Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DAF8A8A9F6811F0823AFBD9DAE4EC9C.roa
File: 7DAF8A8A9F6811F0823AFBD9DAE4EC9C.roa (raw, json)
Hash identifier: 9VoRwsDivTNbiSKYHLX+q7Z01fPYN1N4zSZInsWoYDk=
Subject key identifier: 52:2F:81:45:54:DA:7B:B5:4E:E2:A6:56:11:F7:24:3D:67:3A:C7:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DAF8A8A9F6811F0823AFBD9DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 08:19:19 +0000
ROA not before: Thu 02 Oct 2025 08:19:14 +0000
ROA not after: Thu 06 Nov 2025 08:19:14 +0000
asID: 20326
IP address blocks: 45.192.251.0/24 maxlen: 24
45.194.90.0/24 maxlen: 24
45.195.82.0/23 maxlen: 24
45.195.90.0/24 maxlen: 24
45.195.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97886 (0x17e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 08:19:14 2025 GMT
Not After : Nov 6 08:19:14 2025 GMT
Subject: CN=68de3586-1086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:77:9b:06:be:1d:4e:b7:53:6e:e8:97:06:
b2:d1:dc:31:93:e2:af:49:03:4e:87:72:34:5d:de:
e1:48:14:10:83:50:28:8e:24:e6:09:67:0e:22:d5:
78:bb:3d:e7:53:89:f6:af:6b:db:40:e3:e6:a8:30:
7e:76:20:17:99:7c:c4:8a:f9:b7:64:a5:fd:67:a2:
78:c0:b9:f4:15:3a:8a:6b:dd:7f:fa:4b:ce:9d:16:
cf:6f:de:c0:b4:be:1a:19:8f:bf:0e:d3:c8:24:ce:
29:01:b2:99:76:fb:0c:da:49:f9:df:97:92:b3:f9:
d6:5a:26:b6:9d:a3:19:a6:14:16:31:5a:4a:8a:47:
3a:ad:e9:4f:9a:80:24:f7:77:b8:a3:02:ef:f9:da:
f6:54:ee:a8:77:eb:b9:1f:c0:9d:6a:87:41:e3:91:
3c:2e:de:54:ac:c1:e2:f4:40:b5:f3:06:9f:b5:d2:
d1:f3:73:a2:88:2c:a4:5f:3a:58:3e:b4:62:ce:d9:
c2:54:68:90:97:98:3c:68:a1:22:57:0f:9d:d6:92:
3f:63:db:3d:12:cc:3f:cd:79:45:32:dc:30:de:08:
67:82:bc:bb:e7:a8:35:90:6b:52:00:1a:69:de:4b:
19:36:75:8d:5d:17:d9:3b:8a:a5:11:3e:75:ea:38:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2F:81:45:54:DA:7B:B5:4E:E2:A6:56:11:F7:24:3D:67:3A:C7:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DAF8A8A9F6811F0823AFBD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.251.0/24
45.194.90.0/24
45.195.82.0/23
45.195.90.0/24
45.195.106.0/23
Signature Algorithm: sha256WithRSAEncryption
99:56:41:b9:f9:9f:52:b8:6a:62:08:26:2e:71:12:96:2b:4f:
1e:ef:30:f0:55:5d:ff:c2:b4:8e:10:42:a4:c1:f2:ec:36:3e:
75:26:31:44:9c:19:fa:e1:9e:ce:83:67:c0:c3:90:9d:0a:0f:
f0:05:b4:63:0c:cf:b5:f3:85:22:bb:b0:2e:7a:e0:f3:68:93:
6f:2a:d6:49:43:ac:c1:3d:94:4f:20:94:9a:db:9e:3a:f3:32:
b7:e2:9f:e6:d8:4a:a9:64:30:07:de:d2:71:de:94:20:9a:04:
48:5e:3b:d4:ab:fa:42:06:69:9c:e0:5e:c5:81:15:ad:11:92:
e4:02:92:27:ae:c0:5c:17:6c:61:71:0f:5d:06:84:c1:ab:75:
e7:5a:18:6c:dc:67:36:50:cd:67:71:1f:ee:0c:37:46:20:2b:
59:01:08:36:6b:90:49:c2:56:31:3f:a4:20:1b:d1:34:54:f8:
dd:74:15:18:7e:6c:91:58:90:03:2b:81:56:09:ea:e3:e4:62:
1f:1b:68:3c:63:f7:c2:63:46:57:20:99:60:6d:a2:a5:89:dc:
bf:7b:2b:b6:84:4a:4b:09:2a:b3:95:64:47:a9:02:d9:18:3b:
95:86:51:8c:d0:5d:a3:ad:9c:d5:70:37:cb:a1:65:21:2c:05:
33:23:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:34 2025 by rpki-client