Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C8140529F6911F0B25244E2DAE4EC9C.roa
File: 8C8140529F6911F0B25244E2DAE4EC9C.roa (raw, json)
Hash identifier: FFyKSqBixkYU8fb4HuhVs9VCT4OKOeaRqXrwYq5TCZE=
Subject key identifier: 1A:0F:58:81:ED:51:50:6A:A1:4F:B1:D2:45:DF:78:8E:58:21:4E:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C8140529F6911F0B25244E2DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 08:26:53 +0000
ROA not before: Thu 02 Oct 2025 08:26:46 +0000
ROA not after: Sat 08 Nov 2025 08:26:46 +0000
asID: 149940
IP address blocks: 45.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97888 (0x17e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 08:26:46 2025 GMT
Not After : Nov 8 08:26:46 2025 GMT
Subject: CN=68de374d-4d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:61:00:f9:47:70:84:4a:a6:69:51:04:c2:
5a:30:5e:45:be:06:60:26:b8:fe:c3:e6:4c:e9:ae:
c5:5f:c4:3e:30:18:f2:20:eb:57:67:1f:77:29:dc:
e3:7a:44:6b:1e:7a:5e:52:f2:88:54:3b:19:93:9e:
0b:1f:d0:ae:5d:24:ff:42:db:2f:e3:78:03:b5:4e:
92:90:97:db:2f:42:1d:f7:0d:a6:6a:32:43:4e:0e:
e4:d9:ca:3f:8a:28:e5:4e:b2:de:35:50:ab:d6:ce:
e4:72:01:f3:72:42:3e:6f:3d:34:78:c2:c7:ae:05:
d7:42:00:b4:ed:d1:32:b8:1d:cf:91:9c:7d:d2:05:
48:4c:b7:c7:72:a8:70:37:00:02:19:8f:c7:00:ef:
4a:01:d6:de:19:dc:66:b8:1f:25:56:a2:72:2b:94:
44:9d:92:23:63:7d:c1:ee:50:b0:cf:0f:62:df:6e:
78:aa:0c:1e:ed:97:67:3d:57:be:36:01:13:99:ff:
8b:9c:f1:27:f3:39:fb:30:59:83:98:d4:93:28:f5:
bb:c0:d1:42:f3:86:c6:c7:33:5c:b6:b6:7b:27:89:
b1:cb:7a:ac:c8:d9:1f:0a:b0:9e:25:7f:c5:fd:d1:
a1:a7:3b:93:1f:51:ee:0e:3a:9c:92:53:2b:47:0c:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:58:81:ED:51:50:6A:A1:4F:B1:D2:45:DF:78:8E:58:21:4E:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C8140529F6911F0B25244E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0e:78:80:c0:9d:9a:62:60:a1:49:d5:82:d2:eb:92:a5:a1:
50:57:65:4c:07:54:fa:38:40:53:4d:fa:8c:69:b3:b1:c3:50:
eb:d9:a5:de:11:23:f7:6e:af:53:17:81:20:ca:91:29:61:cd:
82:69:bb:6e:8c:c2:a8:50:c5:99:ee:97:1c:6d:3f:71:a0:f6:
9b:07:2c:8c:d5:4b:ae:a0:ee:ae:bb:3c:88:0e:bb:f5:b2:67:
f5:d8:5f:b6:a9:8f:f6:28:c0:fd:a3:c6:25:02:33:2a:6f:ca:
70:aa:2d:6c:b6:98:90:71:07:d8:4e:0e:94:24:f5:ad:ba:bf:
96:eb:d4:e8:f8:89:e9:b9:21:0e:23:d8:41:62:2d:32:c6:9a:
17:99:47:f2:7e:a8:46:93:53:4d:24:ec:06:1d:01:49:4c:6e:
28:5a:89:83:e9:7b:7f:04:6a:74:6a:28:ca:14:58:3a:c7:2c:
b1:b6:5c:cf:f2:5e:1e:5e:d1:0e:68:65:f6:f6:a5:89:d4:16:
18:0a:59:6a:0b:3f:76:47:91:82:a6:bc:19:50:f1:fa:2a:9a:
ce:b9:da:95:1d:6f:3b:f1:c8:62:fe:27:4c:3f:f9:9b:6a:f2:
bc:8f:bb:60:de:7e:6d:ee:84:5c:a1:32:5b:a9:9d:e9:ba:57:
49:29:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:50 2025 by rpki-client