Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B0F3934A29111F0B711A7DEDAE4EC9C.roa
File: 7B0F3934A29111F0B711A7DEDAE4EC9C.roa (raw, json)
Hash identifier: 04cmocZOe6CByTm6K/23g7iTlxqMm7BjP+s757Yinck=
Subject key identifier: 48:DF:D9:26:60:73:EC:4C:0A:12:8B:88:C8:CC:80:6E:F3:A7:92:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B0F3934A29111F0B711A7DEDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:50:17 +0000
ROA not before: Mon 06 Oct 2025 08:50:11 +0000
ROA not after: Sat 11 Apr 2026 08:50:11 +0000
asID: 209242
IP address blocks: 45.205.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98038 (0x17ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:50:11 2025 GMT
Not After : Apr 11 08:50:11 2026 GMT
Subject: CN=68e382c9-8a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:22:39:65:d1:bb:16:48:d2:87:11:55:8e:f5:
e1:fd:32:03:84:d9:cb:60:21:3d:ab:fb:a7:5a:68:
ec:96:99:c8:21:bc:bc:24:9d:8f:4b:b0:24:91:03:
8b:60:ac:3f:fa:e2:c3:bc:51:f0:8c:d3:84:4d:46:
93:d0:7b:d1:5c:3b:32:66:de:c2:99:57:73:f4:89:
5d:4d:13:fd:50:96:06:f8:ef:52:75:12:9e:04:09:
2b:76:96:01:05:d3:e7:16:75:51:95:2c:44:a1:65:
9c:37:03:b7:86:ac:20:eb:02:c1:34:e7:fa:08:54:
db:1c:5a:04:eb:25:50:00:03:3f:18:0c:09:c4:24:
5b:12:d9:2c:6d:44:c8:7d:2d:4e:d1:1b:bf:b9:ad:
6d:2c:23:c0:53:0c:a1:44:50:39:a1:5b:be:02:11:
d3:c5:16:92:75:8f:ab:2e:f9:3c:1b:9e:6d:ba:47:
90:b7:07:c4:d8:4e:5a:53:cc:9c:a0:b5:44:5b:f7:
bf:50:f6:fd:29:92:8f:11:0d:66:e9:62:05:61:5f:
b3:60:db:79:ef:67:b4:2e:f1:2f:7a:32:d3:53:92:
71:04:69:ad:78:5b:af:16:17:7a:19:56:68:41:56:
90:e0:0e:4d:29:0d:f6:f9:15:15:f0:ad:99:e7:ef:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:D9:26:60:73:EC:4C:0A:12:8B:88:C8:CC:80:6E:F3:A7:92:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B0F3934A29111F0B711A7DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2c:94:3f:1e:92:57:cf:b8:5a:2b:dc:fe:a9:ff:ed:40:25:
c0:b5:45:05:1a:61:07:87:2f:80:53:76:ce:0e:a9:9d:c4:db:
4d:cc:38:da:ac:d2:32:4f:5f:2f:ec:ff:73:7e:95:5b:f4:15:
c7:5c:b4:f2:1e:be:bb:23:ae:5d:33:94:b4:34:71:28:19:a0:
aa:05:2a:32:7b:8e:d5:99:45:34:b8:7c:dc:ae:e2:bd:4b:55:
9c:7c:c9:09:a3:ab:09:07:13:78:91:8f:8b:5e:6c:a4:67:44:
c1:e2:91:06:8e:c4:32:ea:87:cd:e3:0a:9f:b8:e7:cf:d7:5e:
c9:43:a1:96:ae:ce:9c:7f:13:a6:3b:78:c0:6d:7b:0c:c7:58:
a5:28:4f:23:f0:95:af:e2:47:6a:b3:36:fc:ee:0f:1c:6f:9b:
49:31:44:2b:bc:d2:f6:c4:5f:19:70:c5:52:c1:61:9c:a0:8a:
cb:57:e4:20:21:9d:e3:52:1c:08:5b:2b:f0:12:ac:37:b6:8e:
96:da:1a:85:fc:5b:3a:cc:2b:e3:ba:cd:7a:e0:91:a4:5c:db:
14:11:2e:c0:3e:85:8d:0e:d6:9a:4f:11:1f:6e:1c:32:a4:43:
c6:a9:aa:53:64:ce:23:aa:c9:4e:09:ac:96:ec:e7:6a:d4:e9:
e1:4d:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:49 2025 by rpki-client