Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84753B8AAB2A11F0A585A9D7DAE4EC9C.roa
File: 84753B8AAB2A11F0A585A9D7DAE4EC9C.roa (raw, json)
Hash identifier: 5XskzlR5xRe0P3JFCPGY5cLKLyItb7QJZFDf5cyiP+s=
Subject key identifier: 79:9C:41:76:7C:47:EA:99:22:BC:A9:22:C4:E1:FD:88:6A:41:4E:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018155
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84753B8AAB2A11F0A585A9D7DAE4EC9C.roa
Signing time: Fri 17 Oct 2025 07:25:55 +0000
ROA not before: Fri 17 Oct 2025 07:25:51 +0000
ROA not after: Mon 24 Nov 2025 07:25:51 +0000
asID: 57043
IP address blocks: 45.207.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98645 (0x18155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 17 07:25:51 2025 GMT
Not After : Nov 24 07:25:51 2025 GMT
Subject: CN=68f1ef83-d4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a2:91:be:3d:7d:d8:9f:2a:b8:9a:5f:72:12:
80:b4:d3:33:d2:bc:63:91:18:34:45:a0:3c:b0:48:
42:eb:9e:b3:6c:1c:8e:e0:97:f4:a4:06:ff:07:1f:
47:4b:48:44:fb:2b:7a:3c:b6:00:1a:cf:6d:58:61:
0e:c2:f2:59:48:40:55:9e:d4:88:29:4a:83:b6:8a:
1e:48:ff:f3:49:6e:db:f4:7f:e6:a0:79:13:c6:42:
2f:1c:46:b9:d6:f4:e8:2b:65:24:b8:9e:ec:ad:67:
da:33:96:5d:5c:b1:05:08:ec:b0:35:b2:22:da:72:
5d:f9:77:5a:30:de:a9:c4:b4:fa:41:26:b9:c1:be:
5e:70:04:a4:cc:a6:ba:1f:83:b8:ed:a3:35:a2:1e:
97:f8:c1:18:37:30:41:72:71:3f:dd:98:d5:46:44:
59:df:93:09:99:84:ca:0a:2a:0f:04:6a:96:33:33:
57:8a:13:27:6e:20:4a:a2:73:d3:36:cc:14:93:e1:
72:b1:23:40:59:d6:1c:d8:37:fd:e3:1e:1f:1e:dc:
fc:56:07:e9:f6:8a:c0:5b:ab:e5:0c:ec:d6:4e:9a:
7c:6e:fe:e5:88:e7:87:03:07:bb:10:38:6b:df:37:
81:c4:30:2e:55:0f:d0:ee:5b:0e:21:3c:ea:9c:92:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9C:41:76:7C:47:EA:99:22:BC:A9:22:C4:E1:FD:88:6A:41:4E:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84753B8AAB2A11F0A585A9D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ed:19:3d:e6:c8:d9:4b:a2:da:d5:f6:dc:62:ff:f1:da:86:
03:84:fb:04:b3:d0:9a:0a:e5:ef:7a:b9:47:88:89:7a:87:52:
c4:d3:02:d8:92:5f:6a:1f:e7:81:b6:e3:4e:31:3c:89:5c:b2:
88:e2:a5:0b:b5:43:d3:37:e0:e5:c8:d6:b4:ca:9c:1d:32:0e:
3e:88:6c:1b:33:93:cd:9a:df:84:73:7e:44:c0:8a:d3:8d:67:
68:29:51:5c:47:80:ed:d3:9c:e2:ea:ef:ae:2f:ea:40:b6:b0:
1c:ce:8c:4a:8b:07:b8:64:51:47:48:0d:d5:e5:18:0e:b0:58:
c8:aa:3d:b0:23:84:55:2a:68:b5:5f:f0:82:50:63:87:3d:f0:
4f:c1:e4:ae:98:df:d9:a3:27:a7:58:78:c2:76:7d:0b:ef:11:
9d:52:88:a9:ac:df:7b:fe:12:92:53:7b:56:73:99:1f:89:d1:
4e:c5:ac:ff:a4:6b:8d:2c:9c:26:af:2b:a5:01:00:c2:68:4c:
27:fb:18:68:46:4f:b2:06:8a:ce:7d:40:1c:aa:e7:dc:8d:7c:
fc:eb:8b:50:c9:de:31:3b:b2:42:01:2b:bd:f5:59:b7:60:cd:
80:2d:6d:47:e0:4e:cf:d2:32:f5:2b:8d:31:d5:a6:32:e5:34:
83:ff:db:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:41 2025 by rpki-client