Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86FFF5C952C11F0937C1995DAE4EC9C.roa
File: A86FFF5C952C11F0937C1995DAE4EC9C.roa (raw, json)
Hash identifier: cup7YQOczvupgmcHfaEkPHL/WUmt+bDvhEmT3Or5llU=
Subject key identifier: B5:81:91:34:D4:60:64:EE:F4:CF:6E:64:46:09:57:DF:25:6C:44:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86FFF5C952C11F0937C1995DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 07:45:49 +0000
ROA not before: Fri 19 Sep 2025 07:45:44 +0000
ROA not after: Sun 26 Oct 2025 07:45:44 +0000
asID: 9304
IP address blocks: 45.198.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97366 (0x17c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 07:45:44 2025 GMT
Not After : Oct 26 07:45:44 2025 GMT
Subject: CN=68cd0a2d-5543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:08:de:9b:f9:13:77:6a:cb:de:22:f1:49:
86:fd:d0:ce:2e:7f:c1:a7:64:dd:6b:f2:f1:72:46:
60:f0:23:6c:73:e4:d6:89:6b:8c:a4:5e:83:b6:5d:
4f:cf:56:96:d9:b7:de:a6:f1:92:3d:f0:de:f2:d5:
27:e9:37:39:70:88:f5:43:44:b1:67:1f:85:fc:2e:
af:60:84:60:de:93:df:06:64:07:11:60:c1:b7:4d:
b0:4e:14:2e:5a:8b:4d:a0:9d:22:6d:f2:83:9b:a0:
04:1d:a2:f2:4e:5a:33:0e:34:ef:b4:4a:d8:31:52:
7c:be:b2:ea:5f:da:62:c9:8c:86:bc:d5:a2:db:7c:
88:19:cf:89:66:9b:9e:32:17:0f:0d:02:78:98:70:
95:9e:39:cf:f0:ca:5e:2a:fc:87:53:09:e0:fd:8f:
8d:28:08:69:cd:2b:39:ea:7a:98:ff:80:8f:24:a8:
35:f3:9b:07:39:b5:3e:44:a2:3b:2d:ff:2a:b3:23:
15:e7:09:7c:c4:21:80:27:4a:70:d0:50:f7:65:5e:
ba:6e:e8:1c:33:89:ee:2f:56:c5:c3:3a:d3:49:4c:
56:6f:48:4b:1b:26:9b:e8:b9:11:75:1f:aa:c5:e3:
ef:c9:58:74:93:25:8d:33:78:a4:33:ea:75:56:3e:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:91:34:D4:60:64:EE:F4:CF:6E:64:46:09:57:DF:25:6C:44:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86FFF5C952C11F0937C1995DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:90:e5:13:53:85:76:57:4b:76:fb:ef:a9:47:b7:ef:db:d8:
1a:76:a9:db:96:46:78:e2:00:6d:3e:a1:01:51:a7:46:d6:b4:
83:11:c4:82:7c:2d:69:54:2f:33:10:29:c6:0a:32:53:ba:eb:
ca:f6:3b:b7:4b:62:37:e0:4c:18:35:6a:53:4b:f2:61:a7:bf:
43:b7:aa:28:66:58:9c:67:5f:83:47:bf:31:43:d6:42:d8:32:
26:4b:76:b2:0c:2c:0d:f1:32:d5:df:9c:ea:33:c2:77:bc:31:
13:9e:43:c5:76:b8:97:49:34:9d:52:a0:bd:c2:4c:1f:1e:9d:
e9:b5:5e:8b:7c:35:e7:7b:bc:56:f0:e9:f2:a1:de:28:3d:70:
11:8d:c4:a6:b0:88:09:8c:58:df:f7:87:b8:1f:20:9a:53:32:
6c:da:94:42:6c:47:2f:42:e5:04:0e:b6:d5:d9:03:e9:b7:06:
07:21:5b:40:56:52:e3:30:49:6f:22:18:2d:91:2c:a5:ef:44:
83:10:f9:7c:10:84:56:28:30:ae:86:94:74:3e:f0:27:9a:97:
a6:02:a1:d0:cb:66:79:70:2f:72:e0:c0:38:48:f1:f3:26:6f:
4d:a2:c6:6d:03:67:64:a5:1b:36:48:51:1f:bc:6d:e0:61:49:
a8:11:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:16 2025 by rpki-client