Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638DE6EAA9B011F0A32AACEBDAE4EC9C.roa
File: 638DE6EAA9B011F0A32AACEBDAE4EC9C.roa (raw, json)
Hash identifier: jneCwVjN1u5rlg+GvPTW5LmGZl9MbwvOMjHdfgSrCmo=
Subject key identifier: A0:4A:20:61:7E:94:3A:81:12:17:42:61:77:15:0C:8E:92:7D:B9:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638DE6EAA9B011F0A32AACEBDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:19:10 +0000
ROA not before: Wed 15 Oct 2025 10:19:05 +0000
ROA not after: Thu 20 Nov 2025 10:19:05 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98479 (0x180af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 10:19:05 2025 GMT
Not After : Nov 20 10:19:05 2025 GMT
Subject: CN=68ef751e-60b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5d:8e:75:ee:9b:e6:70:7b:e2:ba:32:57:86:
63:2a:3f:ed:5c:47:a6:1e:ca:1d:3d:82:00:f3:2e:
de:a4:31:92:29:b6:6b:7a:a1:b0:85:c1:6f:8c:7f:
a3:d8:f2:3a:18:25:27:5d:7a:a4:3d:7d:a4:d9:5b:
5a:d3:82:2a:a6:24:6f:87:d5:23:35:51:57:fc:52:
db:5f:2a:ea:b3:0b:9d:dd:bd:e5:aa:94:fa:cf:a9:
bc:a5:dd:6c:c3:17:a5:22:04:c7:9e:b0:4f:b7:b9:
49:ad:71:be:94:25:03:ec:70:1f:d2:3c:2a:14:63:
d7:ec:f8:a2:73:6e:3c:de:dc:2d:e4:c1:ae:39:c7:
b3:e9:b0:4c:d5:3f:35:9f:30:56:5d:ff:c0:6c:7f:
fa:dc:33:c1:56:92:96:e3:7b:b6:7a:f6:9a:5e:fd:
04:32:03:eb:27:ed:22:7e:ff:31:ef:3c:92:a8:70:
e0:27:b1:1f:ff:8d:b0:c7:34:d7:e9:6a:79:0e:7d:
ce:59:8b:fc:a0:ee:d2:26:80:8f:f3:93:82:f0:42:
f6:84:a6:f7:ee:de:c3:36:6c:60:a4:42:73:39:5f:
70:c4:f9:64:d9:8b:b4:c8:9b:86:c5:5a:25:ed:a8:
c5:9c:0b:1b:38:8d:8b:57:b4:be:63:94:b9:b6:68:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:20:61:7E:94:3A:81:12:17:42:61:77:15:0C:8E:92:7D:B9:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638DE6EAA9B011F0A32AACEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a8:6e:32:26:03:c7:0d:2d:8a:34:d0:f5:07:a0:ff:c0:a6:
cd:fb:e4:6c:f3:c8:5d:4d:03:73:48:0b:51:dd:75:35:04:82:
d4:83:cb:b5:92:f1:60:d4:3c:84:2a:1a:fc:0f:db:09:57:ad:
f9:7d:32:ad:51:49:83:87:b0:9c:46:f7:61:8a:c5:e2:a4:b3:
d1:b8:4c:90:03:4d:9d:e7:3a:9c:12:3f:2a:9e:1a:98:6e:ac:
78:e0:48:71:75:e8:f6:63:b1:74:cf:2b:dc:1f:48:76:f8:27:
5a:68:ce:81:53:f1:29:36:48:40:a2:ce:6f:7a:90:41:c1:eb:
90:9a:03:2a:57:76:c2:b9:24:55:0a:03:f7:65:04:36:b3:ff:
f6:63:8b:69:ae:c6:72:b7:ba:c4:73:e0:26:7f:8a:ca:7c:22:
66:df:ba:b2:f2:d5:6f:97:7b:47:4c:8d:bc:7e:0f:23:30:ff:
b3:be:b8:52:7a:a7:bd:8a:be:d6:9f:ba:b4:1d:d0:ca:e4:43:
7e:64:41:14:05:76:59:4a:ca:53:cd:ea:78:4e:eb:88:eb:2f:
56:4b:32:3c:70:05:2b:96:4b:06:47:d4:91:7c:4c:70:26:ad:
ce:20:12:b0:00:c3:5b:c5:33:89:f8:21:e4:87:02:00:8a:58:
4a:21:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:45 2025 by rpki-client