Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ED4C312A99511F0B9051BCBDAE4EC9C.roa
File: 7ED4C312A99511F0B9051BCBDAE4EC9C.roa (raw, json)
Hash identifier: lu8aiLPmU4NMkAE9UoOTHdpa5b3mMpte7j6a/Adzv1g=
Subject key identifier: AE:F9:23:62:1D:0E:D4:EE:C8:54:08:53:EB:10:8F:36:D6:05:17:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018080
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ED4C312A99511F0B9051BCBDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 07:06:39 +0000
ROA not before: Wed 15 Oct 2025 07:06:34 +0000
ROA not after: Sat 15 Nov 2025 07:06:34 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
45.197.144.0/24 maxlen: 24
45.197.145.0/24 maxlen: 24
45.197.146.0/24 maxlen: 24
45.197.147.0/24 maxlen: 24
45.197.148.0/24 maxlen: 24
45.197.149.0/24 maxlen: 24
45.197.150.0/24 maxlen: 24
45.197.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98432 (0x18080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 07:06:34 2025 GMT
Not After : Nov 15 07:06:34 2025 GMT
Subject: CN=68ef47ff-5635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:46:53:10:37:48:07:38:a1:be:59:42:00:
bd:a6:32:f3:55:5b:fe:09:8e:56:d2:b1:f7:08:1e:
93:0e:d7:21:72:3f:ee:b6:78:2f:54:14:80:17:88:
5c:41:92:3d:a4:40:94:a4:5e:cd:01:f4:e8:d2:ee:
e1:22:2e:70:52:5e:15:be:4b:9f:67:6f:26:30:25:
86:f3:16:c7:84:2f:b1:61:c9:bd:38:24:ea:98:4a:
b4:98:cc:c0:e4:de:94:84:f0:09:f6:f8:06:4d:dc:
fd:fc:2f:08:80:a6:22:be:07:90:a0:5d:57:90:03:
3f:40:d1:06:8f:5b:13:79:7f:de:4c:73:22:ba:7d:
f7:31:21:23:74:2a:6f:a2:7e:89:4b:35:ef:4f:95:
05:d6:84:3e:d9:1e:cf:b4:0b:0b:c4:6a:23:a8:e2:
37:86:a8:1e:eb:e9:79:d3:a1:51:da:e5:d8:27:96:
17:f9:79:ef:02:bd:b1:13:46:bc:26:d8:7e:43:05:
e2:8c:73:e1:d8:28:29:a0:40:72:7f:e2:61:0c:af:
29:c5:e3:a1:0c:fc:17:d7:80:10:15:ff:10:7c:db:
8c:65:f7:89:bf:69:ea:26:b4:3a:a6:7b:49:16:fc:
bc:65:a7:24:63:e8:54:b9:0a:7c:07:62:2d:c0:36:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:23:62:1D:0E:D4:EE:C8:54:08:53:EB:10:8F:36:D6:05:17:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ED4C312A99511F0B9051BCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:6c:af:a0:ce:f4:73:61:09:49:5c:4a:1a:d8:0d:24:50:23:
86:ba:91:8b:56:c3:cb:0e:a8:21:d0:66:a8:ae:4a:55:df:40:
64:77:f8:c7:37:db:a3:85:ae:76:21:ae:e0:d5:bd:b0:43:b2:
7f:ba:d2:ee:25:34:c2:63:1f:45:6e:b8:2d:fe:29:0d:88:76:
df:32:e1:c4:ec:1b:c9:df:f4:52:d3:e7:c0:75:ab:f9:e9:f2:
12:79:86:21:e6:5f:95:45:48:cd:b0:94:c9:17:9e:f7:cb:37:
35:08:80:35:c8:56:77:b2:f0:95:a4:61:80:09:58:39:76:c4:
e3:79:05:47:29:7f:75:d2:79:14:6e:91:71:e0:7e:43:61:2d:
f0:a6:d6:29:9d:67:a5:2e:c0:54:35:cc:ce:24:d0:f4:2d:df:
5e:db:b8:94:66:d4:76:ca:c8:a6:51:a9:5b:0f:56:0c:70:05:
af:1b:1e:5d:c3:05:7c:f2:ac:44:b8:3d:a4:f3:4b:82:78:bb:
d5:f6:b3:a8:4b:d7:3b:16:d3:d6:16:d7:99:52:37:c2:c7:20:
5a:26:f7:a1:0d:a9:06:9b:5c:0b:86:fa:9a:e7:7a:82:94:4f:
75:9f:5e:7b:3b:6f:dd:a3:48:d3:bd:12:91:ad:13:ba:8c:48:
7d:c4:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client