Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78E1C938AA6611F0BA7B19DDDAE4EC9C.roa
File: 78E1C938AA6611F0BA7B19DDDAE4EC9C.roa (raw, json)
Hash identifier: K11TwXJeDZKVLpoZy7w1pIS4dq8Q8aZCF6R3Oon22Jo=
Subject key identifier: 55:69:C8:CD:D7:46:C3:AB:F5:E8:F3:D3:24:67:FE:CC:4E:3B:F5:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78E1C938AA6611F0BA7B19DDDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:02:34 +0000
ROA not before: Thu 16 Oct 2025 08:02:29 +0000
ROA not after: Mon 20 Oct 2025 08:02:29 +0000
asID: 399989
IP address blocks: 45.196.32.0/22 maxlen: 24
45.196.40.0/22 maxlen: 24
45.196.48.0/22 maxlen: 24
45.196.52.0/22 maxlen: 24
45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 08:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98538 (0x180ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 08:02:29 2025 GMT
Not After : Oct 20 08:02:29 2025 GMT
Subject: CN=68f0a69a-447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:3e:98:af:55:a5:01:b9:c1:ce:d2:7c:84:
0b:4e:8b:08:21:ae:18:8c:7b:f8:a9:fd:ba:f2:f3:
d0:25:cb:b2:8e:1d:bd:f0:92:82:93:e3:83:01:11:
f8:7a:4e:09:55:3d:2a:34:34:e0:e8:15:3c:d3:29:
1f:de:11:33:28:61:e3:4c:5a:4a:7e:34:5c:9b:fd:
02:fb:cf:e4:86:6b:1d:ee:37:ce:71:f7:11:04:15:
fb:0d:d7:e9:fa:a1:55:3f:7b:81:9e:59:76:44:54:
49:bd:ec:71:22:1b:32:a7:c7:cd:5b:0c:eb:0d:d2:
e4:d4:f8:a9:e2:57:e0:c1:ee:18:01:ea:15:e0:a8:
d2:a7:2a:ec:31:56:da:35:76:d6:5e:70:22:b0:e4:
bb:77:7d:89:6d:76:35:31:44:f3:30:d9:81:f4:10:
e6:79:1f:b8:13:e1:4a:80:e8:ea:ee:b9:e9:98:a7:
43:22:3b:67:53:c1:63:14:96:cf:0a:d9:d7:dc:85:
7e:aa:e4:23:71:fd:6a:f0:80:0b:49:da:85:45:b9:
5f:f6:4c:57:82:20:ca:8e:94:a5:55:d7:d0:17:f8:
e1:f4:54:23:ed:22:dc:c8:29:9d:74:19:2f:a3:69:
1a:30:8f:c0:4a:20:e2:f9:8d:2b:cb:5f:85:99:f6:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:C8:CD:D7:46:C3:AB:F5:E8:F3:D3:24:67:FE:CC:4E:3B:F5:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78E1C938AA6611F0BA7B19DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
45.196.40.0/22
45.196.48.0/21
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
18:4f:e6:0c:2c:c7:ff:e1:f6:a0:e9:5a:62:c3:4b:6c:45:69:
01:bc:e6:c4:6b:2c:83:a2:1c:a2:45:0a:a4:9e:2c:b8:ab:65:
0c:d5:f4:42:2b:0a:b8:06:fc:2c:48:bd:de:eb:e3:7f:37:49:
1a:47:b6:b5:60:54:fa:dc:9b:69:ef:0a:c0:bf:0c:3c:74:e9:
15:86:31:87:05:1f:6d:17:65:be:18:14:42:85:57:d4:2e:06:
3b:71:28:84:30:12:bc:c9:b1:a7:8f:aa:7c:f9:c5:98:fe:55:
37:03:2a:9e:cd:31:63:5f:64:cf:a8:37:8f:72:51:ae:0e:bf:
46:4e:a5:1b:1c:84:bb:c3:6b:6e:ab:1c:f0:d0:0a:a0:ee:23:
bc:1a:11:73:3b:b4:48:8b:f6:0f:5a:3a:53:e2:8a:48:2e:d5:
ac:3a:f8:a0:24:b9:2d:c5:33:fc:88:30:43:7a:3f:ab:e9:6a:
d5:73:b9:01:01:51:93:f7:e6:a0:e1:e7:32:a6:a8:2a:84:46:
10:44:9c:24:7e:c7:f7:96:ff:79:44:d9:79:43:8b:22:61:21:
19:87:db:f2:f3:03:b2:48:df:4a:a2:d3:68:31:60:b9:f7:f8:
09:0e:46:9e:b4:14:f9:61:15:a4:77:63:56:a9:75:09:3e:e2:
f7:1e:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:52 2025 by rpki-client