b:ae:36:8a:8c:cb:0a:fa:89:bc:
05:68:d8:43:37:ec:24:12:2e:31:dc:09:c5:b8:4f:
d2:96:69:79:5b:cf:68:06:18:09:a2:20:46:91:5d:
9d:cd:12:24:d3:44:fa:b3:b9:e5:f1:f7:3a:b8:9f:
e8:f1:31:67:46:2d:61:5a:3e:1e:be:63:3c:4a:a6:
72:bb:46:68:2a:7e:e1:aa:48:c9:a6:1a:1c:bd:73:
cc:20:52:79:4c:e1:0f:5f:eb:53:92:fc:77:37:a8:
c8:6d:65:90:93:7b:ca:f2:45:d0:61:68:a1:85:cc:
56:4b:bc:0d:11:9b:2d:84:a0:6b:cd:7a:b3:45:30:
2a:80:41:5e:f4:a4:07:c4:22:73:6f:f4:7c:d4:d7:
dc:0e:62:a7:76:a6:36:a1:54:3d:da:aa:3f:2c:81:
01:7c:ab:2c:12:8c:2e:13:ed:83:f0:8b:c7:0b:19:
bc:83:e5:f9:cd:3b:ca:36:68:c8:ed:9e:4f:e6:4a:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:5B:9C:36:06:F0:F1:D7:E6:CD:08:D0:88:FA:67:BF:B6:B1:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CF075EA871011F09F03C7DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.0.0/24
Signature Algorithm: sha256WithRSAEncryption
91:65:5f:cf:96:60:d0:93:1d:8a:47:d7:e0:ff:26:7f:f5:a3:
73:4a:10:ed:df:48:4b:19:af:50:02:b3:6f:69:9e:af:fa:5e:
bb:5d:23:2d:e7:51:ad:ff:54:74:44:10:de:9e:c5:65:d2:66:
06:b6:11:33:bb:13:2a:36:aa:d3:fd:8e:03:12:3a:5e:fc:33:
6f:a6:30:8c:ae:14:70:16:e4:62:97:60:6e:fe:bc:1c:d7:ea:
f1:db:3f:e8:e6:3b:f4:03:1f:4a:9d:f2:04:08:97:d7:29:92:
1c:af:a0:d8:58:df:28:a6:0f:46:2e:cd:06:e3:e3:05:75:1c:
5a:2c:f7:d2:13:31:fc:06:7c:59:8e:58:f6:d5:f5:b7:0f:ac:
9c:68:2b:ab:7a:a2:4e:25:cd:c7:66:17:4d:ff:f3:e8:c9:bd:
2c:15:a7:7f:f8:ca:c1:7a:56:3a:48:a1:94:1f:1e:2a:69:64:
27:eb:73:61:7f:1b:e1:eb:b0:cf:7f:c0:f8:59:99:39:ff:dd:
05:b8:c8:45:e6:eb:1d:4b:0c:2f:05:e2:3a:f2:d3:32:c3:21:
c5:b0:60:2d:e3:9a:19:bf:35:81:27:a0:d3:d6:02:91:cf:2f:
b1:d8:27:ed:99:3b:fb:c1:74:fb:46:de:47:80:00:a0:21:6a:
3a:10:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:52 2025 by rpki-client