Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9413ECC48A8411F0889059D0DAE4EC9C.roa
File: 9413ECC48A8411F0889059D0DAE4EC9C.roa (raw, json)
Hash identifier: 7FdSiHEVporNg/zacVYH6HRYd+JAE89a2qus8bfTJSE=
Subject key identifier: EC:B0:9B:C0:37:BA:6E:A6:BD:71:C4:3C:3A:80:4F:82:90:0B:B3:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017938
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9413ECC48A8411F0889059D0DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 18:17:28 +0000
ROA not before: Fri 05 Sep 2025 18:17:23 +0000
ROA not after: Wed 27 May 2026 18:17:23 +0000
asID: 395886
IP address blocks: 45.194.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 06:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96568 (0x17938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 18:17:23 2025 GMT
Not After : May 27 18:17:23 2026 GMT
Subject: CN=68bb2938-ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:89:75:85:02:db:d9:81:8a:3c:74:8a:d9:
c5:6f:7d:3d:6a:27:70:f6:a0:15:ab:3c:0d:10:e4:
8d:f4:80:bf:e9:65:8b:21:aa:e3:ee:e6:a5:eb:be:
9f:a0:71:33:ce:71:b4:49:d2:aa:e6:02:62:88:e2:
74:f6:f1:ea:08:9f:2d:51:80:6f:a7:21:d3:ee:13:
e4:cc:90:cd:ad:62:51:1f:31:64:2f:6f:33:9b:c0:
bf:5e:5c:44:be:ce:c2:30:81:bb:2b:19:24:0d:3e:
6d:1d:75:ea:9b:d6:c1:88:06:c6:7c:19:e9:25:9d:
13:ab:55:1c:1a:a0:26:63:c7:7e:34:80:39:8f:c4:
5e:b1:02:39:11:e2:56:a0:76:b2:09:a6:ce:06:f4:
85:e0:aa:61:82:ae:68:1e:b9:2a:74:93:1b:d8:25:
a5:ea:a7:10:5f:5b:45:71:b4:a2:cb:61:51:56:b4:
e4:7a:74:65:46:d2:58:88:a0:27:3f:14:5c:c8:cb:
6b:67:cc:d3:75:91:0a:ad:ab:1c:f8:98:8b:d3:78:
c5:34:8a:37:9b:ca:00:f9:2d:83:fd:7d:63:e8:24:
32:42:9b:8c:dc:00:b3:9c:a5:49:d9:30:e8:14:55:
ed:72:2c:19:37:05:02:ab:8a:16:bb:35:37:44:25:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B0:9B:C0:37:BA:6E:A6:BD:71:C4:3C:3A:80:4F:82:90:0B:B3:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9413ECC48A8411F0889059D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:70:5b:44:98:cb:22:54:a5:af:33:44:20:66:b7:36:cf:46:
fe:97:76:8d:ff:06:1f:c5:3f:80:bc:75:ca:4d:16:5a:d4:8e:
9c:24:77:97:56:42:d6:15:4c:24:8a:4b:3c:73:b0:b9:54:23:
43:fd:11:9b:2a:d2:7c:94:54:ea:ad:1c:39:77:fd:07:36:3a:
33:48:34:2b:d6:d6:18:a7:a5:40:55:be:68:f0:d1:c2:6b:e6:
fa:82:8d:55:56:1f:d1:c1:0d:b7:8c:5a:2c:6a:74:1f:fc:d6:
bb:10:f8:13:b9:0e:e7:74:e6:d0:57:91:4a:1d:c4:fb:96:79:
b8:fc:30:60:53:51:2c:d5:b4:b0:55:5f:4b:e3:12:0e:85:ee:
97:f1:5d:a3:eb:fd:b4:66:6e:09:64:42:c2:db:e6:d8:85:ab:
0b:59:55:ba:a4:00:33:13:9a:b1:48:bd:dd:9b:d2:89:0a:01:
5e:d3:db:18:8e:3c:10:e2:23:64:6e:3f:0a:4a:6c:b3:05:02:
ea:a5:ed:82:b4:04:5a:06:88:15:ae:3d:2d:a1:14:4f:63:26:
99:32:87:90:69:b2:e3:a2:41:1c:c1:52:8f:3b:01:49:bd:f0:
ba:12:bc:51:01:2a:a7:4b:cf:73:42:d5:4d:56:fc:67:6d:c1:
81:a8:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:37:09 2025 by rpki-client